3 ms·

"128-bit encryption has now emerged as the standard of illegality.[16]" [1] [1] https://cyber.law.harvard.edu/privacy/Encryption%20Description.html#_ftnref16 h

by bArray 10y ago

"128-bit encryption has now emerged as the standard of illegality.[16]" [1] [1] https://cyber.law.harvard.edu/privacy/Encryption%20Description.html#_ftnref16 https://cyber.law.harvard.edu/privacy/Encryption%20Descripti...

raesene9 10y ago
That doesn't seem to have much to do with cars... Also properly implemented 128-bit encryption is generally secure for 15 minutes or 15 days or probably years (the largest key I'm aware of having been cracked is 64-bit and that took a lot of computers a looong time)
- enkid 10y ago
  This is absolutely true. For example, the US gov depends on 128 bit equivalent crypto to stop quantum factoring attacks for the foreseeable future.
  - akshatpradhan 10y ago
    A google search of "US Government 128 bit quantum factoring". Stop trying to blame the government for corporations not doing due diligence. If anything, the real failure is Government not enforcing agreeable security measures like NIST and ISO across all US Organizations.
- bArray 10y ago
  If I remember rightly, it's set as a maximum for the purpose of allowing cracking. I imagine it would take ages if they were using AES, but I think they are using something more arbitrary than that. I'll try to find out. It seems you're interested, I'll see if I can contact them and find out more. I know they mostly adhere to the Ford specs, so it might be worth a hunt through them. I honestly can't seem to find any of the security spec we were given online. Even so, it's worth pointing out that the car companies have the private keys for flashing the vehicles themselves, all stored nicely in a massive database. The dealerships simply plug in a code to a computer and returned is a key to unlock. I know that they bend over backwards to any requests from Government agencies. Also, the only difference in the software is usually just a language setting, something that's a few bits in the config file. Other than that, they are identical. So a hack for one Country is a hack for all - across multiple models and multiple years.

by bArray 10y ago

raesene9 10y ago

That doesn't seem to have much to do with cars... Also properly implemented 128-bit encryption is generally secure for 15 minutes or 15 days or probably years (the largest key I'm aware of having been cracked is 64-bit and that took a lot of computers a looong time)

enkid 10y ago
This is absolutely true. For example, the US gov depends on 128 bit equivalent crypto to stop quantum factoring attacks for the foreseeable future.
- akshatpradhan 10y ago
  A google search of "US Government 128 bit quantum factoring". Stop trying to blame the government for corporations not doing due diligence. If anything, the real failure is Government not enforcing agreeable security measures like NIST and ISO across all US Organizations.
bArray 10y ago
If I remember rightly, it's set as a maximum for the purpose of allowing cracking. I imagine it would take ages if they were using AES, but I think they are using something more arbitrary than that. I'll try to find out. It seems you're interested, I'll see if I can contact them and find out more. I know they mostly adhere to the Ford specs, so it might be worth a hunt through them. I honestly can't seem to find any of the security spec we were given online. Even so, it's worth pointing out that the car companies have the private keys for flashing the vehicles themselves, all stored nicely in a massive database. The dealerships simply plug in a code to a computer and returned is a key to unlock. I know that they bend over backwards to any requests from Government agencies. Also, the only difference in the software is usually just a language setting, something that's a few bits in the config file. Other than that, they are identical. So a hack for one Country is a hack for all - across multiple models and multiple years.