I\'m wondering how a backdoor in a random-number generator (as rumored the NSA h
ID: 648794 • Letter: I
Question
I'm wondering how a backdoor in a random-number generator (as rumored the NSA have placed), actually compromises the security of things like VPNs or TSL/SSL.
What I understand is that, if such a backdoor exists, then after observing a certain number of pseudorandom bits, the attacker can then predict the rest of the pseudorandom sequence.
Can someone walk through the steps of how this allows an attacker to actually read encrypted packets? For example, how would an attacker get access to the first N random bits of a pseudo-randomly generated key in the first place. Is the problem that any random key is effectively only N bits long because if an attacker guesses the first N correctly, he can generate the rest of the key using the backdoor? Or is it something more complicated.
Explanation / Answer
There are three ways a RNG can fail
Insufficient randomness in the input
Losing randomness as a result of the random transformation
Leaking bits through an intentional or unintentional side channel
Each fail weakens things. A backdoor in a random number generator is like actively implementing such a fail, introducing possible ways to lower the security of the random number generator since it becomes less random.
It it's not as if a backdoor in a random number generator always directly breaks things like SSL, but they can have the ability to. The real problem is that a well constructed backdoor is near to undetectable, while allowing an attacker to take security shortcuts that wouldn't be available normally. And that would happen without the person using the RNG for security purposes noticing the backdoor.
Imagine using such a backdoor to seed something... it would look perfectly random to you, but the one who implemented the backdoor might be able to recover the whole state of the RNG by just looking at - let's say - 32 bits. That would mean you're in big-big trouble. Now imagine you feel good, safe and secure because you aren't aware of a backdoor lurking behind the screens... get a creepy feeling? Good!