Security Cryptography Whatever Dual_EC_DRBG with Justin Schuh and Matthew Green
Dec 7, 2024
Matthew Green, a renowned cryptographer known for his passionate takes on security, joins Justin Schuh to dissect the controversial Dual_EC_DRBG. They debate whether this random number generator was a deliberate backdoor by the NSA or merely a colossal blunder. The conversation uncovers the ethical dilemmas of cryptographic standards, the NSA's questionable practices, and the erosion of public trust in secure communications. Their insights blend humor and serious analysis, illuminating the complexities of cryptography in today's world.
AI Snips
Chapters
Transcript
Episode notes
Dicky George's Challenge
- Dickie George, in a 2014 talk, offered dinner to anyone proving Dual_EC_DRBG's exploitability with custom parameters.
- Researchers demonstrated this, but George didn't honor his offer.
SIGINT Enabling Project
- The Snowden documents revealed the SIGINT Enabling Project, a program inserting vulnerabilities into commercial encryption systems.
- This program aimed to enable decryption by the NSA.
NSA's Use of Dual_EC_DRBG
- Dual_EC_DRBG's hardware implementation in widely deployed devices explains NSA's continued use.
- This aligns with their preference for maintaining capabilities, even if outdated.