logoalt Hacker News

tptacektoday at 3:36 AM1 replyview on HN

Which PQC standard are you suggesting they pushed, and how did they push it? Flesh the argument out.


Replies

vlovich123today at 4:05 AM

That’s a very unfair position to take when dealing with secret agencies who try very hard to obfuscate this stuff - it is hard to provide evidence for in the moment.

The government has intentionally acted to weaken DES, standardized Dual_EC_DRBG, performed subtle subterfuge through interfering how NIST operates to inject weaknesses and vulnerabilities, trying to weaken SSL and IPSec, 4G smartphone encryption.

These are all documented examples of the NSA engaging in bad faith. So whether or not it is happening in this particular case, there’s now just zero trust in the institutions acting in good faith. And given it took decades for the actions to come out after they were taken, how do you expect someone to answer your request to present evidence there’s anything nefarious happening now?

Anyway, that’s what I think a fleshed out argument would look like

show 1 reply