Juniper dumps NSA “back door”

Stefan Mileschin · 13th January 2016, 05:35

Network hardware maker Juniper has promised to remove code from its products which were created by the NSA and have been linked to network sniffing.

The Silicon Valley maker of networking gear said it would ship new versions of security software in the first half of this year to replace those that rely on numbers generated by Dual Elliptic Curve technology.

A team of cryptographers found that Juniper’s code had been changed in multiple ways during 2008 to enable eavesdropping on virtual private network sessions by customers.

Juniper has found and replaced two unauthorised pieces of code that allowed “back door” access, which the researchers said had appeared in 2012 and 2014.

The 2014 back door was straightforward, said researcher Hovav Shacham of the University of California, San Diego, allowing anyone with the right password to see everything.

The 2012 code changed a mathematical constant in Juniper’s Netscreen products that should have allowed its author to eavesdrop, according to Shacham and his fellow investigators.

http://www.techeye.net/business/juni...-nsa-back-door

13th January 2016, 05:35	#1
Stefan Mileschin [M] Reviewer Join Date: May 2010 Location: Romania Posts: 148,462	Juniper dumps NSA “back door” Network hardware maker Juniper has promised to remove code from its products which were created by the NSA and have been linked to network sniffing. The Silicon Valley maker of networking gear said it would ship new versions of security software in the first half of this year to replace those that rely on numbers generated by Dual Elliptic Curve technology. A team of cryptographers found that Juniper’s code had been changed in multiple ways during 2008 to enable eavesdropping on virtual private network sessions by customers. Juniper has found and replaced two unauthorised pieces of code that allowed “back door” access, which the researchers said had appeared in 2012 and 2014. The 2014 back door was straightforward, said researcher Hovav Shacham of the University of California, San Diego, allowing anyone with the right password to see everything. The 2012 code changed a mathematical constant in Juniper’s Netscreen products that should have allowed its author to eavesdrop, according to Shacham and his fellow investigators. http://www.techeye.net/business/juni...-nsa-back-door

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Juniper will release another patch for its backdoored firewalls	Stefan Mileschin	WebNews	0	11th January 2016 06:44
Juniper Networks finds backdoor code in its firewalls	Stefan Mileschin	WebNews	0	21st December 2015 17:22
Tougher encryption guidelines close a back door for NSA spies	Stefan Mileschin	WebNews	0	29th June 2015 08:01
IBM strikes further deals with Juniper	Stefan Mileschin	WebNews	0	26th February 2015 06:06
Back door found in Chinese-made chip	Stefan Mileschin	WebNews	0	30th May 2012 06:44
Brief Internet Outage Caused by Juniper Firmware Update	Stefan Mileschin	WebNews	0	9th November 2011 11:44
ATI Radeon HD5770 Juniper GPU Video Card	jmke	WebNews	0	13th October 2009 09:39
Juniper XT is Radeon HD 5770 and Juniper LE is HD 5750	jmke	WebNews	0	12th September 2009 09:36
Build a back door for Intel's DTCP-IP, pay US$8 million	jmke	WebNews	0	9th March 2006 12:08
Infineon dumps Memory Biz	jmke	WebNews	0	19th February 2006 17:42