We shouldn't be listening to the NIST for any sort of Cryptographic advice. [1] ...

gruez · 2024-10-22T00:14:50 1729556090

So we should continue using ECB and RSA < 2048?

y-curious · 2024-10-22T00:47:07 1729558027

Not if you want to get FedRAMP designation at any point.

archgoon · 2024-10-22T06:50:59 1729579859

Ah, but that's a beauty of it. If you encrypt with ECB you can't be decrypted by a federally compliant organization!

kurikuri · 2024-10-23T04:42:31 1729658551

Unfortunately, a federally compliant organization could still decrypt it because ECB decryption is still allowed for legacy use.

User23 · 2024-10-22T12:56:45 1729601805

This looks like spooks did spook stuff, got caught, and NIST fixed it? Is there evidence NIST colluded or is the NSA just good at its job?