4 ms·
Your understanding in of cryptography appears to be "private means private" > A published private key by definition is worthless. If I publish the AACS _priva
by admax88qqq 3y ago
Your understanding in of cryptography appears to be "private means private"
> A published private key by definition is worthless.
If I publish the AACS _private_ key, is it now worthless?
- jiggawatts 3y agoYes! It becomes worthless for copy protection. Public-private key pairs only work if the private key is secret. If it’s not secret it doesn’t work. This is a simple fact of how cryptography works. Or passwords, keys, or any secret like an API key, etc… If you publish such things on GitHub, they instantly become “not what you’ve labelled it as”.
- admax88qqq 3y ago> It becomes worthless for... So you admit it's not completely worthless at that point only for specific use cases.
- jiggawatts 3y agoSure, it has uses: it can be printed on a T-shirt to teach big media a lesson about the futility of copy protection, etc…
- admax88qqq 3y agoPlus it lets people decrypt media encrypted by that key that they might otherwise have been unable to. So we've established that a "private key" that is no longer private may still have uses to some people, it is not wholly "worthless." Do you want to revise your earlier statement about the private key in the repo in question? Is it "worthless"? Is it a security problem? Do you know what that key is being used for?