3 ms·

It's not a false claim, assuming the feds will keep such a key "secure" is not backed by evidence. Top secret materials are leaked all the time. Private keys fr

It's not a false claim, assuming the feds will keep such a key "secure" is not backed by evidence. Top secret materials are leaked all the time. Private keys from well secured systems are extracted from hacks. The FBI having such a key would make them a very profitable target for the various corps that specialize in hacking for hire. For example, NSO group. If the power doesn't exist, nobody can exploit it.

coppsilgold 3y ago
Do military cryptographic keys leak often? Do nuclear codes leak? The times highly valuable cryptographic keys leaked for various cryptocurrency exchanges it has generally if not always been due to gross negligence. Such a key would be highly sensitive and it would also require very little traffic to use. You would just need to send the secure system a KEM (<100 bytes) and it will respond with the symmetric key used for the protected package. I don't doubt they could secure it. Can even split the key into shares and require multiple parties to be present in the secure location.
- dvngnt_ 3y ago
  nuclear codes are probably not used as much as phone backdoors. local police wants access too and other governments so I do believe it would leak
- some_furry 3y ago
  > Do nuclear codes leak? For many years, the code was 00000000. https://arstechnica.com/tech-policy/2013/12/launch-code-for-us-nukes-was-00000000-for-20-years/ https://arstechnica.com/tech-policy/2013/12/launch-code-for-...
- jliptzin 3y ago
  What are you going to do with a nuclear code without access or authority to launch the nukes?
- devwastaken 3y ago
  You're creating so many assumptions that nothing you've stated could be concluded to be an honest reflection of reality. Nobody has to know the rate of leaks, it's irrelevant. Gross negligence is not necessary, how would you even know? Leaks by definition are rarely exposed, we only see some of them. A "highly sensitive" key doesn't mean anything. Assigning more words to it doesn't somehow change the nature of it. Humans are bad at securing things, that's why the best security is to not have a system that requires it. Whatever hypothetical solution you have would be crushed under the weight of government committees and office politics until your security measures are bogus.

coppsilgold 3y ago

Do military cryptographic keys leak often? Do nuclear codes leak? The times highly valuable cryptographic keys leaked for various cryptocurrency exchanges it has generally if not always been due to gross negligence. Such a key would be highly sensitive and it would also require very little traffic to use. You would just need to send the secure system a KEM (<100 bytes) and it will respond with the symmetric key used for the protected package. I don't doubt they could secure it. Can even split the key into shares and require multiple parties to be present in the secure location.

dvngnt_ 3y ago
nuclear codes are probably not used as much as phone backdoors. local police wants access too and other governments so I do believe it would leak
some_furry 3y ago
> Do nuclear codes leak? For many years, the code was 00000000. https://arstechnica.com/tech-policy/2013/12/launch-code-for-us-nukes-was-00000000-for-20-years/ https://arstechnica.com/tech-policy/2013/12/launch-code-for-...
jliptzin 3y ago
What are you going to do with a nuclear code without access or authority to launch the nukes?
devwastaken 3y ago
You're creating so many assumptions that nothing you've stated could be concluded to be an honest reflection of reality. Nobody has to know the rate of leaks, it's irrelevant. Gross negligence is not necessary, how would you even know? Leaks by definition are rarely exposed, we only see some of them. A "highly sensitive" key doesn't mean anything. Assigning more words to it doesn't somehow change the nature of it. Humans are bad at securing things, that's why the best security is to not have a system that requires it. Whatever hypothetical solution you have would be crushed under the weight of government committees and office politics until your security measures are bogus.