Hacker News new | past | comments | ask | show | jobs | submit login

Huh, okay. I will try to clarify, apologies if I’m being incoherent. The argument I’m making is that the evidence doesn’t support your original claim or your follow up ask for a secret key.

NSA isn’t trying to (only) make NOBUS backdoors where the NOBUS is forever. If it isn’t forever, it’s not secure in the “Nobody but US(A)” sense implied by NOBUS as thrown around.

NOBUS is a fantasy of a very large security claim because even with a PKRNG, the keys can be stolen. However in the Dual EC case the current PKRNG again will also fall to a CRQC in addition to key theft. Both cases are strictly worse than a purely CSPRNG without a backdoor. The damage done by this kind of sabotage is hard to measure.

The evidence about backdoors points to NSA malfeasance and not towards NSA wanting something that is never insecure as is very strongly implied by the common framing of NOBUS as a concept.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: