After reading this article about RSA advising its customers not to use the default random-number generator in its encryption products - amid fears spooks can easily crack data secured by the algorithm, what products need immediate attention and configuration change? Does it affect the hardware token generators used for two factor authentication from RSA?
closed as too broad by TildalWave, Adnan, Xander, Gilles, NULLZ Oct 2 '13 at 23:12
There are either too many possible answers, or good answers would be too long for this format. Please add details to narrow the answer set or to isolate an issue that can be answered in a few paragraphs.If this question can be reworded to fit the rules in the help center, please edit the question.
(*cough* alleged ability *cough*)
TL;DR: There is widespread use of BSAFE, and widespread availability of (though not necessarily use of) Dual_EC_DRBG. Though there is a lack of definitive vendor statements at this time, there is an unsubstantiated claim that SecureID is not at risk from this, and other than a single McAfee product, nothing seems immediately at risk.
The crypto.se question Who uses Dual_EC_DRBG? doesn't identify many actual products, primarily just the RSA BSAFE developer library.
The actual RSA advice/statement (presumably limited release) appears at the end of this article. In that Wired claim to have a source who states no SecureID (hardware or software) uses the affected PRNG. Since it could be quite expensive and embarrassing if it was the case, you may choose to disbelieve this ;-)
Since we know the RSA BSAFE library uses Dual_EC_DRBG (inexplicably, since there has been suspicion hanging over this PRNG since 2007) by default, I would guess that this would be the main vector, and your question should be answered by D.W.'s similar crypto.se question Who uses the RSA BSAFE library?, which is unanswered at this time ...
This rather old (1998) and slightly ironic RSA Bulletin Preliminary Analysis of the BSAFE 3.x Pseudorandom Number Generators (PDF) opens with:
hinting at the potential scale 15 years ago, and prior to the freely available version (and also prior to the affected algorithm).
Given the lack of a CVE, the NIST DRBG Validation List (Google cached copy) is probably a good start (though not necessarily a comprehensive list). Vendors with validated Dual_EC_DRBG implementations include Juniper, Cisco, RIM, Symantec, Riverbed, McAfee, SafeNet, Microsoft and OpenSSL. Only terse information about products is given, if any.
See this article for some (unsubstantiated) vendor statements: http://www.crn.com/news/security/240161911/cisco-mcafee-other-firms-addressing-nsa-linked-encryption-algorithm.htm
Regarding OpenSSL, it's not the default PRNG, and soon won't be supported at all.
McAfee Firewall Enterprise Control Center (uses BSAFE) only uses Dual_EC_DRBG in FIPS deployments
As for the use of BSAFE, I can easily find (hint: use your favourite search engine to search for the terms "This product includes" "RSA BSAFE") implementations, oddly skewed towards imaging and gaming devices: