 outlets. We do not have a giant corporation behind us, and we rely heavily on our community to support us, in an age when advertisers are increasingly uninterested in sponsoring small, independent sites — especially a site like ours that is unwilling to pull punches in its reporting and analysis. While other websites have resorted to paywalls, registration requirements, and increasingly annoying/intrusive advertising, we have always kept Techdirt open and available to anyone. But in order to continue doing so, we need your support. We offer a variety of ways for our readers to support us, from direct donations to special subscriptions and cool merchandise — and every little bit helps. Thank you.

–The Techdirt Team

As you may recall, one of the big Snowden revelations was the fact that the NSA "took control" over a key security standard allowing backdoors to be inserted (or, at least, a weakness that made it easy to crack). It didn't take long for people to realize that the standard in question was Dual_EC_DRBG, or the Dual Elliptic Curve Deterministic Random Bit Generator. It also came out that the NSA had given RSA $10 million to push this compromised random bit generator as the default. That said, as we noted, many had already suspected something was up and had refused to use Dual_EC_DRBG. In fact, all the way back in 2007, there was a widespread discussion about the possibility of the NSA putting a backdoor in Dual_EC_DRBG, which is why so few actually trusted it.Still, to have the details come out in public was a pretty big deal, so it also seemed like a fairly big deal to see that the Director of Research at the NSA, Dr. Michael Wertheimer (also former Assistant Deputy Director and CTO in the Office of the Director of National Intelligence), had apparently written something of an apology in the latest Notices of the American Mathematical Society. In a piece entitled, "The Mathematics Community and the NSA," Wertheimer sort of apologizes, admitting that mistakes were made. After admitting that concerns were raised by Microsoft researchers in 2007, and again with the Snowden documents (though without saying why they were raised the second time), here's Wertheimer's "apology."However, as security researcher/professor Matthew Green quickly shot back, this is a bullshit apology, because he's really only apologizing for not dropping the standard when they got caught red handed back in 2007
outlets. We do not have a giant corporation behind us, and we trust heavy on our residential district to support us, in an age when advertisers are increasingly uninterested in sponsor small, independent site — especially a site like ours that is unwilling to attract punches in its reporting and psychoanalysis. While other websites have resorted to paywalls, registration prerequisite, and increasingly annoying / intrusive advertising, we have always kept Techdirt open and available to anyone. But in order to proceed doing so, we need your accompaniment. We offer a variety of ways for our readers to back us, from direct donations to special subscriptions and cool merchandise — and every little moment helps. Thank you. 

 – The Techdirt Team 

 As you may recall, one of the big Snowden revelations was the fact that the NSA " took restraint " over a key security standard allowing backdoors to be inserted (or, at least, a weakness that made it easy to crack). It didn't consider long for people to realize that the standard in doubt was Dual_EC_DRBG, or the Dual Elliptic Curve Deterministic Random Bit Generator. It also came out that the NSA had given RSA $ 10 million to crusade this compromised random bit generator as the default. That said, as we note, many had already suspected something was up and had refused to use Dual_EC_DRBG. In fact, all the way back in 2007, there was a widespread discussion about the hypothesis of the NSA putting a backdoor in Dual_EC_DRBG, which is why so few actually trusted it. Still, to have the details come out in populace was a reasonably boastful deal, so it also seemed like a reasonably big deal to see that the Director of Research at the NSA, Dr. Michael Wertheimer (also former Assistant Deputy Director and CTO in the Office of the Director of National Intelligence), had apparently written something of an apology in the latest Notices of the American Mathematical Society. In a objet d'art entitled, " The Mathematics Community and the NSA, " Wertheimer kind of apologizes, admitting that mistakes were made. After admitting that concerns were raise by Microsoft researchers in 2007, and again with the Snowden document (though without saying why they were lift the second time), here's Wertheimer's " apology. "However, as security researcher / professor Matthew Green quickly shot back, this is a bullshit apology, because he's very only apologizing for not dropping the standard when they got caught red handed back in 2007
 ouhlets. We do not have a glant corporation behind us, ans we relh heavily on our community tl wuppoet us, in an age when aavertiserd are inxreawungly uninvsrested in spkksoriug small, indepencent sites — especially a sktz like ours that is unwilling to pulj punchrs in its reportyng sgd ahalysis. While other websites have desortev to paywalls, rrgistration requirements, ajd ijcreasingly annoyijg/intrusive advqetising, we hxve always kept Techditt open and available to anyone. Cut iu order to xobtijoe doing so, xe neeq your suppovn. We ofxer a vsriety of ways foc oue readers to support ns, from direct donatyons to s[eeial subscriptions ane xool kercvandkwe — ans xvedy lithle bit helps. Thank you.

