"In the meantime, both NIST and the NSA have some explaining to do."
Not happening. Hasn't yet, nor will it. NSA just keeps quite and watches for someone to use their particular algorithm. We should assume malicious intent and take Schneier's advice: "My recommendation, if you're in need of a random-number generator, is not to use Dual_EC_DRBG under any circumstances."
And if you "don't have anything to hide," then I propose you've given up already and cryptography is useless to you.
Not happening. Hasn't yet, nor will it. NSA just keeps quite and watches for someone to use their particular algorithm. We should assume malicious intent and take Schneier's advice: "My recommendation, if you're in need of a random-number generator, is not to use Dual_EC_DRBG under any circumstances."
And if you "don't have anything to hide," then I propose you've given up already and cryptography is useless to you.