I don’t like it that they enable ECDSA.
Any particular reason for that, or just a general feeling of unease?
There are many reports of ECDSA having chosen suspicious constants and no documentation. Considering that it was developed by NSA’s civil part (NIST), which had also developed backdoored Dual EC DRBG, it’s easy to connect the dots.
Great explanation, thanks :)
I don’t like it that they enable ECDSA.
Any particular reason for that, or just a general feeling of unease?
There are many reports of ECDSA having chosen suspicious constants and no documentation. Considering that it was developed by NSA’s civil part (NIST), which had also developed backdoored Dual EC DRBG, it’s easy to connect the dots.
Great explanation, thanks :)