https://wiki.taigi.ima.org.tw/w/index.php?action=history&feed=atom&title=%E9%9B%99%E9%9B%9E%E5%8D%B5%E8%A1%8C%E6%9B%B2%E7%B7%9A%E7%A2%BA%E5%AE%9A%E6%80%A7%E9%9A%A8%E6%A9%9F%E4%BD%8D%E5%85%83%E7%94%9F%E6%88%90%E5%99%A8雙雞卵行曲線確定性隨機位元生成器 - 修訂紀錄2026-05-11T16:48:15Z本 wiki 上此頁面的修訂紀錄MediaWiki 1.43.1https://wiki.taigi.ima.org.tw/w/index.php?title=%E9%9B%99%E9%9B%9E%E5%8D%B5%E8%A1%8C%E6%9B%B2%E7%B7%9A%E7%A2%BA%E5%AE%9A%E6%80%A7%E9%9A%A8%E6%A9%9F%E4%BD%8D%E5%85%83%E7%94%9F%E6%88%90%E5%99%A8&diff=388404&oldid=prevTaiwanTonguesApiRobot：從 JSON 檔案批量匯入2025-08-22T07:07:33Z<p>從 JSON 檔案批量匯入</p>
<p><b>新頁面</b></p><div>'''雙雞卵行曲線確定性隨機位元生成器'''（Dual Elliptic Curve Deterministic Random Bit Generator，'''Dual \ _ EC \ _ DRBG'''） ，是一種使用雞卵行的曲線密碼學實現的密碼學安全偽亂數生成器（CSPRNG）。 該演算法自二空空六年六月左右予人公開，就算受著大量的密碼學家𪜶的批評，並且予人認為存在藏佇的後壁門，毋過一直到二空一七年予復原進前，Dual \ _ EC \ _ DRBG 佇咧七年的時間內攏是 NIST SP 八百九十 A 定義的四个（現為三个）標準的 CSPRNG 之一。<br />
<br />
==參見==<br />
<br />
* 密碼學安全偽亂數生成器<br />
* 亂數生做器攻擊<br />
* Crypto AG：一間主要做通批佮資訊安全的瑞士公司，這个公司長期受美國中央情報局佮德國聯邦情報局的直接控制，並佇咧其加密機內底插入後門。<br />
<br />
==參考文獻==<br />
<br />
==外部連結==<br />
<br />
* NIST SP 八百九十 A-Recommendation for Random Number Generation Using Deterministic Random Bit Generators<br />
* Dual EC DRBG-Collection of Dual \ _ EC \ _ DRBG information , by Daniel J . Bernstein , Tanja Lange , and Ruben Niederhagen .<br />
* On the Practical Exploitability of Dual EC in TLS Implementations-Key research paper by Stephen Checkoway et al .<br />
* The prevalence of kleptographic attacks on discrete-log based cryptosystems-Adam L . Young , Moti Yung ( 一千九百九十七 )<br />
* United States Patent Application Publication _ US 二十五空七百一十八撨九千五百二十七 , Brown , Daniel R . L . & Vanstone , Scott A . ,「Elliptic curve random number generation」_ on the Dual \ _ EC \ _ DRBG backdoor , and ways to negate the backdoor .<br />
* Comments on Dual-EC-DRBG / NIST SP 八百九十 , Draft December 兩千空五 Kristian Gjøsteen's March 二千空六 paper concluding that Dual \ _ EC \ _ DRBG is predictable , and therefore insecure .<br />
* A Security Analysis of the NIST SP 八百九十 Elliptic Curve Random Number Generator Daniel R . L . Brown and Kristian Gjøsteen's 兩千空七 security analysis of Dual \ _ EC \ _ DRBG . Though at least Brown was aware of the backdoor ( from his 兩千空五 patent ) , the backdoor is not explicitly mentioned . Use of non-backdoored constants and a greater output bit truncation than Dual \ _ EC \ _ DRBG specifies are assumed .<br />
* On the Possibility of a Back Door in the NIST SP 八百九十 Dual Ec Prng Dan Shumow and Niels Ferguson's presentation , which made the potential backdoor widely known .<br />
* The Many Flaws of Dual \ _ EC \ _ DRBG-Matthew Green's simplified explanation of how and why the backdoor works .<br />
* A few more notes on NSA random number generators-Matthew Green<br />
* Sorry , RSA , I'm just not buying it-Summary and timeline of Dual \ _ EC \ _ DRBG and public knowledge .<br />
* [/ / web . archive . org / web / 二十五空一千六百空八學一千八百一十三學兩千五百三十九 / http : / / www . ietf . org / mail-archive / web / cfrg / current / msg 三千六百五十一 . html 頁面存檔備份，存在網路檔案館）[ Cfrg] Dual \ _ EC \ _ DRBG . . . [was RE : Requesting removal of CFRG co-chair] ] A December 二千空一十三 email by Daniel R . L . Brown defending Dual \ _ EC \ _ DRBG and the standard process .<br />
<br />
[[分類: 待校正]]</div>TaiwanTonguesApiRobot