<html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /></head><body style='font-size: 10pt; font-family: Verdana,Geneva,sans-serif'>
<p>On 2017-04-20 12:37, Dave Aitel wrote:</p>
<blockquote type="cite" style="padding: 0 0.4em; border-left: #1010ff 2px solid; margin: 0">
<div dir="ltr">Did Juniper actually fix the many bugs that led to the potential for backdoor access via the trojaned random number generator, or just change the key back to the original?
<div> </div>
<div>In other words, if I have the private key, can I still decrypt Juniper VPN traffic, or no?</div>
<div> </div>
<div>-dave</div>
</div>
</blockquote>
<div dir="ltr">
<div> </div>
<div>If you're talking about the Dual_EC stuff in ScreenOS, yes, allegedly Juniper completely removed that RNG:</div>
<div> </div>
<div>https://arstechnica.com/security/2016/01/juniper-drops-nsa-developed-code-following-new-backdoor-revelations/</div>
</div>
</body></html>