News for hackers. Stuff that matters.
Re:How is NSA breaking so much crypto? (2015) by bsder on Saturday December 17, 2016 @01:04AM (#13199520)
> But news like this shows that there is an antithesis: the conventional encryption techniques are also potentially widely exploitable by state-level actors.

Are they? Really? We know that NSA has lots of vectors for exploiting the system AROUND encryption. We have pretty solid evidence that the NSA has weakened some encryption standards to make them crackable.

We DON'T have evidence that encryption developed outside the milieu of the NSA are equally crackable. And circumstantial evidence suggests quite the opposite.

The problem is that there are lots of things to get right to get crypto right, and getting even one wrong leads to failure. Which is why we tell people not to roll their own encyption and to let the experts do it.

Another problem with too many people rolling their own encryption is that it dilutes attention and no system gets sufficiently audited.

Re:How is NSA breaking so much crypto? (2015) by rainloft on Saturday December 17, 2016 @01:49AM (#13199633)
It took 33 years before it was publicly announced that GCHQ succeeded in deciphering Enigma codes.

Every single time they used intercepted intelligence to their benefit, they made sure to leave false trails of other ways they could've known so the Germans wouldn't suspect.

I would expect the NSA could hide it well.

Re:How is NSA breaking so much crypto? (2015) by mirimir on Saturday December 17, 2016 @06:18AM (#13200219)
Well, from what I've read, that's why they didn't share information about the 9-11 team. And during WWII, they let some convoys go down to protect their methods. It's a tough call. One thread of Stephenson's Cryptonomicon covers this.
Re:How is NSA breaking so much crypto? (2015) by schoen on Saturday December 17, 2016 @10:16AM (#13200975)
The best-known case about this is partly a myth or misconception:

https://en.wikipedia.org/wiki/Coventry_Blitz#Coventry_and_Ul...

Re:How is NSA breaking so much crypto? (2015) by agumonkey on Saturday December 17, 2016 @07:01AM (#13200380)
Perfect timing, I'm currently at page 2.
Re:How is NSA breaking so much crypto? (2015) by usrusr on Saturday December 17, 2016 @08:38AM (#13200657)
But how then can you post here instead of going on to page n+1? Something does not quite add up ;)
Re:How is NSA breaking so much crypto? (2015) by agumonkey on Saturday December 17, 2016 @09:18AM (#13200779)
I'm not an english native speaker, and 40s war zone literature is not as smooth as one can imagine.
Re:How is NSA breaking so much crypto? (2015) by chiph on Saturday December 17, 2016 @10:28AM (#13201017)
His writing is pretty dense, so even native English speakers have to take it slow in order not to miss something.
Re:How is NSA breaking so much crypto? (2015) by mirimir on Saturday December 17, 2016 @05:06PM (#13202954)
Yes, he is one of those authors. Every block of every thread ends with a cliff-hanger, and you need to read two more blocks before you get resolution. But then, you've encountered three more cliff-hangers ;) So after the first read, I bookmark heavily, and read each thread independently. And sometimes I just reread my favorite threads. Such as Bobby's thread in this book. Also his ancestor in Baroque Cycle, "King of the Vagabonds".
Re:How is NSA breaking so much crypto? (2015) by mirimir on Saturday December 17, 2016 @07:31AM (#13200467)
:)

So I've read everything of his at least three times. And I'm waiting. Anyone know if something's immanent?

Re:How is NSA breaking so much crypto? (2015) by waterphone on Saturday December 17, 2016 @07:46PM (#13203688)
Neal Stephenson's next book is The Rise and Fall of D.O.D.O., co-written with Nicole Galland, currently to be released June 13, 2017. It seems to be something in a little different vein than his other works, but I'll read it as I do all his books.

https://www.amazon.com/Rise-Fall-D-O-D-O-Novel/dp/0062409166...

