3 ms·

Trying to learn some more about crypto, what sort of answer would you be looking for? Would Diffie-Hellman be appropriate?

by timlyo 10y ago

ChuckMcM 10y ago
Yes (and no). Asymmetric which is based on key pairs (generally one public and one private) allow you to pass around a key that can be intercepted without compromising your ability to communicate securely using the key your didn't pass around. That said, it is always important to be attuned to whether or not those keys can be compromised by "brute force" or through a weakness. So the vendor who is thinking about it, would have told me about their public key system which is used in the initial transfer to protect the secrets. Then they would have described how they can upgrade and change keys over time as attackers gain the upper hand on various bit lengths, and how the elements of their system that depend on randomness, do so without being susceptible to a birthday attack or an algorithm attack on their PRNG. When they do that, I know they've been thinking seriously about how such systems are built and deployed and there is some hope that doing the do diligence "deep dive" will show me a solid system.
- t0mas88 10y ago
  And one part that is often forgotten: How to authenticate the other side. Without authentication asymmetric encryption is still useless, because someone could man-in-the-middle your key exchange, swap out the public key that is sent both ways and make either side think they now have a secure channel with each other while in reality they have a secure channel with the man in the middle. So the challenge is that they'll need some equivalent of what in the HTTPS world would be a Certificate Authority. For which you'll have the same kind of update/upgrade path questions that you very rightfully ask for the key lengths.
  - ChuckMcM 10y ago
    Very true. Early on in Java's gestation I was building into it a full capabilities system for security. One of the challenges of loading classes which provided export proscribed encryption capability was having the JVM authenticate the class, and having the class authenticate the JVM it was being loaded in to. Of course not all situations need that, but understanding what the endpoints are trying to achieve and how that objective could be compromised by an attacker will inform on which identities must be established, and to whom, in order to achieve that objective.

Trying to learn some more about crypto, what sort of answer would you be looking for? Would Diffie-Hellman be appropriate?

by timlyo 10y ago

Trying to learn some more about crypto, what sort of answer would you be looking for? Would Diffie-Hellman be appropriate?

ChuckMcM 10y ago

Yes (and no). Asymmetric which is based on key pairs (generally one public and one private) allow you to pass around a key that can be intercepted without compromising your ability to communicate securely using the key your didn't pass around. That said, it is always important to be attuned to whether or not those keys can be compromised by "brute force" or through a weakness. So the vendor who is thinking about it, would have told me about their public key system which is used in the initial transfer to protect the secrets. Then they would have described how they can upgrade and change keys over time as attackers gain the upper hand on various bit lengths, and how the elements of their system that depend on randomness, do so without being susceptible to a birthday attack or an algorithm attack on their PRNG. When they do that, I know they've been thinking seriously about how such systems are built and deployed and there is some hope that doing the do diligence "deep dive" will show me a solid system.

t0mas88 10y ago
And one part that is often forgotten: How to authenticate the other side. Without authentication asymmetric encryption is still useless, because someone could man-in-the-middle your key exchange, swap out the public key that is sent both ways and make either side think they now have a secure channel with each other while in reality they have a secure channel with the man in the middle. So the challenge is that they'll need some equivalent of what in the HTTPS world would be a Certificate Authority. For which you'll have the same kind of update/upgrade path questions that you very rightfully ask for the key lengths.
- ChuckMcM 10y ago
  Very true. Early on in Java's gestation I was building into it a full capabilities system for security. One of the challenges of loading classes which provided export proscribed encryption capability was having the JVM authenticate the class, and having the class authenticate the JVM it was being loaded in to. Of course not all situations need that, but understanding what the endpoints are trying to achieve and how that objective could be compromised by an attacker will inform on which identities must be established, and to whom, in order to achieve that objective.