Revealed: how US and UK spy agencies defeat internet privacy and security

Discussion in 'Random Nonsense' started by danrok, Sep 7, 2013.

  1. danrok

    danrok Administrator Staff Member

    Joined:
    Dec 7, 2012
    Messages:
    1,467
    Likes Received:
    23
    Trophy Points:
    38
    Location:
    Channel Islands
    More details are here: http://www.theguardian.com/world/2013/sep/05/nsa-gchq-encryption-codes-security
  2. Gizmo

    Gizmo Chief Site Administrator Staff Member

    Joined:
    Dec 6, 2012
    Messages:
    2,282
    Likes Received:
    172
    Trophy Points:
    63
    Location:
    Webb City, Missouri
    Home page:
    It's appearing increasingly likely that they've cracked RC4 (which is rather old, circa 1987), but it's also extremely UNlikely they've cracked e.g. AES (Rijndael). More likely is that they've simply obtained copies of the keys being used to secure traffic they are interested in, or have managed to compromise commercial implementations of such in a way that gives them a back door.

    Bruce Schneier has a couple of interesting posts on this subject here and here.
  3. Gizmo

    Gizmo Chief Site Administrator Staff Member

    Joined:
    Dec 6, 2012
    Messages:
    2,282
    Likes Received:
    172
    Trophy Points:
    63
    Location:
    Webb City, Missouri
    Home page:
    I mention Bruce because he's the author of twofish, which was one of the 5 finalists for the AES encryption standard competition. His entry was beaten out by Rijndael, but not by much. To say the man knows something about encryption and security is putting it mildly.
  4. danrok

    danrok Administrator Staff Member

    Joined:
    Dec 7, 2012
    Messages:
    1,467
    Likes Received:
    23
    Trophy Points:
    38
    Location:
    Channel Islands
    Perhaps they have a quantum computer with enough Qubits to crack it? No such machine officially exists, as far as I know.
  5. Aedan

    Aedan Administrator Staff Member

    Joined:
    May 10, 2013
    Messages:
    1,058
    Likes Received:
    4
    Trophy Points:
    38
    RC4 has known issues, including biases, which seriously undermine its usability. On the other hand, ppl are making guestimates as to what has actually happened.

Share This Page