RSA warns over NSA link to encryption algorithm

[Jazzy]

RSA, the internet security firm, has warned customers not to use one of its own encryption algorithms after fears it can be unlocked by the US National Security Agency (NSA).

In an advisory note to its developer customers, RSA said that a default algorithm in one of its toolkits could contain a "back door" that would allow the NSA to decrypt encrypted data.

It "strongly recommends" switching to other random number generators.

RSA is reviewing all its products.

The advice comes in the wake of New York Times allegations that the NSA may have intentionally introduced a flaw into the algorithm - known as Dual Elliptic Curve Deterministic Random Bit Generation - and then tried to get it adopted as a security standard by the US National Institute of Standards and Technology.

Full article

 

[Nebulous]

.... you lost me on this one. :???:

 

[Evil Eye]

.... you lost me on this one. :???:

One of the algorithms used by RSA might be crackable by the NSA, so it shouldn't be used.

Rather nice of them to say so.