5 ms·
Even without this cross-border thing, there are tons of regulations about what kind of weaponry you can have, and I don't think anyone argues that the 2nd amend
by x1798DE 11y ago
Even without this cross-border thing, there are tons of regulations about what kind of weaponry you can have, and I don't think anyone argues that the 2nd amendment would allow anyone unlimited access to bazookas or nuclear weapons. Presumably if cryptography were treated as munitions, they'd argue that you can have access to some cryptography, but not "military grade cryptography".
- 15155 11y agoHeller v. DC found that citizens may own arms in "common use." RSA-2048 is definitely in "common use."
- diyorgasms 11y agoRight but that logic could be used to prevent mass adoption of better crypto. Brand new crypto is not in "common use". We could, for instance, see the state ban the use of quantum-resistant algorithms by private citizens if citizens are only allowed to use the crypto that is in common use.
- asquabventured 11y agoWhich is useful for today, but not necessarily tomorrow.
- Spooky23 11y agoThe law has not treated new weapons in private hands (ie. explosives, automatic weapons, etc) favorably. RSA-2048 will be the small arms equivalent of a musket in 2040. Since the US government controls so much of the global brainpower for crypto, that's not a standard that is acceptable.
- rphlx 11y agoI will politely disagree. RSA-2048 implemented properly, on its own, has a significant security margin today and it's unlikely that HW advances over the next 25 years will erode that, even at a superbly-funded first-world intelligence agency. I am not saying that they won't be able to pwn you; just that they won't do so by directly cracking 2k+ RSA.
- Spooky23 11y agoThe point is that crypto is only evaluated as "secure" at a given point in time. Even if RSA-2048 is secure in 25 years, it will almost certainly not be in the same place in it's lifecycle. Even today, NSA guidance recommends RSA-3072, or RSA-2048 with an accelerated migration to Quantum-resistant crypto in the future. (https://www.nsa.gov/ia/programs/suiteb_cryptography https://www.nsa.gov/ia/programs/suiteb_cryptography) My fear is that there won't be an "AES 2", and the commercial/individual world will return to a place where we don't have access to quality, trustworthy crypto for communications and commerce. Without security, there is no trust, and without trust many of the advances in productivity and and collaboration that we've gained in the last 20 years will be substantially weakened.