Re: [TLS] Extended random is NSA backdoor

Hi all,

I can't speak to anyone's intentions, but note that these aren't the only I-Ds that add more randomness. As described in our paper, <http://tools.ietf.org/html/draft-hoffman-tls-additional-random-ext-01> is quite similar.

The idea of adding more random bits seems to have been fairly popular in the 2006-2010 timeframe.

There may be more proposals to do this, for example using <http://tools.ietf.org/html/rfc6358>, that I missed.

S

On Mar 31, 2014, at 12:06 PM, Trevor Perrin <trevp@trevp.net> wrote:

> Hi Rene,
> 
> The revelation that NSA used this Working Group in an attempt to
> promote TLS extensions which amplify the backdoor is new:
> 
> https://datatracker.ietf.org/doc/draft-rescorla-tls-opaque-prf-input/
> https://datatracker.ietf.org/doc/draft-rescorla-tls-extended-random/
> 
> 
> Trevor
> 
> 
> On Mon, Mar 31, 2014 at 8:33 AM, Rene Struik <rstruik.ext@gmail.com> wrote:
>> Dear colleagues:
>> 
>> Not sure what is new here. The paper (with an impressive list of nine (!)
>> co-authors) seems to be simply a validation of results already described in
>> the Crypto 2007 rump session paper by Ferguson et al and in the teachings of
>> a 2005 US patent application.
>> 
>> Best regards, Rene
>> 
>> 
>> 
>> On 3/31/2014 10:45 AM, Paul Ferguson wrote:
>>> 
>>> -----BEGIN PGP SIGNED MESSAGE-----
>>> Hash: SHA256
>>> 
>>> On 3/31/2014 7:40 AM, Tom Ritter wrote:
>>> 
>>>> Looks like this has the technical details: http://dualec.org/
>>>> 
>>> Gracias.
>>> 
>>> - - ferg
>>> 
>>>> -tom
>>>> 
>>>> 
>>> 
>>> - -- Paul Ferguson
>>> VP Threat Intelligence, IID
>>> PGP Public Key ID: 0x54DC85B2
>>> -----BEGIN PGP SIGNATURE-----
>>> Version: GnuPG v2.0.22 (MingW32)
>>> Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
>>> 
>>> iF4EAREIAAYFAlM5f3wACgkQKJasdVTchbKYNgEAiwR5zR2qfSRfdEkXQx7CihyY
>>> QD3xZG9bkx8+40Gc+BYA/Avz/59WC1sv8KodlV4Z81rJqMF8uKrrxn2A6SR80lgC
>>> =NxYj
>>> -----END PGP SIGNATURE-----
>>> 
>>> _______________________________________________
>>> TLS mailing list
>>> TLS@ietf.org
>>> https://www.ietf.org/mailman/listinfo/tls
>> 
>> 
>> 
>> --
>> email: rstruik.ext@gmail.com | Skype: rstruik
>> cell: +1 (647) 867-5658 | US: +1 (415) 690-7363
>> 
>> 
>> _______________________________________________
>> TLS mailing list
>> TLS@ietf.org
>> https://www.ietf.org/mailman/listinfo/tls
> 
> _______________________________________________
> TLS mailing list
> TLS@ietf.org
> https://www.ietf.org/mailman/listinfo/tls
> 

-- 
Stephen Checkoway