3 ms·
> But coding these algorithms is no joke. They've already been written. RSA isn't going to magically disappear. Open source implementations of quality crypto
by 15155 9y ago
> But coding these algorithms is no joke.
They've already been written. RSA isn't going to magically disappear.
Open source implementations of quality crypto aren't going to up and vanish, just as how instructions to make bombs won't vanish.
Ostensibly, the crypto implementations available today will be good well into the future, barring quantum computing advances.
- criddell 9y agoImplementations suffer not just from actual bugs, but from implementation choices that leak information (power consumption, timing data, etc...) Crypto implementation available today are only good until they are not anymore and it's impossible to say when that might happen. For example, a new compiler optimization might expose something that wasn't previously exposed.
- mikeash 9y agoSide channel attacks are generally irrelevant for the scenario where a terrorist is using their own electronics to communicate with their fellows.
- 15155 9y agoWhich is the oft-cited reason we need government key escrow...
- 15155 9y agoThese situations do exist, but that doesn't change the point that the genie is out of the bottle. People who want this software are going to be able to have it. End of story. If a timing attack happens to pop up in it, great, that's a win for the government. But by and large, these messages will go without decryption. As with anything: these measures will not stop the determined lawbreaker - not that they necessarily need to.