Live data from Hacker News

NSA, NIST, and post-quantum crypto: my second lawsuit against the US government

blog.cr.yp.to

181–190 of 494 posts

Re: NSA, NIST, and post-quantum crypto: my second lawsuit against the US government

#181

If anyone is curious, the courtlistener link for the lawsuit is here: https://www.courtlistener.com/docket/64872195/bernstein-v-na... (And somebody has already kindly uploaded the documents to RECAP, so it costs you nothing to access.) Aside: I really wish people would link to court documents whenever they talk about an ongoing lawsuit.

> Aside: I really wish people would link to court documents whenever they talk about an ongoing lawsuit.

I just want to second that and thank you for the link. Most reporting is just horribly bad at covering legal stuff because all the stuff that makes headlines that people click on is mostly nonsense.

Re: NSA, NIST, and post-quantum crypto: my second lawsuit against the US government

#182

Flippo valrosida and Matthey green aren't too happy. https://twitter.com/matthew_d_green/status/15556838562625208...

What's with the infighting here? Nothing about the post comes across as conspiracy theory level or reputation ruining. It makes me question the motives of those implying he's crazy, to be honest.

Re: NSA, NIST, and post-quantum crypto: my second lawsuit against the US government

#183

An expert, prominent, and someone who the whole cryptography community listens to, and he calls out the lies, crimes, and blatant hypocrisy of his own government. I genuinely fear that he will be suicided one of these days.

I think the United States is more about charging people with crimes and ruining their lives that way rather than disappearing people. Russia might kill you with Polonium and make sure everyone knows it, but America will straight up “legally“ torture you in prison via several means and then argue successfully that those methods were legal and convince the world you weren’t tortured. Anyone who’s a target for that treatment, though, knows that’s a lie.

Re: NSA, NIST, and post-quantum crypto: my second lawsuit against the US government

#185

Flippo valrosida and Matthey green aren't too happy. https://twitter.com/matthew_d_green/status/15556838562625208...

Filippo Valsorda seems to be happy to ignore the fact that NIST already let an NSA backdoor in, as recently as 2014: https://wikipedia.org/wiki/Dual_EC_DRBG is he really just going to ignore something from 8 years ago?

Yes, he appears to be unreasonably dismissive of the blindly obvious history and the current situation.

As an aside, this tracks with his choice of employers - at least one of which was a known and documented NSA collaborator (as well as a victim, irony of irony) before he took the job with them.

As Upton Sinclair remarked: “It is difficult to get a man to understand something when his salary depends upon his not understanding it.”

Joining Google after Snowden revealed PRISM and BULLRUN, as well as MUSCULAR, is almost too rich to believe, Meanwhile he asserts and dismisses Bernstein as a conspiracy theorist. It’s a classic bad faith ad-hominem coincidence theory.

Re: NSA, NIST, and post-quantum crypto: my second lawsuit against the US government

#186

Flippo valrosida and Matthey green aren't too happy. https://twitter.com/matthew_d_green/status/15556838562625208...

Filippo Valsorda seems to be happy to ignore the fact that NIST already let an NSA backdoor in, as recently as 2014: https://wikipedia.org/wiki/Dual_EC_DRBG is he really just going to ignore something from 8 years ago?

No post body was provided.

Re: NSA, NIST, and post-quantum crypto: my second lawsuit against the US government

#187

Maybe this is too much tinfoil hattery, but are we sure DJB isn't a government asset? He'd be the perfect deep-cover agent.

Please don’t do the JTRIG thing. Dan is a national treasure and we would be lucky to have more people like him fighting for all of us. Between the two, material evidence shows that NIST is the deep-cover agent sabotaging our cryptography.

No post body was provided.

Re: NSA, NIST, and post-quantum crypto: my second lawsuit against the US government

#188
post #10

Earlier quoted context omitted.

Given his track record, and the actual meat of this suit, I think he has a good chance. - He is an expert in the domain - He made a lawful request - He believes he's experiencing an obstruction of his rights I don't see anything egregious here. Being critical of your government is a protected right for USA. Everyone gets a moment to state their case if they'd like to make an accusation. Suing sounds offensive, but th…

Trump Card: National Security

"National Security" response implies cooperation with NSA and destroys NIST's credibility.

Re: NSA, NIST, and post-quantum crypto: my second lawsuit against the US government

#189
post #16

Weirdly, any time I've suggested that maaaybe being too trusting of a known bad actor which has repeatedly published intentionally weak cryptography is a bad idea, I've received a whole lot of push-back and downvotes here on this site.

I'm working on a project that involves a customized version of some unclassified, non-intelligence software for a defense customer at my job (not my ideal choice of market, but it wasn't weapons so okay with it). Some of the people on the project come from the deeper end of that industry, with several TS/SCI contract and IC jobs on their resumes. We were looking over some errors on the sshd log and it was saying it c…

[deleted]

Re: NSA, NIST, and post-quantum crypto: my second lawsuit against the US government

#190

Earlier quoted context omitted.

Every piece of mail that passes through a high-speed sorting machine is scanned, front and back, OCR'd, and stored - as far as we know, indefinitely. That's how they deliver the "what's coming in your mailbox" images you can sign up to receive via email. Those images very often show the contents of the envelope clearly enough to recognize and even read the contents, which I'm quite positive isn't an accident. The USP…

I've heard rumors that this was going on for a long time before it's been publicly acknowledged to have -- before OCR should have been able to handle that sort of variety of handwriting (reliably), let alone at scale. Like a snail-mail version of the NSA metadata collection program.

Wikipedia gives the impression the modern incarnation of photographing the US mail at scale began in 2001: “created in the aftermath of the 2001 anthrax attacks that killed five people, including two postal workers” [0]

However research on photographs of mail was already taking place as far back as 1986 [1]

[0] https://en.m.wikipedia.org/wiki/Mail_Isolation_Control_and_T...

[1] https://cedar.buffalo.edu/papers/articles/Framework_Object_1...

Post reply on HN