[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [tor-talk] Elliptic Curve Crypto and the NSA
> I’ve been reading a paper that talks about why the NSA told everyone
> to move to quantum resistant crypto. One of the ideas in the paper
> was that they may have broken elliptic curves. I understand that
> they’re used in Tor. Does anyone think that NSA actually has the
> capability to break ECC?
Dual_EC_DRBG, a random number generation algorithm, was very likely
backdoored by the NSA. Tor doesn't use it. There is little evidence that
other EC algorithms have been subverted, although it's possible.
Here's a good resource if you're interested in learning more:
Speculation about the integrity of crypto algorithms is only one facet
of auditing the security of protocols like Tor, and it isn't always the
most fruitful one.
tor-talk mailing list - firstname.lastname@example.org
To unsubscribe or change other settings go to