Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Practical bruteforce of military grade AES-1024 (2021) [video]

media.ccc.de

Post reply on HN
Print view View original

41–50 of 93 posts

Re: Practical bruteforce of military grade AES-1024 (2021) [video]

#41

Post by bawolff »

ziddoap wrote: post #10

I've yet to see a good definition of what constitutes "military grade encryption" vs. regular old encryption. It generally has the opposite effect, for me at least, in the sense that I avoid any product that advertises "military grade ". Edit: I'm not actually looking for definitions of "military grade encryption", thank-you everyone who tried to explain it though. I work in cybersec, and encryption is encryption. It…

"Military grade" means minimum that would be accepted by the military.

Mostly means someone is trying to sell you something and betting you dont know much about the subject matter.

Re: Practical bruteforce of military grade AES-1024 (2021) [video]

#42

Post by dqpb »

ziddoap wrote: post #10

I've yet to see a good definition of what constitutes "military grade encryption" vs. regular old encryption. It generally has the opposite effect, for me at least, in the sense that I avoid any product that advertises "military grade ". Edit: I'm not actually looking for definitions of "military grade encryption", thank-you everyone who tried to explain it though. I work in cybersec, and encryption is encryption. It…

There’s also no such thing as “sushi grade” fish.

Re: Practical bruteforce of military grade AES-1024 (2021) [video]

#44

Post by [deleted] »

2OEH8eoCRo0 wrote: post #35
ajsnigrutin wrote: post #26

Earlier quoted context omitted.

> I've yet to see a good definition of what constitutes "military grade encryption" Done by the cheapest contractor :)

The cheapest contractor who meets requirements who it turns out is not up to the task causing timelines to slip and end up costing more?

[deleted]

Re: Practical bruteforce of military grade AES-1024 (2021) [video]

#45

Post by bawolff »

RcouF1uZ4gsC wrote: post #11

>However, it turned out after the analysis that all these modes offer only a security level of 128-bit. >A plugin in John the ripper software to allow everyone to "practically brute force military grade AES-1024" will be released at the time of the presentation. My understanding was that even 128-bit security is safe from brute forcing at the present. Am I missing something?

They are bruteforcing pbkdf2 with too low number of iterations (people are talking about md5, but md5 isn't really the problem here. A memory hard hash would be better [albeit maybe impractical in context], but if you are using pbkdf2, md5 isn't any different from sha256 or whatever else)

Re: Practical bruteforce of military grade AES-1024 (2021) [video]

#46

Post by staticassertion »

> . It turned out that the key derivation function was PBKDF2 using 1000 iteration of MD5 to derive the encryption key. The salt used to derive the keys is constant and hardcoded in all the solutions and all the vendors. This makes it easier for an attacker to guess the user password of a vault using time/memory tradeoff attack techniques such as rainbow tables and to re-use the tables to retrieve passwords for all users using the software. The implementation itself was incorrect and even with a randomly generated unique salt, it would be effortless to recover the password of a user. Other flaws of the key derivation function will be discussed and compared with nowadays good practices.

Yikes

Re: Practical bruteforce of military grade AES-1024 (2021) [video]

#47

Post by crest »

SAI_Peregrinus wrote: post #39

There is no such thing as AES-1024 specified by NIST. AES is a NIST standard, it has three (and only three) variants: AES-128, AES-192, and AES-256. If you see something other than those three, it's almost certainly proprietary junk. Note that AES is always used in a "mode of operation" to provide any sort of secure encryption. AE-secure modes are AES-SIV, AES-GCM-SIV, AES-OCB, and AES-GCM in decreasing order of safe…

The bullshit "AES-1024" is quoted from the product description and repeated in the title as clickbait.

Re: Practical bruteforce of military grade AES-1024 (2021) [video]

#49

Post by fl0wenol »

HWR_14 wrote: post #23
ziddoap wrote: post #10

I've yet to see a good definition of what constitutes "military grade encryption" vs. regular old encryption. It generally has the opposite effect, for me at least, in the sense that I avoid any product that advertises "military grade ". Edit: I'm not actually looking for definitions of "military grade encryption", thank-you everyone who tried to explain it though. I work in cybersec, and encryption is encryption. It…

"Military grade encryption" means that the government has signed off on the algorithms use for information up to a specific classification level. Probably the NSA, but maybe the DOD has their own department. It's certainly a vote of confidence, probably by people more educated about cryptography than you specifically, although possibly less trusted by you (in terms of skill and/or ulterior motives) than other people.…

NSA is the entity in the DOD which sets certain minimum requirements and validates their cryptographic implementations. NIST owns the overarching standards for the whole government and sets requirements and performs validations through NVLAP that NSA doesn't, usually with their input.

When you see "FIPS", that means NIST approved/validated.

NSA approval/validation is relevant when the system has to handle classified information and often (but not necessarily) you start with components that have FIPS certification.

Post reply on HN