Re:How is NSA breaking so much crypto? (2015) by mirimir on Sunday December 18, 2016 @12:52AM (#13204564)
Thanks! I don't know Ms. Galland's work, but it's not much of a stretch from Anathem ;) And consider that collaboration in Mongoliad. So hey, I know what I'll be reading in June.
Re:How is NSA breaking so much crypto? (2015) by agumonkey on Saturday December 17, 2016 @07:46AM (#13200500)
I can't answer that at all, I'm just saying that if I ever get to the end of that 1100+ paper brick.. I sohuld probably travel to his town to express how good a storyteller he is.
Re:How is NSA breaking so much crypto? (2015) by ihaveajob on Saturday December 17, 2016 @09:41AM (#13200866)
So worth the time investment. I read it in college and it was mind blowing. Now... I have a kid to feed! But I yearn for books like that one.
Re:How is NSA breaking so much crypto? (2015) by waterphone on Saturday December 17, 2016 @07:42PM (#13203664)
If you haven't yet, read The Baroque Cycle too. It's set in the same universe, approximately 300 years earlier, with an ensemble cast of historical and fictional characters. Very long, very dense at times, and yet a masterful and very rewarding work in my opinion. The audiobooks read by Simon Prebble are also quite good if you don't have the time to read it in print but do have time where you could listen to it.
Re:How is NSA breaking so much crypto? (2015) by mirimir on Saturday December 17, 2016 @08:17PM (#13203793)
Yes! It's very cool to get the back-story of the Shaftoes and Waterhouses. And the enigmatic Enoch Root, who arguably appears as well in The Mongoliad trilogy. Maybe he's even mentioned in Anathem, but I may be stretching for that.
Re:How is NSA breaking so much crypto? (2015) by Ar-Curunir on Saturday December 17, 2016 @10:25PM (#13204144)
ENIGMA is easy compared to modern crypto; it did not have a sound mathematical analysis. Hell there was no such thing as proper cryptanalysis back then.

Academia is much more advanced now; all the tools we have for reasoning about our cryptography were developed in academia, with no evidence that the NSA has shown any interest in that kind of stuff. (In fact the NSA has expressed disdain for academic cryptography).

Re:How is NSA breaking so much crypto? (2015) by sah2ed on Sunday December 18, 2016 @11:39AM (#13206373)
"There are hundreds of mathematicians in the NSA, far more than in academic settings, so readership for a typical paper is wider than in the world at large ..." [1]

[1] http://www.nature.com/naturejobs/science/articles/10.1038/35...

Re:How is NSA breaking so much crypto? (2015) by Ar-Curunir on Tuesday December 20, 2016 @09:28PM (#13226350)
That is 15 years old; cryptography as a field has seen tremendous growth in that time frame.
Re:How is NSA breaking so much crypto? (2015) by ooqr on Sunday December 18, 2016 @09:05AM (#13205835)
Don't they hire loads of mathematicians? What else would that be for?
Re:How is NSA breaking so much crypto? (2015) by gech on Sunday December 18, 2016 @10:56AM (#13206191)
How much do they pay
Re:How is NSA breaking so much crypto? (2015) by WalterBright on Saturday December 17, 2016 @05:36AM (#13200113)
I am still surprised that the Japanese and Germans did not figure out their codes had been broken. The disaster of the U-boot campaign was pretty good evidence of that, if nothing else.

Besides, expecting a widely used and deployed cryptosystem to be uncompromised for years is absurd. They should have assumed it would be broken, and developed regular replacements.

Re:How is NSA breaking so much crypto? (2015) by Lagged2Death on Saturday December 17, 2016 @08:53AM (#13200703)
I am still surprised that the Japanese and Germans did not figure out their codes had been broken.

There must have been a lot of people who had suspicions.

But consider: for many years, US citizens who talked about ECHELON were considered crazies. Later, Bush's enormous surveillance expansion was mostly denied or dismissed. The 2016 Russian hacks of the DNC and the propaganda machine were brought up on national television during the debates. Yet there was denial, dismissal, and very little concern.

Without a plan for responding or reacting, denial is a very appealing way to deal with upsetting news. The Germans and the Japanese who were in a position to suspect that their communications had been compromised were also embedded in a totalitarian military chain of command, more focused on preserving the relative power of the people at the top than anything else. Questioning the efficacy of the system is easily cast as disloyalty. What could anyone do?

