News / Science & Technology

    Juniper Networks Will Drop Code Tied to NSA

    FILE - A National Security Agency (NSA) data gathering facility is seen in Bluffdale, about 25 miles (40 kms) south of Salt Lake  City, Utah.
    FILE - A National Security Agency (NSA) data gathering facility is seen in Bluffdale, about 25 miles (40 kms) south of Salt Lake City, Utah.
    Reuters

    Juniper Networks Inc said late on Friday it would stop using a piece of security code that analysts believe was developed by the National Security Agency in order to eavesdrop through technology products.

    The Silicon Valley maker of networking gear said it would ship new versions of security software in the first half of this year to replace those that rely on numbers generated by Dual Elliptic Curve technology.

    The statement on a blog post came a day after the presentation at a Stanford University conference of research by a team of cryptographers who found that Juniper's code had been changed in multiple ways during 2008 to enable eavesdropping on virtual private network sessions by customers.

    Last month, Sunnyvale-based Juniper said it had found and replaced two unauthorized pieces of code that allowed "back door" access, which the researchers said had appeared in 2012 and 2014.

    The 2014 back door was straightforward, said researcher Hovav Shacham of the University of California, San Diego, allowing anyone with the right password to see everything.

    The 2012 code changed a mathematical constant in Juniper's Netscreen products that should have allowed its author to eavesdrop, according to Shacham and his fellow investigators.

    Juniper's initial patch had gotten rid of that constant in Dual Elliptic Curve and replaced it with the version it had been using since 2008.

    But the academics who studied the code said that while Juniper had not disavowed the 2008 code, it had not explained how that constant was picked or why it was using the widely faulted Dual Elliptic Curve at all.

    Still another curve constant, quietly provided by the NSA and required for some federal certification, was exposed in documents leaked by former NSA contractor Edward Snowden as a key to the back door.

    Until now, the most influential adopter of Dual Elliptic Curve was believed to be RSA, part of storage company EMC, which Reuters reported received a $10-million federal contract to distribute it in a software kit for others.

    Though the academic team looking at Juniper has not named a suspect in the 2008, 2012 or 2014 changes, 2008 was one year after veteran cryptographers raised questions about Dual Elliptic Curve.

    A very advanced adversary could have seen how to manipulate Dual EC and in theory managed to insert code through a cooperative or unsuspecting Juniper employee, but the company had not advertised the fact that it was using the formula at all.

    A more logical suspect, said expert Nicholas Weaver of the International Computer Science Institute, was the NSA, which might have been displaced later by other countries' agencies or top-level hackers in 2012 and 2014.

    The NSA did not immediately respond to an emailed request for comment.

    Juniper said it was continuing to investigate.

    It declined to answer questions from Reuters about the revisions.

    You May Like

    Self-doubt, Cultural Barriers Hinder Cambodian Women in Tech

    Longtime Cambodian tech observer Sok Sikieng says that although more women have joined profession in recent years, there remain significant factors hindering women from reaching tech potential

    Trans-Adriatic Pipeline to Boost European Energy Security

    $4.5 billion-pipeline will become operational in 2020 and will deliver gas from Azerbaijan’s Shah Deniz II field to southern Italy

    Video California Celebration Showcases Local Wines, Balloons

    Annual festival showcases the region's harvested agriculture, fine wines and offers opportunities to experience the gentle breeze in a hot air balloon flight

    Featured Videos

    Your JavaScript is turned off or you have an old version of Adobe's Flash Player. Get the latest Flash player.
    Vietnamese-American Youth Optimistic About Obama's Visit to Vietnami
    X
    Elizabeth Lee
    May 22, 2016 6:04 AM
    U.S. President Barack Obama's visit to Vietnam later this month comes at a time when Vietnam is seeking stronger ties with the United States. Many Vietnamese Americans, especially the younger generation, are optimistic Obama’s trip will help further reconciliation between the two former foes. Elizabeth Lee has more from the community called "Little Saigon" located south of Los Angeles.
    Video

    Video Vietnamese-American Youth Optimistic About Obama's Visit to Vietnam

    U.S. President Barack Obama's visit to Vietnam later this month comes at a time when Vietnam is seeking stronger ties with the United States. Many Vietnamese Americans, especially the younger generation, are optimistic Obama’s trip will help further reconciliation between the two former foes. Elizabeth Lee has more from the community called "Little Saigon" located south of Los Angeles.
    Video

    Video First-generation, Afghan-American Student Sets Sights on Basketball Glory

    Their parents are immigrants to the United States. They are kids who live between two worlds -- their parents' homeland and the U.S. For many of them, they feel most "American" at school. It can be tricky balancing both worlds. In this report, produced by Beth Mendelson, Arash Arabasadi tells us about one Afghan-American student who seems to be coping -- one shot at a time.
    Video

    Video Newest US Citizens, Writing the Next Great Chapter

    While universities across the United States honor their newest graduates this Friday, many immigrants in downtown Manhattan are celebrating, too. One hundred of them, representing 31 countries across four continents, graduated as U.S. citizens, joining the ranks of 680,000 others every year in New York and cities around the country.
    Video

    Video Vietnam Sees Strong Economic Growth Despite Incomplete Reforms

    Vietnam has transformed its communist economy to become one of the world's fastest-growing nations. While the reforms are incomplete, multinational corporations see a profitable future in Vietnam and have made major investments -- as VOA's Jim Randle reports.
    Video

    Video Qatar Denies World Cup Corruption

    The head of Qatar’s organizing committee for the 2022 World Cup insists his country's bid to host the soccer tournament was completely clean, despite the corruption scandals that have rocked the sport’s governing body, FIFA. Hassan Al-Thawadi also said new laws would offer protection to migrants working on World Cup construction projects. VOA's Henry Ridgwell reports.
    Video

    Video Infrastructure Funding Puts Cambodia on Front Line of International Politics

    When leaders of the world’s seven most developed economies meet in Japan next week, demands for infrastructure investment world wide will be high on the agenda. Japanese Prime Minister Shinzo Abe’s push for “quality infrastructure investment” throughout Asia has been widely viewed as a counter to the rise of Chinese investment flooding into region.
    Video

    Video Democrats Fear Party Unity a Casualty in Clinton-Sanders Battle

    Democratic presidential front-runner Hillary Clinton claimed a narrow victory in Tuesday's Kentucky primary even as rival Bernie Sanders won in Oregon. Tensions between the two campaigns are rising, prompting fears that the party will have a difficult time unifying to face the presumptive Republican nominee, Donald Trump. VOA national correspondent Jim Malone has more from Washington.
    Video

    Video Portrait of a Transgender Marriage: Husband and Wife Navigate New Roles

    As controversy continues in North Carolina over the use of public bathrooms by transgender individuals, personal struggles with gender identity that were once secret are now coming to light. VOA’s Tina Trinh explored the ramifications for one couple as part of trans.formation, a series of stories on transgender issues.
    Video

    Video Amerikan Hero Flips Stereotype of Middle Eastern Character

    An Iranian American comedian is hoping to connect with American audiences through a film that inverts some of Hollywood's stereotypes about Middle Eastern characters. Sama Dizayee reports.
    Video

    Video Budding Young Inventors Tackle City's Problems with 3-D Printing

    Every city has problems, and local officials and politicians are often frustrated by their inability to solve them. But surprising solutions can come from unexpected places. Students in Baltimore. Maryland, took up the challenge to solve problems they identified in their city, and came up with projects and products to make a difference. VOA's June Soh has more on a digital fabrication competition primarily focused on 3-D design and printing. Carol Pearson narrates.

    Special Report

    Adrift The Invisible African Diaspora