Vulnerability
vulnerability:weak_random_number_generator
Also: weak number generator
Weak cryptographic random-number-generation mechanism that the NSA was said to be able to break and promote through standards bodies.
Weak cryptographic random-number-generation mechanism that the NSA was said to be able to break and promote through standards bodies.
“the NSA knew that there was a – that the NSA could break through this essentially weak random number generator”
| Direction | Predicate | Other entity | Origin | EP |
|---|---|---|---|---|
| incoming | EXPLOITS | National Security Agency | Explicit | 98 |
| incoming | ASSOCIATED_WITH | RSA | Uncertain | 98 |
National Security Agency EXPLOITS weak random number generator
The NSA was able to break through a weak random number generator and allegedly pushed that vulnerable system into commercial products.
Explicit Confidence 98% · Nicole Perlroth EP 98 Details
“the NSA knew that there was a – that the NSA could break through this essentially weak random number generator”
RSA ASSOCIATED_WITH weak random number generator
A Reuters report indicated that the NSA might have paid RSA to incorporate weak random number generators into security products; Nicole says what happened remains unclear.
Uncertain Confidence 89% · Nicole Perlroth EP 98 Details
“it appeared that the NSA might have actually been paying RSA to bake these weak number generators into some of their security products”