[saag] Attacking standardization

Nico Williams writes:
> I think DJB thought that by not
> adopting it the work wouldn't get done.

See https://blog.cr.yp.to/20251004-weakened.html: "Surveillance agency
NSA and its partner GCHQ are trying to have standards-development
organizations endorse weakening ECC+PQ down to just PQ."

See also https://blog.cr.yp.to/20251004-weakened.html#options for why
the endorsement matters from the attacker's perspective. The issue here
is not the easy work of writing a spec; the issue is whether NSA can pay
SDOs to _endorse_ the spec.

---D. J. Bernstein


===== NOTICES =====

This document may not be modified, and derivative works of it may not be
created, and it may not be published except as an Internet-Draft. (That
sentence is the official language from IETF's "Legend Instructions" for
the situation that "the Contributor does not wish to allow modifications
nor to allow publication as an RFC". I'm fine with redistribution of
copies of this document; the issue is with modification.)

_______________________________________________
saag mailing list -- [email protected]
To unsubscribe send an email to [email protected]