3 ms·
No. In fact it's a matter of trust. You can trust Skype that calls are encrypted and cannot be eavesdropped, you can trust Verizon that your cellphone metadata
by vilda 13y ago
No. In fact it's a matter of trust.
You can trust Skype that calls are encrypted and cannot be eavesdropped, you can trust Verizon that your cellphone metadata are not passed to government automatically, and you can trust Intel that their rnd is not backdoored.
Or you don't.
- tptacek 13y agoHelp me understand how someone who believes rdrand might be backdoored could trust any HSM?
- chiph 13y agoYou can't, if you're that serious/paranoid about it. It's possible that the HSM maker wasn't approached by the NSA and is secure, but there are very few of them in the US so chances of the NSA having missed one is very low. Plus, without a STM to inspect the silicon and reverse-engineer it, how would you know? So what if you buy one made outside the US? Say, China. Well, there's the obvious possibility that the Chinese authorities have backdoored the silicon. But my guess is that the Chinese maker just cloned one of the US vendors, including the portions inserted by the NSA...
- bigiain 13y agoI'd -consider- "trusting" a random number generator that collects entropy from a Chinese, a Russian, and a US based HSM manufacturer… An "array of mutually untrustworthy opponents", if you like…