Re: [tor-talk] Elliptic Curve Crypto and the NSA

[Michael McConville <mmcconv1@xxxxxxxxxxxxxxxxxxx>]

Justin wrote:
> Iâve been reading a paper that talks about why the NSA told everyone
> to move to quantum resistant crypto.  One of the ideas in the paper
> was that they may have broken elliptic curves.  I understand that
> theyâre used in Tor.  Does anyone think that NSA actually has the
> capability to break ECC?

Dual_EC_DRBG, a random number generation algorithm, was very likely
backdoored by the NSA. Tor doesn't use it. There is little evidence that
other EC algorithms have been subverted, although it's possible.

Here's a good resource if you're interested in learning more:

	http://safecurves.cr.yp.to/

Speculation about the integrity of crypto algorithms is only one facet
of auditing the security of protocols like Tor, and it isn't always the
most fruitful one.
-- 
tor-talk mailing list - tor-talk@xxxxxxxxxxxxxxxxxxxx
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk