3 ms·
Unfortunately the technical details are layered underneath a bunch of fudging to make them layman-readable. Schneier doesn't even describe the attacks, just say
by cookiecaper 13y ago
Unfortunately the technical details are layered underneath a bunch of fudging to make them layman-readable. Schneier doesn't even describe the attacks, just says that they're not mathematical. One would expect that this means the NSA has access to most if not all accepted SSL authorities and generates keys which they can utilize to sniff a connection at will. This is pretty much obvious, and any intelligence agency that HASN'T "compromised" SSL by gaining access to the master keys is probably very incompetent indeed.
That said, does someone have a brief rundown of the details from a technical perspective, so I don't have to read through several long news articles mostly filled with elementary explanations of basic concepts?