Live data from Hacker News

Government Announces Steps to Restore Confidence on Encryption Standards

bits.blogs.nytimes.com

11–20 of 132 posts

Re: Government Announces Steps to Restore Confidence on Encryption Standards

#12
Emberassing for Johns Hopkins:

“We’ll have to re-evaluate that relationship,” Matthew D. Green, a cryptography researcher at Johns Hopkins University, wrote in a blog post Thursday. “Trust has been violated.”

(Mr. Green said on Twitter Monday that Johns Hopkins asked him to remove that blog post. He was allowed to reinstate it hours later after the university realized the content was based on public news reports. The university later apologized.)

Re: Government Announces Steps to Restore Confidence on Encryption Standards

#13

It's too fucking late. Government, we don't trust you anymore. You're not a part of us. For once, I'm ashamed of being an American.

Depends what you define as being "an American".. Glenn Greenwald, the main journalist publishing the leaks, asserts his US citizenship and his American identity as the ultimate impetus behind his acts -- his belief in the American Constitution and the rights of American citizens

Re: Government Announces Steps to Restore Confidence on Encryption Standards

#14
post #10
post #6

When I saw 'new details' (edit: this was referring to an old title), I was hoping that the backdoor in Dual_EC_DRBG was either confirmed or denied ... in reality, there's not much new here. The NYT confirmed that their previous article was talking about Dual_EC_DRBG, but that's what everyone (edit: in the cryptography community) expected anyway [1]. We still don't know the exact story behind Dual_EC_DRBG. Maybe the N…

> that's what everyone expected anyway This one sentence is a _remarkably easy way_ to kill a story for the 99.9% of the world who this is news for. "Everyone" indeed.

I suppose that was a bit presumptuous of me. My apologies.

The whole spiel has made several rounds on HN, though [1], and Ars reported again on the matter about a week ago [2]. But I do acknowledge that doesn't necessarily mean much... not everyone has the time (or the inclination!) to follow such matters.

[1] https://www.hnsearch.com/search#request/all&q=dual_ec_drbg&s...

[2] http://arstechnica.com/security/2013/09/the-nsas-work-to-mak...

Re: Government Announces Steps to Restore Confidence on Encryption Standards

#15
post #10
post #6

When I saw 'new details' (edit: this was referring to an old title), I was hoping that the backdoor in Dual_EC_DRBG was either confirmed or denied ... in reality, there's not much new here. The NYT confirmed that their previous article was talking about Dual_EC_DRBG, but that's what everyone (edit: in the cryptography community) expected anyway [1]. We still don't know the exact story behind Dual_EC_DRBG. Maybe the N…

> that's what everyone expected anyway This one sentence is a _remarkably easy way_ to kill a story for the 99.9% of the world who this is news for. "Everyone" indeed.

This is news to me.

Re: Government Announces Steps to Restore Confidence on Encryption Standards

#16
I suspect that NIST is just another government organization trying to do their jobs, and I don't think it's fair that their name got dragged through the mud. The truth is that the NSA practically co-opted NIST's decision-making strategy. I have confidence in NIST. Sadly, I don't have confidence in the NSA to not muddy up the process.

Re: Government Announces Steps to Restore Confidence on Encryption Standards

#17

It's too fucking late. Government, we don't trust you anymore. You're not a part of us. For once, I'm ashamed of being an American.

Agreed. Let's face it, NIST and CMVP have been shoving EC-DRBG down everyone's throats for years. This is in spite of the whole conspiracy around EC-DRBG being achingly old.

There is no new information, no fresh concerns. Anyone remotely connected to cryptography has been suspect of EC-DRBG for years. The only thing that has changed is that the main stream media has picked this up.

"Very well, if that is the way the winds are blowing, let no one say I don't also blow." - Mayor Quimby October, 1994.

Re: Government Announces Steps to Restore Confidence on Encryption Standards

#18
post #13

It's too fucking late. Government, we don't trust you anymore. You're not a part of us. For once, I'm ashamed of being an American.

Depends what you define as being "an American".. Glenn Greenwald, the main journalist publishing the leaks, asserts his US citizenship and his American identity as the ultimate impetus behind his acts -- his belief in the American Constitution and the rights of American citizens

American, Schmerican. What we have here is a group of nationalistic government-employed hominids enforcing their paranoia upon the rest of their species. Justice shouldn't wave flags.

Re: Government Announces Steps to Restore Confidence on Encryption Standards

#19
post #14
post #10

Earlier quoted context omitted.

> that's what everyone expected anyway This one sentence is a _remarkably easy way_ to kill a story for the 99.9% of the world who this is news for. "Everyone" indeed.

I suppose that was a bit presumptuous of me. My apologies. The whole spiel has made several rounds on HN, though [1], and Ars reported again on the matter about a week ago [2]. But I do acknowledge that doesn't necessarily mean much... not everyone has the time (or the inclination!) to follow such matters. [1] https://www.hnsearch.com/search#request/all&q=dual_ec_drbg&s... [2] http://arstechnica.com/security/2013/09/…

"The whole spiel has made several rounds on HN, though [1]"

If you look at this discussions, HN commenters were very skeptical this was an NSA backdoor. The speculative possibility isn't news; the fact very much is.

https://news.ycombinator.com/item?id=4580434

Post reply on HN