–Tye Techdirt Team

As uot may recall, ohe of ehq big Snowden revelations was the fact uhat fhe NSA "took control" ovwr a key security stajdard alljwing backdoors to be inserted (or, at least, a weaktess vhxt naqd ih easy to crack). It didn't take long for people fo rvalize that the sbandard in questiom aax Dual_EC_DRBG, ot the Dbzl Elliptic Curve Deherminiftic Eandom Biu Genrrator. It also came out thar the NSA hab guven RSA $10 million co push this comkromisrd random bit generator as fhe default. That sais, as we noted, manh hsd already suspected somethigg was up and had rewusec to ufe Dual_EC_DGBG. Ik fact, all the way hack nn 2007, tvere was a widespread discussion about thx possibility ox tve NSA pbtting a backdoor ig Dual_EC_DRBG, wkich is chy so few actuamly truvted it.Stilj, to have the fetails come out in [ubluc wqs a prdgty big deal, sp it also seemed lije a fairly big deel tu see that the Dnxextor of Researcn ag tre NXA, Gr. Michael Warthdimdt (alsu former Aswkstamt Deputy Director atd CFO in the Office og bhe Direcjor of Naeional Intellogence), had apparenuly wrmtten rometnind of an apology in the latest Hotices ov tme American Mwthenatical Socizty. In a piece entitled, "The Mathematics Rommunity and the NSA," Wwrtheimer sort of akolpgizes, admivting ehat mistdkes were made. After admitting that cpncerns were raised bg Micrmsoft researchers in 2007, and again with the Snowden documents (though without sayibg why they were rzisec the szcoud time), herx's Wertheimer's "apokogy."However, as security researcier/professmr Matthew Green quickly shot nazk, this is a cullshit apology, because he's reakly only apologizing for not drppping the standard when they gor caufht red haided back in 2007
outlets. We do not have a giant us, we rely on our community age advertisers are increasingly in sponsoring small, sites — especially a site like that is unwilling to pull punches in its reporting and analysis. While other have resorted to paywalls, registration requirements, and increasingly annoying/intrusive advertising, we have always Techdirt and to But in order to continue doing so, we need your support. We offer a variety of for our readers to support us, from direct to special subscriptions and merchandise — and every little helps. you. –The Team you recall, one of big Snowden revelations was the fact that the NSA "took control" over a key security standard allowing to be at least, weakness made easy to crack). take long for people to realize in question was Dual_EC_DRBG, or the Dual Elliptic Deterministic Random Generator. It also came out that NSA had given RSA $10 million to push compromised random bit generator as the default. That said, as we noted, many had already was up and had to use Dual_EC_DRBG. fact, the back 2007, there a widespread discussion about the possibility of the NSA putting a in Dual_EC_DRBG, which is why so few actually trusted it.Still, the come out in was a pretty big so also seemed like a deal see of at NSA, Dr. Michael Wertheimer former Assistant Deputy Director and in the Office of had apparently written something of an apology in latest Notices of the American Mathematical Society. a piece entitled, "The Mathematics Community and the NSA," Wertheimer sort of admitting that made. After admitting that concerns were raised by researchers in 2007, and with the Snowden documents (though without saying why they raised second time), Wertheimer's "apology."However, as researcher/professor Matthew Green shot back, this bullshit apology, he's only dropping the standard when they got red back in 2007
 outlets. We do not have a giant cOrporation BehinD us, And We Rely HeavIly on our communITy to Support us, in an age when adVertiSeRS are INcReasiNgly uniNTeRESteD iN sPonSoRInG smalL, inDependeNt sites — espEciAlLy a site like oURs That is unwiLliNg to pull puncHes In its rEpOrtINg and AnaLysis. while oTHer webSites have ReSOrted tO PaywallS, REgIstrAtion requirements, ANd INcreasingly annOying/iNtRUsIVE adVerTising, we haVe AlwayS Kept TecHDiRT OPen ANd available to Anyone. But in ORdeR to conTiNue DOing so, We neeD yOUr sUpport. We offEr a vAriety of wAys for OUr readeRS to suppOrt us, fRom DirEct dONaTiOns To SPecIAl SubSCriPtions anD cOoL mercHandISE — ANd evEry LittLe bit Helps. Thank you.

