Skip Links

Network World

  • Social Web 
  • Email 
  • Close

Did NSA leave itself an encryption back door?

'Net Buzz By Paul McNamara , Network World , 11/19/2007
McNamara
  • Share/Email
  • Comment
  • Print

Is there any better indication of how far our freedoms have eroded than the frequency and vigor with which security experts question the means and motivation behind U.S. government actions purportedly intended to keep us safe? Suspicion of the government has always been natural, of course, but today it has become - quite rightfully - a defense mechanism of the first order.

Our latest example comes from the field of cryptography: Security consultant Bruce Schneier, leaning on analyses from other experts, last week questioned why one of four government-sanctioned random-number generators -- the one "three orders of magnitude slower than its peers" -- includes what "can only be described as a back door."

In addition to the vulnerability, which Schneier says would be enough to spook cryptographers, there is this to know about the suspect random-number generator: It's one of the chosen four only because the National Security Agency insisted.

The back door boils down to a question of who, if anyone, possesses a "secret set of numbers that can act as a kind of skeleton key," according to Schneier:

"Of course, we have no way of knowing whether the NSA knows the secret numbers that break Dual_EC-DRBG. We have no way of knowing whether an NSA employee working on his own came up with the constants -- and has the secret numbers. … Maybe nobody does. … We only know that whoever came up with them could have the key to this back door. And we know there's no way for NIST -- or anyone else -- to prove otherwise."

Which brings us back to distrust: Who at this point is willing to grant the government the benefit of the doubt? You don't have to be a conspiracy theorist to be worried.

Jail for online poker players?

First-term Massachusetts Gov. Deval Patrick is the gambling hypocrite's gambling hypocrite.

Patrick has been something of a hero to those of us in the Bay State who believe that grownups should be able to dispose of their disposable income as they see fit, even if that means blowing it on a game of chance or skill inside of a casino. He's been pushing a controversial plan to open three such gambling houses here, which would spare his constituent gamblers - including poker players like yours truly - the trouble of driving to Connecticut casinos and keep the resultant tax revenue here where it belongs. It's simply the right thing to do.

  • Share/Email
  • Comment
  • Print
Partner Content

Brilliantly simple security and control solutions for email, web and endpoint

www.sophos.com

Stopping data leakage

Learn how to exploit your current security investment to control the information that flows into, through and out of your network.

Download the white paper.

Why detection rates aren't enough

Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask prospective vendors to get the right endpoint solution.

Download the white paper.

Applications: taking back control

Employees installing unauthorized applications is a growing threat to business security and productivity. Cost-effectively reduce this threat by integrating control into your malware protection.

Learn more today.

Comments (2)
Login
Forgot your account info?

Government freedomsBy gerry on November 27, 2007, 10:36 amGod, where do these idiots come from...and why do they all seem to migrate to government? Yeeesch....

Reply | Read entire comment

Does NSA have a backdoor to cryptographic random-number generator?By Paul McNamara on November 15, 2007, 8:56 amIs there any better indication of how far our freedoms have eroded than the frequency and vigor with which security experts question the means and motivation behind...

Reply | Read entire comment

View all comments

Add comment
Anonymous comments subject to approval. Register here for member benefits.
Have a NetworkWorld account? Log in here. Register now for a free account.

Videos

rssRss Feed
Get instant email notification when white papers, webcasts, executive guides are added to our library. Stay informed and up-to-date with the latest on IT Technologies with Network World's Resource Alerts.
Network World,to go. Wherever you are. Breaking news delivered to your mobile device. Select the hottest topics in networking and start receiving Network World on your mobile device today.