171–180 of 494 posts
Why is the submission URL using http instead of https? That just seems... bizarre.
Note: I have "Enable HTTPS-Only Mode in all windows" on by default.
Earlier quoted context omitted.
It follows: entire industries were required to deploy DES and the goal was to create one thing that was “strong enough” to narrow the field. Read the blog post carefully about the role of NBS, IBM, and NSA in the development of DES. It’s hard to accept because the implications are upsetting and profound. The evidence is clear and convincing. Lots of people try to muddy the waters, don’t help them please.
They had a privately known way to weaken DES that effectively shortens the key length. They could have pretended to allow a longer key length while secretly retaining their privately known attack that lets them shorten it (without also acting to strengthen DES against it). They knew this in the 70s 20 years before it would become publicly known. They actively strengthened DES against this while not revealing the expl…
The longer DES stays, the longer NSA retain their capabilities. Any design changes made by NSA are for their benefit first. That’s the primary lesson from my perspective.
Flippo valrosida and Matthey green aren't too happy. https://twitter.com/matthew_d_green/status/15556838562625208...
https://wikipedia.org/wiki/Dual_EC_DRBG
is he really just going to ignore something from 8 years ago?
I may believe almost all of this is overblown and silly, as like a matter of cryptographic research, but I'll say that Matt Topic and Merrick Wayne are the real deal, legit the lawyers you want working on something like this, and if they're involved, presumably some good will come out of the whole thing. Matt Topic is probably best known as the FOIA attorney who got the Laquan McDonald videos released in Chicago; I'v…
Am I misunderstanding you, or are you saying that you believe almost all of DJB's statements claiming that NIST/NSA is doctoring cryptography is overblown and silly? If that's the case, would you mind elaborating?
Flippo valrosida and Matthey green aren't too happy. https://twitter.com/matthew_d_green/status/15556838562625208...
There is ample evidence to document malfeasance by the involved parties, and it’s reasonable to ask NIST to follow public law.
Earlier quoted context omitted.
If you spend all day making bagels do you go home and make bagels for dinner? It's a static text blog, not a bank
> It's a static text blog, not a bank I want those delivered by https most, because http leaks the exact page I've visited, rather than just the domain.
Flippo valrosida and Matthey green aren't too happy. https://twitter.com/matthew_d_green/status/15556838562625208...
Dismissing this lawsuit as a conspiracy theory is embarrassing for both of them. There is ample evidence to document malfeasance by the involved parties, and it’s reasonable to ask NIST to follow public law.
They are not dismissing the lawsuit.
I just want to say, the problem here is worldwide standards bodies for encryption need to be trustworthy. It is incredibly hard to know what encryption is actually real without a deep mathematics background and even then, a choir of peers must be able to present algorithms, and audits of those algorithms with a straight face. Presenting broken-by-design encryption undermines public confidence in what should be one of…
whoever wants to recommend standards at any point since 2015 needs to be someone else
https://en.wikipedia.org/wiki/NIST_SP_800-90A for this who have forgotten.
I may believe almost all of this is overblown and silly, as like a matter of cryptographic research, but I'll say that Matt Topic and Merrick Wayne are the real deal, legit the lawyers you want working on something like this, and if they're involved, presumably some good will come out of the whole thing. Matt Topic is probably best known as the FOIA attorney who got the Laquan McDonald videos released in Chicago; I'v…