3 ms·

> In reality, the encryption standards (SM1, SM2, SM3, SM4, etc) in China allows strong encryption. Those are not strong encryption standards. They have dual k

> In reality, the encryption standards (SM1, SM2, SM3, SM4, etc) in China allows strong encryption. Those are not strong encryption standards. They have dual key escrow such that the government can backdoor the connection with their own key. Those are China made encryption standards for use primarily with government products but they are attempting to also force them on the general public. > I don't see any clues stating that China forbids encryption technology with a key greater than 256 bits. That is exactly what this results in, because your choice is either a government backdoored encryption method (which basically means it isn't encrypted at all) or a non-backdoored encryption method that is limited to a key size no greater than 256 bits. I will note, with this over reliance on dual key escrow. If a foreign government were to steal that key through espionage without China's knowledge, it would let say the US government to backdoor China's own government communications.

tablespoon 5y ago
> I will note, with this over reliance on dual key escrow. If a foreign government were to steal that key through espionage without China's knowledge, it would let say the US government to backdoor China's own government communications. Why would a government use key escrow for its own internal encryption (for actual important communications, as opposed to "retail" business functions like running garbage pickup operations)?
- halJordan 5y ago
  Your question presumes a Western, liberal paradigm of how govts should function. Most of the answer rests in different levels of institutional mistrust. Authoritarian govts are necessarily always operating under a siege mentality, so they must check on each other. Noting that, at the highest level the Chinese govt is wholly controlled by the Chinese Communists and the Communists correctly note the existential threat their bureaucrats pose. And it cascades down from there. There’s an illustrative proverb that goes “Heaven is high and the emperor is far away.” This idea justifies doing something you know is wrong, but is unlikely to be punished. So to answer the question, the govt is not using key escrow for its own internal communications. Because it isn’t a monolith, and it’s not internal. The different fiefs need to be watched as much as anyone else.
- mlindner 5y ago
  > Why would a government use key escrow for its own internal encryption (for actual important communications, as opposed to "retail" business functions like running garbage pickup operations)? Because governments (especially dictatorships) are most scared of their own members who can possibly seize power.

tablespoon 5y ago

> I will note, with this over reliance on dual key escrow. If a foreign government were to steal that key through espionage without China's knowledge, it would let say the US government to backdoor China's own government communications. Why would a government use key escrow for its own internal encryption (for actual important communications, as opposed to "retail" business functions like running garbage pickup operations)?

halJordan 5y ago
Your question presumes a Western, liberal paradigm of how govts should function. Most of the answer rests in different levels of institutional mistrust. Authoritarian govts are necessarily always operating under a siege mentality, so they must check on each other. Noting that, at the highest level the Chinese govt is wholly controlled by the Chinese Communists and the Communists correctly note the existential threat their bureaucrats pose. And it cascades down from there. There’s an illustrative proverb that goes “Heaven is high and the emperor is far away.” This idea justifies doing something you know is wrong, but is unlikely to be punished. So to answer the question, the govt is not using key escrow for its own internal communications. Because it isn’t a monolith, and it’s not internal. The different fiefs need to be watched as much as anyone else.
mlindner 5y ago
> Why would a government use key escrow for its own internal encryption (for actual important communications, as opposed to "retail" business functions like running garbage pickup operations)? Because governments (especially dictatorships) are most scared of their own members who can possibly seize power.