NIST Removes Dual_EC_DRBG From Random Number Generator Recommendations

hypnosec writes: "National Institute of Standards and Technology (NIST) has removed the much-criticized Dual_EC_DRBG (Dual Elliptic Curve Deterministic Random Bit Generator) from its draft guidance on random number generators following a period of public comment and review. The revised document retains three of the four previously available options for generating pseudorandom bits required to create secure cryptographic keys for encrypting data. NIST recommends that people using Dual_EC_DRBG should transition to one of the other three recommended algorithms as quickly as possible."

Comments

Re:Cut off your nose to spite your face

[erikkemperman]

Operating by suspicion can be hazardous when it comes to encryption.

I would argue that operating by suspicion should be the default when it comes to encryption.