Elliptic Curve Back Door - Computerphile
Computerphile1 HN recommender · recommended in 1 month, 2021–2025
explainer · intermediate · evergreen · 2021–2025 on HN
Dr Mike Pound explains the suspected backdoor in the Dual_EC_DRBG random number generator and how elliptic curve constants could let someone predict its output.
HN points to it as an intuitive explanation of how NIST standardized a backdoored generator.
Up next
8 mo on HNTempleOS | Down the Rabbit Hole
Fredrik Knudsen
7 HN recommender · 2019–2022
11 mo on HNBehind the Scenes of iOS Security
Black Hat
9 HN recommender · 2016–2026
11 mo on HNWhy Electronic Voting Is Still A Bad Idea
Tom Scott
11 HN recommender · 2020–2026
11 mo on HNBut how does bitcoin actually work?
3Blue1Brown
15 HN recommender · 2017–2024
8 mo on HNDiffie-Hellman Key Exchange
Art of the Problem
9 HN recommender · 2016–2024
7 mo on HNBlackHat USA 2011: SSL And The Future Of Authenticity
Christiaan008
9 HN recommender · 2011–2017
8 mo on HNBlockchains Are a Bad Idea (James Mickens)
HBS Digital Initiative
8 HN recommender · 2018–2023
6 mo on HNLine Goes Up – The Problem With NFTs
Folding Ideas
12 HN recommender · 2022–2026
7 mo on HNTheory and Practice of Cryptography
Google TechTalks
5 HN recommender · 2011–2019
6 mo on HNWhy Electronic Voting is a BAD Idea - Computerphile
Computerphile
7 HN recommender · 2015–2025
5 mo on HNThe Future is a Dead Mall - Decentraland and the Metaverse
Folding Ideas
6 HN recommender · 2023–2025
5 mo on HNBitcoin 2012 London: Mike Hearn
Independent POV
6 HN recommender · 2013–2014
4 comments from Hacker News
I recommend this video by Computerphile - He talks about how NIST may have been pressured into enforcing compromised (backdoored?) cryptography methods as a standard - Dual_EC_DRBG to be exact. He also gives a super cool/intuitive breakdown on how this came to be. It will definitely grow some food for thought. ▶ this video
Computerphile video discussing the mathematics around how such a number could have been used in a practical way. ▶ this video link When people say, “Don’t roll your own crypto,” it’s because the field is littered with footguns and (to stretch an analogy) guns in cryptography launch explosives.
Long story short is that we don't know for sure, but there are some possibilities that's makes it plausible ▶ this video
Computerphile[1] did a video about the specifics of the backdoor in Dual EC DRBG. As i understand it, the hackers replaced a magic number Q with a different value than the standards compliant one, where they had pre-computed P. [1]: ▶ this video