Post #1249816

2026-04-13 16:41 UTC

@djb I have no idea who NSA paid. I do not dispute that the IETF approved an RFC that standardized their Dual EC. Again, what I have said multiple times is that I have seen no involvement *since Dual EC* that the NSA influenced IETF decisions. This is tiresome. I'm done.

Replies (2)

@djb@mastodon.cr.yp.to 2026-04-13 19:10

@rsalz Example of a quote from an NSA employee on an IETF mailing list in 2025: "As the CNSA 2.0 profiles should make clear, we are looking for products that support /standalone/ ML-DSA-87 and /standalone/ ML-KEM-1024. If there is one vendor that produces one product that complies, then that is the product that goes on the compliance list and is approved for use. Our interactions with vendors suggests that this won't be a problem in most cases." See https://blog.cr.yp.to/20251004-weakened.html#tls for further quotes.

Open ##1249819
@KoosPol@mastodon.nl 2026-04-13 20:09

@rsalz What you haven't seen, or what you believe is hardly relevant. Take a step or two back and observe how the NSA has operated on these topics. You are foolish to infer IETF is operating without NSA influencing it. And @djb has brought the receipts. There really is no second guessing here. @djb

Open ##1249821