GitHub - TrumpOnLinux/dualec_poc: This program exhibits the backdoor behaviour of PRNG Dual_Ec

TrumpOnLinux / dualec_poc Public

forked from arisada/dualec_poc

Notifications You must be signed in to change notification settings
Fork 0
Star 1

This program exhibits the backdoor behaviour of PRNG Dual_Ec_Drbg

Notifications

Name		Name	Last commit message	Last commit date
Latest commit History 1 Commit
.gitignore		.gitignore
0001-Test-enable-debugging-include-bn-functions-in-FIPS-b.patch		0001-Test-enable-debugging-include-bn-functions-in-FIPS-b.patch
Makefile		Makefile
README		README
dual_ec_drbg_poc.c		dual_ec_drbg_poc.c

Repository files navigation

What is it ?
------------

This is a proof of concept over the Dual_ec_drbg backdoor from NSA. It proves that
manipulating only one of the constants is enough to predict output from PRNG.

How to compile
--------------

Get the git version of FIPS openssl
git clone git://git.openssl.org/openssl.git
cd openssl
git branch fips 4089bd6080d41450adab1e0ac0d63cfeab4a78e7
git checkout fips
git am ../0001-Test-enable-debugging-include-bn-functions-in-FIPS-b.patch

./config fipscanisteronly
make

If there's something that doesn't compile here... good luck. Do not attempt compiling regular libcrypto together with FIPS, it's not going to work.

cd ..
make
./dual_ec_drbg_poc