Elektrine lite

← Feed

@djb@mastodon.cr.yp.to

Post #1249813

2026-04-13 01:55 UTC

@rsalz @darkuncle Okay, so you're not disputing the authenticity of https://www.reuters.com/article/us-usa-security-rsa-idUSBRE9BJ1C220131220/ regarding NSA paying the RSA company to roll out Dual EC. Now let's look at an IETF part of the Dual EC story. Are you disputing the accuracy of, e.g., https://web.archive.org/web/20251229182801/https://blog.cryptographyengineering.com/2017/12/19/the-strange-story-of-extended-random/ and https://web.archive.org/web/20260331174508/https://sockpuppet.org/blog/2015/08/04/is-extended-random-malicious/ saying NSA paid your colleagues Paul Hoffman and Eric Rescorla to coauthor with NSA a series of IETF drafts on "Extended Random" etc.? The payment is again overt leverage towards the consultants.

Replies (1)

  • @rsalz@ioc.exchange 2026-04-13 16:41

    @djb I have no idea who NSA paid. I do not dispute that the IETF approved an RFC that standardized their Dual EC. Again, what I have said multiple times is that I have seen no involvement *since Dual EC* that the NSA influenced IETF decisions. This is tiresome. I'm done.

    Open ##1249816