News for hackers. Stuff that matters.

A comment on Swiss government files criminal complaint over Crypto AG scandal involving CIA. Parent comment

Re:Swiss government files criminal complaint over Crypto AG ... by SAI_Peregrinus on Tuesday March 03, 2020 @11:24AM (#22475896)
The problem is that 5g wasn't designed to be secure against malicious carriers & governments. It could have been, and modern cryptographic protocols used over it can be.

The assumption that you can trust communications infrastructure is outdated. It must not matter if an adversary has back doored a router or cell tower or similar to send copies of all traffic to them, since the data should be entirely encrypted (except for some minimal routing information). The 3GPP designed the 5G standards to allow back doors, so we get back doors.

[ Parent | on HN ]
Re:Swiss government files criminal complaint over Crypto AG ... by 101404 on Tuesday March 03, 2020 @12:42PM (#22476770)
What if the same company also provides the cellphones and computers used to do the encryption of the data being sent?
[ Parent | on HN ]
Re:Swiss government files criminal complaint over Crypto AG ... by SAI_Peregrinus on Tuesday March 03, 2020 @03:44PM (#22478541)
Then you're programming Satan's computer[1] and need to start doing things like using a better trusted OS & compiler. Or go to a different vendor. Since end-user devices need to swap around a lot this tends to be a lot easier than replacing the underlying infrastructure devices.

[1] https://www.cl.cam.ac.uk/~rja14/Papers/satan.pdf

[ Parent | on HN ]