Skip Menu |

Preferred bug tracker

Please visit the preferred bug tracker to report your issue.

This queue is for tickets about the CryptX CPAN distribution.

Report information
The Basics
Id: 91149
Status: resolved
Priority: 0/
Queue: CryptX

People
Owner: Nobody in particular
Requestors: christopher [...] pobox.com
Cc:
AdminCc:

Bug Information
Severity: (no value)
Broken in: (no value)
Fixed in: (no value)



Subject: Suspected backdoors in all supported curves, no support for suspected clean curves
Date: Tue, 3 Dec 2013 23:09:21 +1000
To: bug-CryptX [...] rt.cpan.org
From: Chris Drake <christopher [...] pobox.com>
According to Snowden & suspected by Bruce Schneier, all the supported curves here have probable back doors. Support for other curves free from the influence of the NSA is needed in here.
I'll try to add generic support for passing custom curve parameters, libtomcrypt has support for this - I just need to design proper perl interface + implement better key export/import.
The latest DEV release contains improved ECC module which now supports more predefined curves + allows you to use custom curve definition. See https://metacpan.org/pod/release/MIK/CryptX-0.019_1/lib/Crypt/PK/ECC.pm#generate_key
released 0.020 with fix for this rt