Dated information but was this in fact true?

[dbach]

http://news.cnet.com/8301-31921_3-20...#ixzz18Qszr72T

Darryl

[ocicat]

No.

[drhowarddrfine]

Just to confirm. No.

[jggimi]

And to elaborate slightly, after this public release of allegations (released by Theo, by the way) an audit of implicated code was performed. Through this additional scrutiny an unrelated crypto bug (or two) was (were) found and corrected.

[jjennings089]

A quick search of 'openbsd fbi backdoor' loads of great articles. I remeber at the time this rumor kicked off how much drama it seemed to brew up....

[denta]

Slightly offtopic, but given the "recently" published vulnerabilities of WPS (Wi-Fi protected setup), and associated tools such as reaver (http://code.google.com/p/reaver-wps), I've been relying more or less completly on IPsec/authpf for my home wireless network. Yes, its a crap AP with no way to disable WPS.

Anyway! I'm guessing that unless you have three-lettered government agencys snooping around on your network, even a backdoor'ed IPsec will provide more security than wpa2-psk's for the average network (with WPS) at the moment since there are no known published weaknesses.

[jggimi]

I have one AP that is only WEP capable, on which I use IPSec. I used to use AuthPF but no longer need it.

Also OT:

If you're interested in learning more about these things ... this class has been interesting. Week 1's homework includes real cryptanalysis -- we are breaking a stream cipher that is using an excellent random number generator .. but which was deployed with a simple, small error in implementation.

Week 1. Yep.

(That particular implementation error exists in some encryption systems still in wide use. I'm amazed that this is so.)

[denta]

Yea, was just about to start on the week #2 lectures!