3 ms·
Since we don't exactly know what other ways to break crypto are there - why aren't we focusing on concatenated encryption(at least for critical apps) - while wo
by petra 11y ago
Since we don't exactly know what other ways to break crypto are there - why aren't we focusing on concatenated encryption(at least for critical apps) - while working hard to ensure no crypto vulnerable to malware type attacks, especially considering that malware isn't a good way for web scale surveillance ?
- Natanael_L 11y agoIt is more commonly called cascade encryption. The problem is that in many cases you can't afford to sacrifice enough performance for it. Also, malware and crypto doesn't "play in the same field". Malware is solved by secure programming, access controls and users that are educated to not fall for trojans. Encryption handles communication and storage, and only to a small degree data processing.
- sfilipov 11y agoTo support your point, virtually all crypto vulnerabilities we know of for sure are a result of bugs in implementations rather than problems with the underlying algorithms. On the other hand there are algorithms which are believed to be backdoored by the NSA (some elliptic curves). These algorithms can be avoided. In the end, cascading encryption has very limited benefits because the weakest point of a security application is almost never the algorithm used.