Bullrun (decryption program): Difference between revisions

Revision as of 01:11, 16 April 2015

Revision as of 01:12, 16 April 2015

Line 26:

== Fallout ==

{{expand section|date=January 2014}}

In the wake of BULLRUN revelations, some open source projects, including [[FreeBSD]] and [[OpenSSL]], have seen an increase in their reluctance to (fully) trust hardware-based cryptographic primitives.<ref>{{cite web|last=Goodin |first=Dan |url=http://arstechnica.com/security/2013/12/we-cannot-trust-intel-and-vias-chip-based-crypto-freebsd-developers-say/ |title="We cannot trust" Intel and Via’s chip-based crypto, FreeBSD developers say |publisher=Ars Technica |date=2013-12-10 |accessdate=2014-01-23}}</ref><ref>{{cite web|title=Torvalds shoots down call to yank 'backdoored' Intel RdRand in Linux crypto|url=http://www.theregister.co.uk/2013/09/10/torvalds_on_rrrand_nsa_gchq/}}</ref>

Many other software projects, companies and organizations responded with an increase in the evaluation of their security and encryption processes. For example, Google doubled the size of their SSL encryption keys from 1,024 bits to 2,048 bits.<ref>http://googledevelopers.blogspot.com/2013/07/google-certificates-upgrade-in-progress.html</ref>