AnsweredAssumed Answered

ellipitical curves in ECDHE and Dual_EC_DRBG

Question asked by ptk on Apr 23, 2014
Latest reply on Apr 24, 2014 by Ivan Ristić

I have read a couple recent posts that suggest that all elliptical curve use in encryption is bad, and even one blog post suggesting we turn off ECDHE ciphers and only use DHE ciphers! (http://www.matthewgkeller.com/blog/2014/01/09/ecdhe-vs-dhe-in-the-new-world-order/comment-page-1/)

 

It is my understanding that the issue ( https://blog.0xbadc0de.be/archives/155 )  is with Dual_EC_DRBG which is a PRNG, and not ECDHE key exchange in TLS. Is this a true, or are elliptical curves in ECDHE affected as well?

Outcomes