The Article NSA 'altered random-number generator' on the BBC news website mentions the question Who uses Dual_EC_DRBG? in this context:

For example, Microsoft had used the algorithm in software from Vista onwards, but had not enabled it by default, users on the Cryptography Stack Exchange pointed out.


1 Answer 1


Thanks for the note. Yesterday I thought about deleting the answer by Stubabe (which got an not an answer flag) and the one by synp (on which the flagged one was a reply), but lazily decided not to do this. Now they got referred to ...

This whole question is a bit on the limit of the topic of our site, but now it got quite popular, just like similar questions with some relations to the NSA stuff:

We should look over these questions and improve them (as well as the answers), they are a kind of a showcase for our site.

  • 1
    $\begingroup$ That's exactly what I was going to recommend. It seems like with a little bit of editing and pruning of comments that question and the ones you listed like it, would be good introductions to the site. Please see Shog's guidance for when the "convert to comment" function should be used. I'd say that Stubabe's answer should have been a comment. (A user needs 50 rep to comment on other people's posts.) But with a bit of editing, it could be a good, if partial, answer. $\endgroup$ Commented Sep 12, 2013 at 18:49
  • $\begingroup$ I think (read: hope) Stubabe's answer now looks a bit less like a comment and a bit more like an answer… modifying near to nothing of it's content. $\endgroup$
    – e-sushi
    Commented Sep 15, 2013 at 0:57

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .