News for hackers. Stuff that matters.

A comment on What the CIA WikiLeaks Dump Tells Us: Encryption Works. Parent comment

Re:What the CIA WikiLeaks Dump Tells Us: Encryption Works by effie on Saturday March 11, 2017 @05:32PM (#13847622)
If IPSec is a complicated, commitee-designed and NSA interfered technology, and moreover not recommended by information security researchers, isn't a detail such as support for post-quantum algorithms irrelevant?

http://www.mail-archive.com/[email protected]/msg123...

https://www.schneier.com/academic/paperfiles/paper-ipsec.pdf

[ Parent | on HN ]
Re:What the CIA WikiLeaks Dump Tells Us: Encryption Works by andai on Sunday March 12, 2017 @01:34PM (#13851827)
From Schneier's IPSec paper

Conclusions

We are of two minds about IPsec. On the one hand, IPsec is far better than any IP security protocol that has come before: Microsoft PPTP, L2TP, etc.

On the other hand, we do not believe that it will ever result in a secure operational system.

It is far too complex, and the complexity has lead to a large number of ambiguities, contradictions, inefficiencies, and weaknesses.

It has been very hard work to perform any kind of security analysis; we do not feel that we fully understand the system, let alone have fully analyzed it.

[ Parent | on HN ]