5 ms·
Perfect forward secrecy doesn't work that well when NSA motto is - store everything now decrypt later. If they intercept the ephemeral key exchange now they can
by ReptileMan 2y ago
Perfect forward secrecy doesn't work that well when NSA motto is - store everything now decrypt later. If they intercept the ephemeral key exchange now they can decrypt the message 10 or 50 years later.
- JKCalhoun 2y agoSomething tells me that by the end of the century only the one-time pads will still be holding their secrets.
- FredPret 2y agoEven for that to work you need a good random number generator
- adgjlsfhk1 2y agoThat's pretty trivial. xor a video camera with AES and no one is decrypting that ever.
- JKCalhoun 2y agoAnd, famously, the camera is pointing at a lava lamp, ha ha.
- JKCalhoun 2y agoHonestly not sure how they created one-time pads 100 years ago.
- rdtsc 2y agoIn one case it was people just banging on typewriters randomly.
- kortilla 2y agoDiffie Hellman doesn’t ever send the key over the wire, that’s the point. There is nothing to decrypt in the packets that tells you the key both sides derived. Unless they break ECDHE, it doesn’t matter if RSA gets popped.
- bsaul 2y agowouldn't be surprised if ecdhe isn't quantum resistant.
- ReptileMan 2y agoDiffie Hellman to the best of my understanding also relies on the same hard problems that make the public key cryptography possible. If you trivialize factoring of big numbers, you break both RSA and the original DHE. Not sure how it will work for elliptic curves, but my instinct tells me that if you make the fundamental ECC problem easy, the exchange will also go down.
- Thorrez 2y agoAccording to the top image on the Wikipedia page, Diffie Hellman does send the public key over the wire. https://en.wikipedia.org/wiki/Diffie%E2%80%93Hellman_key_exchange https://en.wikipedia.org/wiki/Diffie%E2%80%93Hellman_key_exc...