Pope Dual_EC I

Encyclical

"Curva Cum Ianua". As early as 2007 Shumow and Ferguson had warned that the constants of the Dual_EC_DRBG generator could hide a secret key; in 2013 press reports on the Snowden documents reinforced the suspicion. The generator, a NIST standard and the RSA BSAFE default, was abandoned and then withdrawn. It was the year the community learned to ask where constants come from, and that a backdoor "for the good guys only" does not exist.

Saint page: Saint Dual_EC_DRBG, of Suspicious Randomness

Cardinals

Lucky Thirteen (TLS CBC timing attack) · Android 'Master Key' APK signature bypass (Bluebox)