Re: [TLS] Extended random is NSA backdoor

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 3/31/2014 7:24 AM, Watson Ladd wrote:

> Dear all, Reuters reports "The NSA played a significant role in the
> origins of Extended Random. The authors of the 2008 paper on the
> protocol were Margaret Salter, technical director of the NSA's
> defensive Information Assurance Directorate, and an outside expert
> named Eric Rescorla.
> 
> Rescorla, who has advocated greater encryption of all Web traffic, 
> works for Mozilla, maker of the Firefox web browser. He and
> Mozilla declined to comment. Salter did not respond to requests for
> comment."
> 

Please provide a pointer for this reference.

Thanks,

- - ferg

> I'd like some explanation, particularly given that 
> draft-rescorla-tls-extended-random-02 contains nothing resembling
> an explanation for why the randomness needs to be extended if ECDHE
> is being used, which it is on all DoD applications. Furthermore,
> this confirms that the IAD inserts backdoors into products.
> 
> For those who aren't aware, extended random makes it easier to
> exploit the Dual EC PRNG.
> 
> Sincerely, Watson Ladd
> 
> _______________________________________________ TLS mailing list 
> TLS@ietf.org https://www.ietf.org/mailman/listinfo/tls
> 
> 

- -- 
Paul Ferguson
VP Threat Intelligence, IID
PGP Public Key ID: 0x54DC85B2
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (MingW32)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iF4EAREIAAYFAlM5e28ACgkQKJasdVTchbLp8AD+I+MOgHSlv9trQsMNBPufPG78
GvqeXGJCZEbfaUIQZZcA/RMXavgDbx33StTXoAVjgxG+xjzdtGh0CDh68g/nH4Gu
=pOId
-----END PGP SIGNATURE-----