Skip to content
0:00 / 0:00

#dual_ec_drbg#ellipticcurve#backdoor

Elliptic Curve Back Door - Computerphile

Computerphile

2.6M subscribers • 66 videos on Hallway

YouTube
  • Recommended by 1 person: 1 on Hacker News.
  • Presented by Mike Pound, University of Nottingham

Intermediate. Assumes working knowledge.

554K views8 years ago1 recommendation

SecurityComputer scienceCryptographyPrivacy and surveillanceAlgorithms

Dr Mike Pound explains the mathematics behind the suspected NSA backdoor in the Dual_EC_DRBG random number generator.

The back door that may not be a back door... The suspicion about Dual_EC_DRBG - The Dual Elliptic Curve Deterministic Random Bit Generator - with Dr Mike Pound. EXTRA BITS: youtu.be/XEmoD06_mZ0 Nothing up my sleeve Numbers: youtu.be/oJWwaQm-Exs Elliptic Curves: youtu.be/NF1pwjL9-DE facebook.com/computerphile twitter.com/computer_phile This video was filmed and edited by Sean Riley. Computer Science at the University of Nottingham: bit.ly/nottscomputer Computerphile is a sister project to Brady Haran's Numberphile. More at bradyharan.com

Why it's here

1 person recommends this

What people say. Recommended as an exceptionally clear and intuitive explanation of how the Dual_EC_DRBG backdoor works mathematically.

qzx_pierrion Hacker News • Recommends

On “NIST selects HQC as fifth algorithm for post-quantum encryption”

I recommend this video by Computerphile - He talks about how NIST may have been pressured into enforcing compromised (backdoored?) cryptography methods as a standard - Dual_EC_DRBG to be exact. He also gives a super cool/intuitive breakdown on how this came to be. It will definitely grow some food for thought. link to this video

Arkanumon Hacker News • Mentions

On “The NSA's Backdoor in Dual EC”

Computerphile1 did a video about the specifics of the backdoor in Dual EC DRBG. As i understand it, the hackers replaced a magic number Q with a different value than the standards compliant one, where they had pre-computed P. 1: link to this video

m-p-3on Hacker News • Mentions

On “Dueling over Dual_EC_DRGB: Consequences of Corrupting a Standardization Process”

Long story short is that we don't know for sure, but there are some possibilities that's makes it plausible link to this video

lcnPylGDnU4H9OFon Hacker News • Mentions

On “Nothing-up-my-sleeve number”

Computerphile video discussing the mathematics around how such a number could have been used in a practical way. link to this video link When people say, “Don’t roll your own crypto,” it’s because the field is littered with footguns and (to stretch an analogy) guns in cryptography launch explosives.