A world of hurt after GoDaddy, Apple, and Google misissue 1M certificates
1–10 of 143 posts
Re: A world of hurt after GoDaddy, Apple, and Google misissue 1M certificates
#2“Almost no chance of exploitation.”
How true is this?
Re: A world of hurt after GoDaddy, Apple, and Google misissue 1M certificates
#3Given that there seems to be no security impact (and none expected in the next year or two)...
Curious why everyone doesn’t agree to use 64 bits in future and just let the mis-issued certs live out their natural life?
Seems to create a lot of busywork for lots of people for no discernible benefit?
Re: A world of hurt after GoDaddy, Apple, and Google misissue 1M certificates
#4“Almost no chance of exploitation.” How true is this?
True.
2^63 and 2^64 are effectively the same cost to break. Instead of costing $2X to break, it now costs $X.
Re: A world of hurt after GoDaddy, Apple, and Google misissue 1M certificates
#5Seems like a lot of hand wringing over nothing, security is done with huge factors of safety (moving to 256 bit keys when no one had ever broken a 128 or even 96 bit key). It's hard to imagine that 1,2, or even a quarter of the bits couldn't be zero-ed.
> it’s easy to think that a difference of 1 single bit would be largely inconsequential when considering numbers this big. In fact, he said, the difference between 263 and 264 is more than 9 quintillion.
Re: A world of hurt after GoDaddy, Apple, and Google misissue 1M certificates
#6Re: A world of hurt after GoDaddy, Apple, and Google misissue 1M certificates
#7Given that there seems to be no security impact (and none expected in the next year or two)... Curious why everyone doesn’t agree to use 64 bits in future and just let the mis-issued certs live out their natural life? Seems to create a lot of busywork for lots of people for no discernible benefit?
No idea and completely unsourced, but one of the site comments states this:
> 4) This only came up because of DarkMatter, a very shady operator who most people are very happy to have an excuse to screw with technicalities.
Edit maybe these are sources?
https://bugzilla.mozilla.org/show_bug.cgi?id=1531800
https://groups.google.com/forum/#!msg/mozilla.dev.security.p...
Still not getting the whole picture.
Re: A world of hurt after GoDaddy, Apple, and Google misissue 1M certificates
#8“Almost no chance of exploitation.” How true is this?
High-entropy certificate serial numbers are a defense against hash collision attacks. The margin of security is reduced to the point that a brute force attack is twice as easy. If it was going to take you 10,000 years to brute-force it, now it takes you 5,000, both of which round to "impossible." If it was going to take you four weeks on EC2, now it takes two weeks, both of which round to "entirely too easy."
Re: A world of hurt after GoDaddy, Apple, and Google misissue 1M certificates
#9> Adam Caudill, the security researcher who blogged about the mass misissuance last weekend, pointed out that it’s easy to think that a difference of 1 single bit would be largely inconsequential when considering numbers this big. In fact, he said, the difference between 2^63 and 2^64 is more than 9 quintillion.
Okay, but, that's because 2^63 itself is more than 9 quintillion. Where the search space was previously 18 quintillion, it's now 9 quintillion. Both of those are "big". The attack is 50% easier than "theoretically impossible before certificate expiration," which should still mean that it's impossible.
Re: A world of hurt after GoDaddy, Apple, and Google misissue 1M certificates
#10Sooooo all the big players depend on one CA PKI package: EJBCA - is that not a major concern ?