[CentOS] Elliptic curve on Centos 6.x

[David Benfell]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 01/02/2014 01:22 PM, m.roth at 5-cent.us wrote:
> Eero Volotinen wrote:
>> 
>> Is there nice way to put back EC encryption on Centos?
>> 
>> RHEL disabled it due "patent issues", but is third party
>> providing packages to EC enabled packages to centos ?
> 
> *Which* elliptic curve? I trust you've been reading the revelations
> from Snowdon about the NSA putting a backdoor in the common ones,
> esp. the POSIX ones.

- From what I've been able to find, this is a bit overstated.

There is *one* random number algorithm (Dual_EC_DRBG) associated with
ECC that is believed to have been compromised. That it appeared
vulnerable has long been known; Bruce Schneier wrote about it in 2007.
It also happens to be inefficient and so is not widely used (but a few
commercial products use it).

http://www.wired.com/politics/security/commentary/securitymatters/2007/11/securitymatters_1115

I was unable to find an associated vulnerability in Linux. I trust the
OpenSSL folks would be on top of this faster than you can blink an eye
if it were a current issue. They have not, from what I've seen,
reacted to the revelations.

http://www.reuters.com/article/2013/12/20/us-usa-security-rsa-idUSBRE9BJ1C220131220

- -- 
David Benfell
see https://parts-unknown.org/node/2 if you don't understand the
attachment
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.1.0-ecc (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=//KB
-----END PGP SIGNATURE-----