In case you hadn’t heard: Gregory Perry alleges that the FBI paid OpenBSD contributors to insert backdoors into OpenBSD’s IPSec stack, with his (Perry’s) knowledge and collaboration.
If that were true, it would also be a concern for FreeBSD, since some of our IPSec code comes from OpenBSD.
I’m having a hard time swallowing this story, though. In fact, I think it’s preposterous. Rather than go into further detail, I’ll refer you to Jason Dixon’s summary, which links to other opinions, and add only one additional objection: if this were true, there would be no “recently expired NDA”; it would be a matter of national security.
I’ll put my money where my mouth is, and post a triple bounty: Continue reading “OpenBSD IPSec backdoor allegations: triple $100 bounty”