Security Cryptography Whatever Dual_EC_DRBG with Justin Schuh and Matthew Green
Dec 7, 2024
Matthew Green, a renowned cryptographer known for his passionate takes on security, joins Justin Schuh to dissect the controversial Dual_EC_DRBG. They debate whether this random number generator was a deliberate backdoor by the NSA or merely a colossal blunder. The conversation uncovers the ethical dilemmas of cryptographic standards, the NSA's questionable practices, and the erosion of public trust in secure communications. Their insights blend humor and serious analysis, illuminating the complexities of cryptography in today's world.
AI Snips
Chapters
Transcript
Episode notes
The Initial Debate
- Justin Schuh and David Adrian had a debate about Dual_EC_DRBG.
- Justin, an exploits expert, didn't believe it was intentionally backdoored, sparking a larger discussion.
Backdoors vs. Vulnerabilities
- Exploits often resemble backdoors, making intent difficult to determine from a technical perspective alone.
- Understanding the context and history of vulnerabilities is critical.
Dual_EC_DRBG's Structure
- Dual_EC_DRBG's structure resembles a keyed backdoor, allowing prediction of future outputs with specific knowledge.
- This doesn't automatically imply malicious intent but raises strong suspicion.