Hacker News Reader

We shouldn't be listening to the NIST for any sort of Cryptographic advice. [1]

So we should continue using ECB and RSA < 2048?

Not if you want to get FedRAMP designation at any point.

Ah, but that's a beauty of it. If you encrypt with ECB you can't be decrypted by a federally compliant organization!

Unfortunately, a federally compliant organization could still decrypt it because ECB decryption is still allowed for legacy use.

This looks like spooks did spook stuff, got caught, and NIST fixed it? Is there evidence NIST colluded or is the NSA just good at its job?