4 ms·
Schenier, Hal Abelson, Adelman (from RSA) already wrote about key escrow almost 2 decades ago. From the text: > All key-recovery systems require the existence
by makmanalp 11y ago
Schenier, Hal Abelson, Adelman (from RSA) already wrote about key escrow almost 2 decades ago. From the text:
> All key-recovery systems require the existence of a highly sensitive and highly-available secret key or collection of keys that must be maintained in a secure manner over an extended time period. These systems must make decryption information quickly accessible to law enforcement agencies without notice to the key owners. These basic requirements make the problem of general key recovery difficult and expensive -- and potentially too insecure and too costly for many applications and many users.
> Attempts to force the widespread adoption of key-recovery encryption through export controls, import or domestic use regulations, or international standards should be considered in light of these factors. The public must carefully consider the costs and benefits of embracing government-access key recovery before imposing the new security risks and spending the huge investment required (potentially many billions of dollars, in direct and indirect costs) to deploy a global key recovery infrastructure.
https://www.schneier.com/cryptography/archives/1997/04/the_risks_of_key_rec.html https://www.schneier.com/cryptography/archives/1997/04/the_r...