Solidot: RSA从NSA获得千万美元在其产品中嵌入弱随机数生成器

Solidot

奇客的资讯，重要的东西

RSA从NSA获得千万美元在其产品中嵌入弱随机数生成器
http://solidot.org.feedsportal.com/c/33236/f/556826/s/35139b0d/sc/28/l/0L0Ssolidot0Borg0Cstory0Dsid0F37722/story01.htm
Dec 21st 2013, 12:48

前NSA合同工Edward Snowden泄露的机密文档显示，NSA开发了一种有缺陷的随机数生成算法Dual_EC_DRBG，目的是在加密产品中植入后门。而路透社援引消息人士的话报道，著名加密产品开发商RSA在其软件Bsafe中嵌入了该算法，并将其设为默认使用的随机数生成器。RSA因此成为该算法最重要的传播者，而RSA之所以这么做是因为它从NSA收到了一份价值千万美元的合同。在Snowden泄密之后，RSA随后督促用户停止使用NSA的随机数生成算法。This entry passed through the Full-Text RSS service — if this is your content and you're reading it on someone else's site, please read the FAQ at fivefilters.org/content-only/faq.php#publishers.



You are receiving this email because you subscribed to this feed at https://blogtrottr.com

If you no longer wish to receive these emails, you can unsubscribe here:
https://blogtrottr.com/unsubscribe/cz0/jPbdSR