3 ms·
Several years ago I worked with a senior tech that had previously worked for the NSA. For his personal private data he secured it using nothing less than 4096 b
by josho 14y ago
Several years ago I worked with a senior tech that had previously worked for the NSA. For his personal private data he secured it using nothing less than 4096 bit encryption.
Due to his confidentiality agreements he couldn't provide specifics about the NSA's capabilities, he only would share his own personal security practices. After that discussion I concluded that if the US Government wanted to know something about you they could find out. Not only by technical means, but by any channel you could likely imagine. These guys are smart, the idiots you hear about in the media are field agents, not the back office folks conducting the real security work.
Since that time I've also assumed that the US has encryption technology that is at least 5 years ahead of public research. Today, I assume that means the US has access to a functional quantum computer and anything using today's encryption standards are left insecure if the right 3 letter agency wants to know.
- Jach 14y agoRSA-based encryption may be insecure right now; I strongly doubt any agency has access to a quantum computer powerful enough to break it. But if it is insecure, it doesn't really matter. The US can't do anything with the information it gains, because the US can't let anyone know they can break RSA-based crypto. Once it becomes known that powerful enough quantum computers are around, the entire crypto community will switch to one of the several algorithms that are immune to quantum attacks, so their capability is really only useful for a one-time thing. If I was a major criminal organization I might have already invested time to switch algorithms.