Niels Ferguson

A security feature bypass issue exists due to the Windows Hyper-V BIOS loader's failure to provide a high-entropy source. This allows a remote attacker to bypass built-in security restrictions.

The Dual Elliptic Curve Deterministic Random Bit Generation algorithm contains point Q constants that may have a relationship to certain "skeleton key" values. This could allow attackers to defeat cryptographic protection mechanisms by leveraging knowledge of those values.