3 ms·
There are ways to backdoor encryption without weakening encryption. In fact defcon hackers are constantly talking about how vulnerabilities in encrypting can ma
by nashashmi 7y ago
There are ways to backdoor encryption without weakening encryption. In fact defcon hackers are constantly talking about how vulnerabilities in encrypting can make decrypting easier.
Allow me to openly think about this:
Take an image for example. If I hash it and encrypt it I can still recognize similar pictures. If I use a different set of analysis like color distribution I can also identify the picture with more time. If I release tiny bits of encryption key, I can weaken encryption but still cause a significant time of consumption to break down the code. Meaning it still won't be easy without effort.
I believe NSA tried to weaken encryption in a way that only they could break the code with enough time. They ran some sort of limitation on the kinds of keys that were generated.
This still brings a high cost to decrypting but streamlines it so that only certain people will have the power of doing so.
- beagle3 7y agoAnd then you will have actors who build their own dedicated hardware (like e.g. BitMain did for BitCoin mining) that is on par with state level actors -- many of which are likely now comparable to the NSA. A little farther, you'll have services where you bring your own message ("really really mine. I just forgot the encryption key!"), pay, and get a decryption. There is no way to select who the encryption is "weak" for and who it is "strong" for, except with a backdoor (e.g. DUAL_DRBG, or backdooring an RSA private key generation so the public key includes an encrypted version of the seed used for the private key) -- but a backdoor, once open, is open for everyone.