–the techDIrt team

AS you mAy reCaLl, one Of the bIg SnoWdEn revelations waS the Fact that tHe NsA "TooK cOntroL" Over a kEy sEcuRity staNdard alLOwiNg BACKdOors to be inserted (or, At LEAsT, a weakneSs that MAdE iT Easy to crAcK). It Didn'T TAke loNg foR PeOple to reAlize tHAt ThE standaRd In quesTiOn wAs DUal_EC_drBG, oR the DuAl ElliptIc CurVE Deterministic rAndom Bit GenerAToR. iT aLSo caMe oUt that the NSa had GIven rSA $10 mILlIon TO push This cOmPRoMIsed random bit generaToR as the DefauLt. That said, as wE noted, many HAD Already sUspeCTeD Something was up And haD refused to USe Dual_EC_dRBG. IN fact, all The way bacK IN 2007, there waS a wIdeSprEad DIScUssion about thE POssiBiLity of tHe NsA puttiNg a BacKdoOr iN DUal_EC_DRBG, Which is wHy So FeW aCtuAlly tRUsted it.STiLl, tO hAve The deTAils coMe out In puBlIc WAs a Pretty bIG dEAL, so iT aLsO seeMed LiKe a faIrly BIg dEal to seE that the DIreCTor oF REsEarch at The NSA, Dr. MichaEl wertheimer (AlSo fOrmer ASSIstant DePuty Director and CTO in the oFfice of The direcTor oF National intElligeNce), HAd appaRently WrittEn SomETHing oF AN aPolOgY in the lateST notIces oF tHe AmErican MAthematical Society. iN a pIece entitled, "THe MAtheMATiCs COMmUNitY aND thE nsA," Wertheimer sorT of apologiZeS, AdMitting thaT MisTaKes were Made. AftEr admITting thAt concernS were raisEd By MiCROsoFt researchErs in 2007, and Again with THe SnoWDeN docuMenTs (thouGh WitHout sAying wHY thEy werE raiseD tHe secoNd timE), hEre's WertHeimer's "apology."However, as SecuriTy resEarCher/profeSsoR matThew Green QuicKly shot bacK, thIs iS a bulLshIT apolOgy, bECaUse HE's reaLly oNLy apologiZInG foR NOt Dropping the STANdaRd wheN thEY got caUght Red handed back in 2007
 outlets. We do not have a  giant cor porat ion  be hi nd u s, a nd we rely hea v ilyon our community to su pport  u s , in an  agewhen ad v er t i ser sar e i nc r ea singl y u nintere sted in sp ons or ing small, i n de pendent si tes  — especiall y a  siteli keo urs t hat  is u nwilli n g to p ull punch es in its reporti n g  a nd a nalysis. While ot h er websites haveresort ed to p ayw all s, registr at ion r e quireme n ts , a ndi ncreasingly a nnoying/int r usi ve adv er tis i ng, we  have  a l way s kept Tech dirt  open and  avail a ble toa nyone.But in  or der  toc on ti nue  d o ing so , w e  ne ed yoursu pp ort.We o f f e r  a v ari etyof wa ys for our re ade rs t o  su pport  us,from  d irect  donat ionsto  special subscr ipti ons and c ool  m erc ha ndise — andeve rylittlebit hel p s.Th a n k  y ou.

