3 ms·
>Laws can and have been written that require companies to use weaker or broken encryption. Source? Example? I don't know an example of this. (At least in the
by spott 11y ago
>Laws can and have been written that require companies to use weaker or broken encryption.
Source? Example? I don't know an example of this. (At least in the US)
- koenigdavidmj 11y agohttps://en.wikipedia.org/wiki/40-bit_encryption https://en.wikipedia.org/wiki/40-bit_encryption was the most secure thing it was legal to export. The Netscape browser, in particular, had a lot of hoops you had to go through in order to get the 56 bit version meant for US audiences. Therefore, even most Americans with internet access at the time had the crippled international version.
- zerohm 11y agoI would also consider the NSA meddling with Bitlocker and RSA behind the curtain to be conceptually equivalent. https://www.schneier.com/blog/archives/2015/03/can_the_nsa_bre_1.html https://www.schneier.com/blog/archives/2015/03/can_the_nsa_b... http://gizmodo.com/nsa-paid-security-firm-10-million-bribe-to-keep-encryp-1487442397 http://gizmodo.com/nsa-paid-security-firm-10-million-bribe-t...
- MichaelGG 11y agoThat's saying that agencies can break TPM chips and get Bitlocker keys. Which is obviously true, as even a private individual has done so to a TPM.