Tag Archives: dual_ec_drbg

BoringSSL 的 FIPS 140-2 驗證

看到由 Google 主導的 BoringSSL 有計劃將其中一塊申請 FIPS 140-2 的驗證計畫 (BoringCrypto 的部份):「FIPS 140-2」。 其中 FIPS 140-2 最有名的後門應該是 Dual_EC_DRBG (定義於 NIST SP 800-90A,被 FIPS 140-2 引用),所以特地講清楚他們選擇哪個演算法: FIPS 140-2 requires that one of its PRNGs be used (which they call DRBGs). In BoringCrypto, we … Continue reading

Posted in Computer, Library, Murmuring, Privacy, Security, Software|Tagged , , , , , , , , , |Leave a comment