News for hackers. Stuff that matters.
Re:The first chosen-prefix collision for SHA-1 by WorldMaker on Tuesday January 07, 2020 @01:18PM (#21982798)
There's an MC Frontalot song called "Secrets from the Future" and the refrain is "You can't hide secrets from the future." It's something of a useful mantra to remind oneself that if "the future" is a part of your threat model, yes your encryption likely isn't enough because on a long enough timescale it is likely "the future" will crack it.

As with any other security issue, the question is "what is your threat model?" You can still justify encrypting your backup today if your threat model includes today's actors, however much you worry about "the future".

> 10 years from now, it might be as good as plain text.

Or 10 years from now it might be the next Linear A tablets to confuse cryptoarcheologists, unreadable and untranslatable and entirely foreign. If "the future" is in your threat model, don't forget the other fun forms of entropy beyond encryption being cracked such as encodings changing, file formats falling out of service/compatibility, "common knowledge" about slang or memes lost to the ages leaving things indecipherable, and so on and so forth. Most of those things are probably unlikely on only a 10 year time horizon, but you never can tell with "the future".

Re:The first chosen-prefix collision for SHA-1 by SheepSlapper on Tuesday January 07, 2020 @01:41PM (#21983104)
"You can’t hide secrets from the future with math. You can try, but I bet that in the future they laugh at the half-assed schemes and algorithms amassed to enforce cryptographs in the past."

Didn't expect to see Front on HN today, what a pleasant surprise.

Re:The first chosen-prefix collision for SHA-1 by b4n4n4p4nd4 on Tuesday January 07, 2020 @03:41PM (#21984559)
coughcaesarciphercough
Re:The first chosen-prefix collision for SHA-1 by CobrastanJorji on Tuesday January 07, 2020 @02:00PM (#21983341)
The point about archeologists is a good one because it speaks to motive. In general, we should be very supportive of the efforts of distant historians who want to understand what humanity used to be like. We should not WANT to hide secrets from a sufficiently far future. I can't think of any secret that deserves to be hidden from them for any reason besides perhaps modesty.
Re:The first chosen-prefix collision for SHA-1 by WorldMaker on Tuesday January 07, 2020 @04:26PM (#21985077)
Relatedly, that is a part of why I love the term "cryptoarcheology" in general, as a reminder that digital spaces will need archeologists too.

There's it's somewhat shortened form "cryptarch", generally more used as a title ("cryptoarcheologist"), which was used in places in the Quantum Thief trilogy of books and is most probably already burned into your brain if you have played any of the Destiny series of videogames (and I presume was heavily influenced by Quantum Thief).

Re:The first chosen-prefix collision for SHA-1 by moyix on Tuesday January 07, 2020 @05:39PM (#21985904)
Hmm, I thought cryptarch was just crypt + arch with the arch part meaning “leader” (i.e. this sense https://www.etymonline.com/word/arch-), not archaeologist. Is there something about this in the Quantum Thief trilogy I’ve forgotten?
Re:The first chosen-prefix collision for SHA-1 by WorldMaker on Tuesday January 07, 2020 @05:54PM (#21986084)
It's been a bit since I read it, but I recall the meaning overlap/double meaning between leader -arch (such as plutarch) and arch- from archaeo- was directly intentional word play in the book trilogy, and yes that leader -arch meaning does add spice to the neologism.

(I don't think Destiny does much with the playful dual meaning, though. Certainly the cryptarchs in Destiny have never yet been meaningful leaders.)

Re:The first chosen-prefix collision for SHA-1 by jessant on Tuesday January 07, 2020 @03:07PM (#21984204)
What is considered sufficiently far future may change with life extension technology.
Re:The first chosen-prefix collision for SHA-1 by thekyle on Tuesday January 07, 2020 @03:33PM (#21984480)
Well I would assume that as long as you live you'll keep updating your crypto as new tech comes out. That way the clock only starts ticking when you die.
Re:The first chosen-prefix collision for SHA-1 by klyrs on Wednesday January 08, 2020 @10:04AM (#21992022)
Your encrypted communications, intercepted today, will be encrypted with today's standards. The clock is ticking now.
Re:The first chosen-prefix collision for SHA-1 by xapata on Tuesday January 07, 2020 @03:46PM (#21984617)
> Or 10 years from now it might be the next Linear A tablets

At some point in the future, after the universe has expanded to the extent that other galaxies are moving away from ours faster than the speed of light, someone might read our astronomy papers and wonder whether they can believe something that cannot be verified.

Re:The first chosen-prefix collision for SHA-1 by tambourine_man on Tuesday January 07, 2020 @07:44PM (#21987029)
I always think of this as well. But it may not be so:

https://phys.org/news/2020-01-evidence-key-assumption-discov...

Re:The first chosen-prefix collision for SHA-1 by toppy on Tuesday January 07, 2020 @01:42PM (#21983111)
This biblical prophecy from Luke 12,3 is solo true: " What you have said in the dark will be heard in the daylight, and what you have whispered in the ear in the inner rooms will be proclaimed from the roofs."
Re:The first chosen-prefix collision for SHA-1 by shrimpx on Tuesday January 07, 2020 @03:07PM (#21984205)
I wonder what the intended meaning is. I presume it has to do with a presumed eventual urge to confess.
Re:The first chosen-prefix collision for SHA-1 by toyg on Tuesday January 07, 2020 @04:24PM (#21985056)
It’s basically “don’t try to get fresh with God”. Which conveniently translates into a call to humility and honesty towards its earthly representatives.
Re:The first chosen-prefix collision for SHA-1 by PhasmaFelis on Tuesday January 07, 2020 @03:55PM (#21984721)
In context, it appears to be saying "you can't keep secrets from God."
Re:The first chosen-prefix collision for SHA-1 by shrimpx on Wednesday January 08, 2020 @12:53AM (#21988719)
Ok but it implies/states that the secrets will be broadly divulged.
Re:The first chosen-prefix collision for SHA-1 by MaxBarraclough on Tuesday January 07, 2020 @05:57PM (#21986132)
> You can't hide secrets from the future

With the usual disclaimer about one-time pads.

> other fun forms of entropy beyond encryption being cracked such as encodings changing, file formats falling out of service/compatibility, "common knowledge" about slang or memes lost to the ages leaving things indecipherable

I wonder what the digital archaeologists of the future will make of today's programming languages.

(I was going to point out how far we've come since the languages of yesteryear, but we still have such horror-shows as Perl and Bash.)