Компрометация стандартов шифрования АНБ

Уровень 0 · материалов: 3

В кластер входят документы о намеренном внедрении уязвимостей в стандарты шифрования спецслужбами США, но не входят документы об общем переходе на протокол HTTPS.

Общие признаки: деятельность АНБ, алгоритм Dual_EC_DRBG, создание бэкдоров для слежки, влияние на глобальную кибербезопасность

Группа выше: Реализация криптографии и её компрометация

Материалы

• #12070 — RSA Security and the NSA Backdoor Scandal — Представитель этого кластера

  RSA Security получила $10 млн. от АНБ за использование заведомо дырявого генератора псевдослучайных чисел — Akr0n

  Смысл: The main idea is that the NSA bribed RSA Security to implement a compromised encryption standard (Dual_EC_DRBG) to facilitate government surveillance, illustrating a conflict between state intelligence goals and global cybersecurity.

  RSA Security allegedly accepted a $10 million bribe from the NSA to use a flawed random number generator that created a backdoor for government spying.

• #2072 — RSA Security and the NSA Backdoor Controversy

  RSA Security заявила о наличии АНБ-бэкдора в своих продуктах — Scratch

  Смысл: The main idea is that the NSA deliberately influenced the NIST certification of the Dual EC_DRBG algorithm to create a backdoor for surveillance, which was then integrated into widely used products by RSA and Microsoft, compromising global digital security.

  RSA Security admitted using a NIST-certified random number generator (Dual EC_DRBG) that contained a backdoor created by the NSA, affecting millions of systems including Windows.

• #19006 — NSA's Secret Campaign to Undermine Internet Encryption

  Сноуден пролил свет на ситуацию со взломом криптографии. Все плохо — Akr0n

  Смысл: The main idea is that the US government, primarily through the NSA and its allies, has systematically compromised global internet security by infiltrating encryption standards and commercial software to ensure state surveillance capabilities.

  Leaked documents reveal the NSA's multi-billion dollar 'Bullrun' program designed to break internet encryption through backdoors, corporate collaboration, and the undermining of global security standards.