Re:How is NSA breaking so much crypto? (2015) by antman on Saturday December 17, 2016 @05:45AM (#13200132)
They organized airplane flyovers that "saw" the U-boats. The Germans did not know how many aircrafts were patrolling and whether it was a high or low probability of being spotted.

If the British could not organize a parallel construction they simply let it go. They knew the plan for Crete invasion but they could not create a story on how they learned it so they preferred to lose naval control of the large part of the eastern Mediterranean sea. [0]

[0] https://www.amazon.com/Churchill-Secret-Service-David-Staffo...

Re:How is NSA breaking so much crypto? (2015) by WalterBright on Saturday December 17, 2016 @06:35AM (#13200290)
The sub killers were waiting at meeting points for the U-boots and their "milk cows" so often that the obvious possibilities were:

1. the allies had enormous numbers of sub killers 2. the allies were incredibly lucky 3. Enigma was broken

Waiting for proof before acting is not a sensible decision.

(Even in WW1, the aviators regularly changed their codes used. They knew they were only good for a few days each.)

Re:How is NSA breaking so much crypto? (2015) by empath75 on Saturday December 17, 2016 @11:51AM (#13201325)
Let's imagine you've figured out that the codes were broken in Hitler's Germany. The only solution is replacing an expensive encryption system with another, equally expensive system, including all the training that goes along with it.

Who do you tell? And who is the guy that going to go to Hitler to tell him that their unbreakable system is broken?

Re:How is NSA breaking so much crypto? (2015) by WalterBright on Saturday December 17, 2016 @12:01PM (#13201363)
You go to Admiral Doenitz, who already suspected it was broken, and was talked into not changing it by underlings, not Hitler.

BTW, my reading books about it suggests that one was not executed in the military for questioning orders. One reason the German military was so effective is much discretion was allowed by underlings, as well as listening to them.

Re:How is NSA breaking so much crypto? (2015) by leoc on Sunday December 18, 2016 @01:37PM (#13206930)
I'm not well versed on the subject, but I assume it was just another of those large-scale intelligence failures, like the https://en.wikipedia.org/wiki/Englandspiel only with the boot on the other foot. Groupthink in action again. Also, given the large number of important ciphers which were broken during the war, I'd guess wildly that the pre-war crypto communities (such as they were) were generally much too complacent about the risks from cryptanalysis, likely because ciphers had never been subjected to state attack on a Manhattan Project scale before. Comparable to the long time it apparently took for people to become generally aware of C buffer overflows as a serious security problem, maybe.
Re:How is NSA breaking so much crypto? (2015) by ISL on Saturday December 17, 2016 @11:35AM (#13201259)
5. There was a mole.
Re:How is NSA breaking so much crypto? (2015) by Retric on Saturday December 17, 2016 @08:53AM (#13200704)
4. The US had some other means of tracking subs.
Re:How is NSA breaking so much crypto? (2015) by WalterBright on Saturday December 17, 2016 @09:14AM (#13200767)
Not long range methods other than breaking Enigma messages which said where/when U-boots were to go. This is what made breaking Enigma so important.
Re:How is NSA breaking so much crypto? (2015) by Retric on Saturday December 17, 2016 @10:25AM (#13201009)
That's what we actually did, however RADAR was a new thing allowing a small number of British aircraft to regularly intercept Bombers. Without any evidence it must have seemed probable for something similar to be locating subs.
Re:How is NSA breaking so much crypto? (2015) by lostlogin on Saturday December 17, 2016 @11:55AM (#13201339)
Regularly intercept in daylight - it performed poorly roughy that at night interception rates were abysmal.
Re:How is NSA breaking so much crypto? (2015) by Retric on Saturday December 17, 2016 @02:36PM (#13202065)
Detection worked just fine at night. The problem was: "Although the RAF control stations were aware of the location of the bombers, there was little they could do about them unless fighter pilots made visual contact." https://en.wikipedia.org/wiki/Radar_in_World_War_II
Re:How is NSA breaking so much crypto? (2015) by lostlogin on Saturday December 17, 2016 @11:57AM (#13201347)
The codes were changed regularly but the system was compromised. Naval codes were harder to break and often the allies had long periods of being in the dark.
Re:How is NSA breaking so much crypto? (2015) by dboreham on Saturday December 17, 2016 @07:58PM (#13203730)
4. Airborne Radar had been developed.
Re:How is NSA breaking so much crypto? (2015) by adekok on Saturday December 17, 2016 @10:17AM (#13200979)
The British did significant amounts of data analysis and traffic analysis. e.g. estimating German tank production by looking at the serial numbers of captured / destroyed German tanks.

