How to manipulate curve standards: a white paper for the black hat [pdf]

Re:How to manipulate curve standards: a white paper for the ... by waynecochran on Monday October 12, 2015 @05:48PM (#10377139)

From the Introduction:

    "More and more Internet traffic is encrypted. 
     This poses a threat to our society as it limits
     the ability of government agencies to monitor 
     Internet communication for the prevention of 
      terrorism and globalized crime."

and then adds

     "Fortunately, under reasonable assumptions, 
      it is feasible for agencies to fool users into 
      deploying cryptographic systems that the users 
      believe are secure but that the agencies are able 
      to break."

So good encryption is bad? What!?!?

[ Parent | on HN ]

Re:How to manipulate curve standards: a white paper for the ... by periodontal on Monday October 12, 2015 @05:53PM (#10377167)

See the last section (Afterword: removing the hat):

  First, in case this is not obvious to the reader, we do
  not actually endorse the attacker's perspective. Our goal
  in analyzing the security of systems is to prevent attacks.

[ Parent | on HN ]

Re:How to manipulate curve standards: a white paper for the ... by accommodavid on Tuesday October 13, 2015 @02:22AM (#10378810)

I met Bernstein a few months ago after he gave a talk about this same subject. In his talk he pretended to be a Verizon employee, explaining how vital it is to him and his company that they can track what their users are doing on their network in order to improve their advertising services. (Without breaking character at any point, pretty impressive.) I guess it's easier to reason about these things when you're trying to break something, rather than trying to prevent it from happening.

[ Parent | on HN ]