Snowden disclosures prompt warning on widely used computer security formula

By Joseph Menn

SAN FRANCISCO (Reuters) - In the latest fallout from Edward Snowden's intelligence disclosures, a major U.S. computer security company warned thousands of customers on Thursday to stop using software that relies on a weak mathematical formula developed by the National Security Agency.

RSA, the security arm of storage company EMC Corp, told current customers in an email that a toolkit for developers had a default random-number generator using the weak formula, and that customers should switch to one of several other formulas in the product.

Last week, the New York Times reported that Snowden's cache of documents from his time working for an NSA contractor showed that the agency used its public participation in the process for setting voluntary cryptography standards, run by the government's National Institute of Standards and Technology, to push for a formula that it knew it could break.

NIST, which accepted the NSA proposal in 2006 as one of four systems acceptable for government use, this week said it would reconsider that inclusion in the wake of questions about its security.

But RSA's warning underscores how the slow-moving standards process and industry practices could leave many users exposed to hacking by the NSA or others who could exploit the same flaw for years to come.

RSA had no immediate comment. It was unclear how the company could reach all the former customers of its development tools, let alone how those programmers could in turn reach all of their customers.

Developers who used RSA's "BSAFE" kit wrote code for Web browsers, other software, and hardware components to increase their security. Random numbers are a core part of much modern cryptography, and the ability to guess what they are renders those formulas vulnerable.

The NSA-promoted formula was odd enough that some experts speculated for years that it was flawed by design. A person familiar with the process told Reuters that NIST accepted it in part because many government agencies were already using it.

But after the Times report, NIST said it was inviting public comments as it re-evaluated the formula.

"If vulnerabilities are found in these or any other NIST standards, we will work with the cryptographic community to address them as quickly as possible," NIST said on September 10.

Snowden, who is wanted on U.S. espionage charges and is living in temporary asylum in Russia, disclosed secret NSA programs involving the collection of telephone and email data. (Reporting by Joseph Menn; Editing by Eric Beech)

Matches

MORE TOP STORIES TODAY

Jadeja spins out Rajasthan in close chase

Jadeja spins out Rajasthan in close chase

IPL 7, GAME 10—Chennai beat Rajasthan by 7 runs after last-over scare. More »

Cleaning up the game starts with fans

Cleaning up the game starts with fans

... because, as recent events reveal, the BCCI has little intention of doing it. More »

Hope to be fit for next game - Kevin Pietersen

Hope to be fit for next game - Kevin Pietersen

With two heavy defeats at the hands of Bangalore and Chennai, Daredevils currently languish near the bottom of the table. More »

Chandimal axed as T20 captain, Malinga takes over

Chandimal axed as T20 captain, Malinga takes over

Sri Lanka's cricket selectors on Wednesday sacked Dinesh Chandimal as Twenty20 captain and replaced him with Lasith Malinga, while Angelo Mathews was… More »

'A blow to BCCI, could hurt autonomous status'

'A blow to BCCI, could hurt autonomous status'

The Supreme Court prefers that the Justice Mudgal panel further investigate the IPL corruption scandal. More »

Have the ECB played an unfair game?

Have the ECB played an unfair game?

Money talks, but it is in light of this ICC shakeup that the ECB's act of soliciting of another team's coach deteriorates from free-market aggression to… More »

Perfect Punjab trounce Hyderabad

Perfect Punjab trounce Hyderabad

IPL7, GAME 9—Maxwell (95, 43b), Balaji (4-13) set up 72-run win. More »

Mudgal panel drops bombshell in court

Mudgal panel drops bombshell in court

The Mukul Mudgal probe committee dropped a bombshell in the Supreme Court on Tuesday by making a sensational claim that it was forced to stop audio recording… More »

Farbrace quits for England post

Farbrace quits for England post

He will assist Peter Moores who was unveiled as the new England coach on Saturday. More »

Moin appointed to manage Pakistan team

Moin appointed to manage Pakistan team

Pakistan on Monday reappointed Moin Khan as chief selector and manager of the national team, a week after fellow former captain Rashid Latif turned down… More »

Chennai smash Delhi for first win

Chennai smash Delhi for first win

IPL7, MATCH 8—Raina-led middle order, superlative catching give CSK a 93-run win. More »

SC asks Mudgal committee to continue

SC asks Mudgal committee to continue

Mukul Mudgal has communicated to the court his willingness to take up the investigation and has been asked to specify the terms and modalities on April… More »

'BCCI reputation lowest in 80 years'

'BCCI reputation lowest in 80 years'

The former BCCI president says he was "disillusioned" by the happenings at the emergent working committee meeting on Sunday. More »

Injured Bravo to miss rest of IPL

Injured Bravo to miss rest of IPL

Dwayne Bravo is set to be sidelined for at least four weeks due to a shoulder problem. Bravo sustained the injury when attempting a catch on the boundary… More »

NZC contemplates domestic revamp

NZC contemplates domestic revamp

New Zealand Cricket has put forward a proposal to reinvent its domestic structure and allow up to 49% private investment into the six major associatio… More »

Punjab pull off another big chase

Punjab pull off another big chase

GAME 7, SHARJAH—Maxwell, Miller, Pujara chase down Rajasthan's 192. More »

T20 test for Cheteshwar Pujara

T20 test for Cheteshwar Pujara

The class act from Saurashtra may have to rethink his approach to the mannerless format. More »

Special meeting to replace Srinivasan

Special meeting to replace Srinivasan

The BCCI is likely to convene a special general body meeting (SGM) in May to replace N Srinivasan on the board's disciplinary committee. More »

Roach escapes injury after car crash

Roach escapes injury after car crash

The West Indies fast bowler lost control of his BMW sedan due to slippery road conditions in his native Barbados on Saturday. More »

Shastri in proposed IPL probe panel

Shastri in proposed IPL probe panel

Some members stressed on the need for proposing names with an "impeccable record and clean image". More »

Day of Supreme reckoning

Day of Supreme reckoning

Apex court to decide on BCCI’s proposed new committee today. More »

Panel can help clean mess: Raghavan

Panel can help clean mess: Raghavan

The former CBI Director is one of the three candidates proposed by the BCCI to head the enquiry into the IPL betting and spot-fixing scandal. More »

Repose faith in Indian coaches

Repose faith in Indian coaches

All of them cost plenty of dollars which I feel is unnecessary for a two- month tournament, says former cricketer Yajurvindra Singh. More »

Cook relieved after period in limbo

Cook relieved after period in limbo

The England captain is looking forward to a fresh start after a dispiriting Ashes defeat last year. More »