7 ms·

Unrelated to hashes, but from https://www.ietf.org/archive/id/draft-kaduk-afs3-rxkad-k5-kdf-00.txt https://www.ietf.org/archive/id/draft-kaduk-afs3-rxkad-k5-kd.

by yuhong 11y ago

Unrelated to hashes, but from https://www.ietf.org/archive/id/draft-kaduk-afs3-rxkad-k5-kdf-00.txt https://www.ietf.org/archive/id/draft-kaduk-afs3-rxkad-k5-kd... : "Although administrative access to the cell still uses single-DES for encryption of network traffic, that single-DES key is time limited and may be resistant to brute-force key recovery prior to its expiration." This wasn't created until after CloudCracker can break DES, but to be honest OpenAFS is not the only one either. DOCSIS I think do something similar too. I wonder if anyone has created ASICs to break DES.

jeff_marshall 11y ago
Yes, ASICs to break DES were done back in 1998: https://en.wikipedia.org/wiki/EFF_DES_cracker https://en.wikipedia.org/wiki/EFF_DES_cracker
DanBC 11y ago
See, for example, COPACOBANA which uses FPGAs to crack some crypto, including DES. That was in 2008. http://www.copacobana.org/ http://www.copacobana.org/ > COPACOBANA, the Cost-Optimized Parallel COde Breaker, is an FPGA-based machine which is optimized for running cryptanalytical algorithms. COPACOBANA is suitable for parallel computation problems which have low communication requirements. DES cracking is such a parallelizable problem: an exhaustive key search of the Data Encryption Standard (DES) takes no longer than a week on average with COPACOBANA. Other ciphers can be attacked too, and COPACOBANA can also be used for parallel computing problem outside cryptography.
jaltman 11y ago
Even with afs3-rxkad-k5 the wire encryption is a watered down variant of DES called fcrypt and the use of encryption is the choice of the client. There is nothing that an administrator can do to prevent AFS3 clients communicating with AFS3 servers from leaking sensitive information onto the wire. The AuriStor File System solves these problems with the yfs-rxgk security class, volume and file server security policies, combined identities, perfect forward secrecy, and much more .... https://www.auristor.com/openafs/migrate-to-auristor/ https://www.auristor.com/openafs/migrate-to-auristor/

by yuhong 11y ago

jeff_marshall 11y ago

Yes, ASICs to break DES were done back in 1998: https://en.wikipedia.org/wiki/EFF_DES_cracker https://en.wikipedia.org/wiki/EFF_DES_cracker

DanBC 11y ago

See, for example, COPACOBANA which uses FPGAs to crack some crypto, including DES. That was in 2008. http://www.copacobana.org/ http://www.copacobana.org/ > COPACOBANA, the Cost-Optimized Parallel COde Breaker, is an FPGA-based machine which is optimized for running cryptanalytical algorithms. COPACOBANA is suitable for parallel computation problems which have low communication requirements. DES cracking is such a parallelizable problem: an exhaustive key search of the Data Encryption Standard (DES) takes no longer than a week on average with COPACOBANA. Other ciphers can be attacked too, and COPACOBANA can also be used for parallel computing problem outside cryptography.

jaltman 11y ago

Even with afs3-rxkad-k5 the wire encryption is a watered down variant of DES called fcrypt and the use of encryption is the choice of the client. There is nothing that an administrator can do to prevent AFS3 clients communicating with AFS3 servers from leaking sensitive information onto the wire. The AuriStor File System solves these problems with the yfs-rxgk security class, volume and file server security policies, combined identities, perfect forward secrecy, and much more .... https://www.auristor.com/openafs/migrate-to-auristor/ https://www.auristor.com/openafs/migrate-to-auristor/