173
NSA is sabotaging cryptographic standards to weaken it. Act now to stop it. (nsa.2026.action.cr.yp.to)
submitted 2 months ago by to c/technology@lemmy.world
6 comments fedilink hide all child comments
 

cross-posted from: https://piefed.world/c/tech/p/1235129/nsa-is-sabotaging-cryptographic-standards-to-weaken-it-act-now-to-stop-it

you are viewing a single comment's thread
view the rest of the comments
[–] 24 points 2 months ago* (last edited 2 months ago) (1 child)

Sure, but lots of people thought it was crazy conspiracy thinking that the NSA backdoored certain Elliptic Curves CSPRNGs years ago.. yet it turned out they in fact did, and successfully, and it took years to come out. Whether or not some 'threat model' applies to the situation.

The chances of a normal person being targeted by some obscure NSA backdoor is very low, certainly; but that doesn't refute the historical fact that they do try to subvert standards processes.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 12 points 2 months ago

    I think it's funny to think that the NSA has probably defeated RSA and those sketchy ECDSA curves, but they still haven't broken AES because its symmetric.

    that they do try to subvert standards processes.

    This is why RSA is considered weak even at 4096. No hacker or APT is gonna break it but the NSA probably can and probably has, even if it was some loophole implementation bug.

    When you assume nation state funding and leverage, a lot of baseline security standards go out the window.

  • permalink
  • fedilink
  • source
  • parent