I don't recall anything about the Germans doing the same thing.

Re:How is NSA breaking so much crypto? (2015) by funnyfacts365 on Sunday December 18, 2016 @06:53AM (#13205472)
Ofcourse you don't. They lost. Winners write history as they want...
Re:How is NSA breaking so much crypto? (2015) by mturmon on Saturday December 17, 2016 @07:09AM (#13200411)
Another factor (according to the excellent Battle of Wits by Budiansky) was that the Germans were overconfident that Enigma was unbreakable. Turned out their confidence in the hard computation that would need to be done to decode Enigma was wrong.
Re:How is NSA breaking so much crypto? (2015) by rythie on Sunday December 18, 2016 @08:11AM (#13205697)
This was not a trivial system for it's time. Do you change your ssh keys and certificates every day?

The enigma had a new encryption code for everyday distributed on paper and torn off and destroyed once used. The were different codes and machines used in different branches of the army/navy and the system was updated through the war.

The British didn't get to see the machines or it's method for many years. There were 159 quintillion possible keys and even a 1 million guesses/second it would take 5 million years to guess a code - and don't forget they changed everyday. Also, remember there were no computers to do this, let alone one that that could even remotely approach 1 million operations a second.

So you ought to able to see at the time people were pretty confident it couldn't be broken, and if they hadn't made some mistake in it's use e.g. distributing weather reports, it might have not been.

We are arguably much more complacent than they were vs. their time. It was only recently that perfect forward security became a thing in HTTPS for example (i.e. different key for each connection).

Re:How is NSA breaking so much crypto? (2015) by B1FF_PSUVM on Saturday December 17, 2016 @05:51AM (#13200148)
Bit unfair, dumping on people who had seventy or eighty years less experience, and profit from widely published literature and history on the topic.

I mean, it's not like they could even go read the Wikipedia piece on the German tank serial numbers info leak. Might have been a feature of a certain seminal strategy game - "you have defeated A[213 of 330]" ;-)

Re:How is NSA breaking so much crypto? (2015) by WalterBright on Saturday December 17, 2016 @06:29AM (#13200269)
They did have extensive experience with spying in general, and compartmentalization of it. The compartmentalization was not applied to encryption. They also knew that losing an enigma machine to the enemy could compromise it (and did), but they just apparently assumed that no U-boot lost its enigma machine to the enemy.
Re:How is NSA breaking so much crypto? (2015) by usrusr on Saturday December 17, 2016 @08:57AM (#13200718)
By the time statistical evidence could have grown strong enough to shine through the careful layers of deception, they were far to busy not noticing that they were losing the war to notice that they lost the encryption battle. In a world of believers, only traitors quantify bad news.
Re:How is NSA breaking so much crypto? (2015) by WalterBright on Saturday December 17, 2016 @09:26AM (#13200808)
Oh, they noticed all right. From "U-Boat Ace" by Jordan Vause pg. 103:

"retrieved a working Enigma machine along with the documents and code keys for three months. Not surprisingly, U-Bootwaffe fortunes declined in the following months, and from that point on Doenitz remained in doubt about the Enigma cyphers his boats were using. But the experts reassured him over and over again that they were sound, and so he retained them until the end of the war."

Re:How is NSA breaking so much crypto? (2015) by lostlogin on Saturday December 17, 2016 @12:07PM (#13201395)
I haven't found anything on the subject, but he would have been alive when Enigma become public. It would be great to know his thoughts (and those of people like Speer).
Re:How is NSA breaking so much crypto? (2015) by bonzini on Saturday December 17, 2016 @06:31AM (#13200276)
We also know that the NSA hardened crypto against attacks that they knew but were not advertised to the public (DES against differential cryptanalysis, and SHA0). I guess the NSA is too big to be homogeneously the good guy or the bad guy.