Elliptic Curve Back Door - Computerphile

Computerphile1 HN recommenders · 2021–2025
554K views · explainer · evergreen · Uploaded 2018-02-15

Dr Mike Pound explains the suspected backdoor in the Dual_EC_DRBG random number generator and how elliptic curve constants could let someone predict its output.

HN points to it as an intuitive explanation of how NIST standardized a backdoored generator.

Watch on YouTube

4 comments from Hacker News

@Arkanum2021 · in “The NSA's Backdoor in Dual EC”

Computerphile[1] did a video about the specifics of the backdoor in Dual EC DRBG. As i understand it, the hackers replaced a magic number Q with a different value than the standards compliant one, where they had pre-computed P. [1]: [VIDEO]

@m-p-32022 · in “Dueling over Dual_EC_DRGB: Consequences of Corrupting a Standardization Process”

Long story short is that we don't know for sure, but there are some possibilities that's makes it plausible [VIDEO]

@lcnPylGDnU4H9OF2024 · in “Nothing-up-my-sleeve number”

Computerphile video discussing the mathematics around how such a number could have been used in a practical way. [VIDEO] [LINK] When people say, “Don’t roll your own crypto,” it’s because the field is littered with footguns and (to stretch an analogy) guns in cryptography launch explosives.

@qzx_pierri2025 · in “NIST selects HQC as fifth algorithm for post-quantum encryption”

I recommend this video by Computerphile - He talks about how NIST may have been pressured into enforcing compromised (backdoored?) cryptography methods as a standard - Dual_EC_DRBG to be exact. He also gives a super cool/intuitive breakdown on how this came to be. It will definitely grow some food for thought. [VIDEO]

RecommendsView on HN