4 ms·

Why Europe does not develop a new system to encode/encrypt communications?, that would make tapping the line useless.

• KMag 5y ago
  No new systems need to be developed, only a will to deploy existing systems. To the best of public knowledge, Curve25519 with AES-GCM or ChaCha20-Poly1305 is good enough to keep the NSA out for years. These are available in TLS, OpenVPN, and WireGuard. Longer term, TLS, OpenVPN, and WireGuard all need to standardize post-quantum key exchange (such as Chrome's TLS experiment to run Curve25519 and RLWE key agreement protocols in parallel and run both outputs through the final key derivation function). But, for today, the main problem is deployment.
  • gccs 5y ago
    The math behind encryption cannot be broken. But the implementations can. When you have so many math PhDs attacking crypto implementations, you are bound to find a bug you can exploit. Look how long heartbleed was around.
    • KMag 5y ago
      That's an argument for auditing existing systems, not having Europe finance development of brand new systems to encrypt communications.
      • gccs 5y ago
        New systems bring new implementations ready to be broken.
• GordonS 5y ago
  If you are the security services, with an unlimited budget and carte blanche to do whatever you like, then you can covertly place equipment at either end of the communication. If the equipment is in your country, you can coerce the company to install your equipment under the guide of "national security".