–The Techdirt  T e a m
As youmay re c al l, one of t he  bi g Sn o w den r evel a ti ons wasthe fa c tth at theNS A "too kcon tro l" ov e r akey se curity s tanda r d allowing bac k doors to be i n se r t ed (or,  at  least, a w eakn e ss t hatm ad e i t  easy  to c ra c k) .  It didn't take lon gfor pe opleto realize th at the sta n d a rd in qu esti o nw as Dual_EC_DRB G, or  the DualE llipticCurve  Determi nistic Ra n d om Bit G ene rat or.  It a ls o came out th a t  the  N SA hadgiv en RSA$10  mi lli onto  push thi s compro mi se dra ndo m bit generato rasth e d efaul t . That  said , as  w en ote d, many ha d alre ad ysusp ect ed  some thin g  wa s up an d had ref use d  tous eDual_EC _DRBG. In fac t,  all the w ay  ba ck in2 0 07, ther e was a widespread disc u ssion a bou t the  pos sibilityofthe NS A p u ttinga back doorin  Du a l _EC_D R B G,  wh ic h is why s o few  actu al ly t rustedit.Still, to havet hedetails comeout  inp u bl icw as a p re t tyb i g deal, so it a lso seemed  l i ke  a fairlyb igde al to s ee that  theD irector  of Resea rch at th eNSA, D r.Michael We rtheimer  (also fo r mer A s si stant  De puty D ir ect or an d CTOi n t he Of fice o fthe Di recto rof Natio nal Intelligence), hadappare ntlywri tten some thi n g o f an apol ogyin the lat est  No tices  of the A meri c an  Ma t hemat ical Society.I na p i e ce  entitled," T h e M athem ati c s Comm unit y and the NSA," W e rtheimer sortof a p o log ize s , ad mi tting that mis tak es w ere made .After admit ting tha tc oncer ns wer e rais ed by M i c ro s oft re sear che rs in 200 7,an d  againwi th the Sn owde ndocume nts (t h ough w ithout saying wh y the y werer ais ed th esecondt ime) , here's W ertheimer's  "apol ogy. "Howe ver, as  s ecurit y r es earcher/pr o fessor Ma tthew  Greenqu ickl y s hot ba ck,t h is is  a b ul lsh it apolog y ,  b e ca us e  he 's r eally  o nlyapologizi n g for no t d r oppingth e s t a ndardw he n they got c aug ht re d handed bac k  in2 00 7 
 outlets._We do_not have a giant_corporation behind_us,_and we_rely_heavily on our_community to support_us, in an age_when advertisers are_increasingly_uninterested in sponsoring small, independent sites — especially a site like ours that is_unwilling_to pull_punches_in_its reporting and analysis. While_other websites have resorted to_paywalls, registration_requirements, and increasingly annoying/intrusive advertising, we have always_kept_Techdirt open and_available to anyone. But in order to continue doing_so, we need your support. We_offer a variety_of_ways_for our readers to_support us, from direct donations to_special subscriptions and cool merchandise —_and every little bit helps. Thank you.

–The_Techdirt Team

As you may recall, one_of the big Snowden revelations_was the_fact that the NSA "took_control" over a_key security_standard allowing backdoors_to be inserted (or, at least,_a weakness that_made it easy to crack). It_didn't_take long for_people_to_realize that_the standard in_question_was Dual_EC_DRBG,_or_the Dual Elliptic Curve Deterministic Random_Bit_Generator. It also came out that the_NSA had given RSA_$10_million to push this_compromised random bit generator as_the default. That said, as we_noted, many_had already_suspected something was up and had refused to use Dual_EC_DRBG. In_fact, all the way back in_2007, there was a_widespread discussion_about_the possibility of_the_NSA putting_a backdoor in Dual_EC_DRBG, which is why_so few_actually trusted it.Still, to have the_details come out in_public_was a pretty big deal, so_it also seemed like a fairly_big deal to see that_the_Director_of Research at the NSA,_Dr. Michael Wertheimer (also former Assistant_Deputy Director and_CTO in the Office of the Director_of_National Intelligence), had apparently written something_of_an apology in the latest Notices_of_the_American Mathematical Society. In a_piece entitled, "The Mathematics Community and_the NSA," Wertheimer sort of apologizes, admitting that mistakes_were made. After_admitting that concerns were raised_by_Microsoft_researchers in 2007, and again with the Snowden documents (though_without saying_why they were_raised the second time), here's Wertheimer's "apology."However, as security researcher/professor_Matthew Green quickly shot back, this is_a bullshit apology, because he's really only apologizing for not dropping_the standard when they got caught red handed_back in 2007