3 ms·
The NSA is a pragmatic organization and is concerned only by "nobody but us until somebody figures it out", so long as there is an operational advantage it prov
by notveryrational 8y ago
The NSA is a pragmatic organization and is concerned only by "nobody but us until somebody figures it out", so long as there is an operational advantage it provides to the United States.
We should also note that "nobody but us until somebody figures it out" is true also of ECDLP. I'm not really interested in that argument, because we both know exactly where it goes. Is it different than symmetric cryptography? Yes. But we're talking about symmetric cryptography.
> Second, you can't argue that something is an NSA backdoor when NSA's only role in standardizing crypto relative to it is to make the standard resistant to it.
Nobody is.
Yes, the NSA almost certainly has unique-to-NSA analytic techniques. New techniques are discovered in the academic community on a regular basis - they aren't rare in some way that it would be reasonable to believe that a professional community of the world's best cryptographers with their own cryptanalytic communities, working full time, would have discovered and honed their own. In fact, it would be pretty unusual to believe they don't.
You misunderstand NOBUS. It's purely a pragmatic expression meaning advantage. NSA is under no illusions that their advantage in cryptography on every standard is going to last forever.
Please don't spread FUD on NOBUS.
- tptacek 8y agoI don't understand the distinction you're trying to draw between block ciphers and the ECLDP. Dual EC was an RNG, which is (among other things) an important symmetric primitive. I think the definition of NOBUS that you're working is the one that's broken, not mine. I also think you're overestimating the frequency with which powerful new techniques for attacking block ciphers occur in the literature. It's 2018 and the debate about Speck's security still hinged in part on Matsui. Fundamental new cryptanalytic techniques against block ciphers are, in fact, pretty rare.
- notveryrational 8y ago> I don't understand the distinction you're trying to draw between block ciphers and the ECLDP. Dual EC was an RNG, which is (among other things) an important symmetric primitive. I think the definition of NOBUS that you're working is the one that's broken, not mine. I'm not sure where we'll get with it. I'm okay with your misunderstanding. Please ignore that part of the comment and read the remaining content. Please don't let an objection on a small part of the content distract you from the remaining content of the argument. > I also think you're overestimating the frequency with which powerful new techniques for attacking block ciphers occur in the literature. You are clearly underestimating the frequency. We both understand how heavily caveated your argument referencing Matsui is. My fear is that your misunderstanding and underestimation will lead to FUD about backdoors, like it did last time with DUAL_EC. It's also important to note that your argument has shifted significantly in this short exchange. NSA only cares about NOBUS weaknesses for operational and national security advantages. Thanks for your time.
- tptacek 8y agoI don't understand what you're trying to say about how "caveated" the Matsui reference is.
- notveryrational 8y agoSea lioning, arguments from bad faith, downvotes and scare quotes? Please stop trolling me.