6 ms·

You're joking right? http://en.wikipedia.org/wiki/Protect_America_Act_of_2007#Data_monitoring http://en.wikipedia.org/wiki/Protect_America_Act_of_2007#Dat...

• jrockway 17y ago
  But they haven't broken AES or the key exchange protocols. Nobody sends important data across the Internet unencrypted.
  • milkshakes 17y ago
    DJB had some interesting thoughts on AES and its vulnerability to timing based attacks, here: http://cr.yp.to/antiforgery/cachetiming-20050414.pdf http://cr.yp.to/antiforgery/cachetiming-20050414.pdf While network latencies would definitely make this type of attack more challenging to implement, AES is not invincible. And that's just the stuff we hear about :)
    • tedunangst 17y ago
      If you're sending encrypted files across the internet, the government doesn't get to see how long it took to encrypt the data. And if you're running an open "encrypt anything my secret key" oracle, well, you get what you deserve.
      • jrockway 17y ago
        Indeed. This sort of attack is good for breaking DRM, but not so good for any legitimate uses of cryptography.