Re:Huawei 5G kit must be removed from UK by 2027
by rich_sasha on Tuesday July 14, 2020 @12:45PM
(#23834292)
There isn’t really an argument, only a question. As in, a basic tenet of cryptography is that we can communicate over unsafe channels, so long as we trust the cipher, the final recipient and our own hardware. Maybe I don’t trust the 5G but I do trust the cipher and my computer, is that ok then?
As for metadata, is there no cryptographic schemes that make metadata extraction impossible? I’m thinking like with Covid tracking apps, you can find out whether you were in contact with someone infected, without sharing any identifiable info.
Re:Huawei 5G kit must be removed from UK by 2027
by jimmydorry on Tuesday July 14, 2020 @09:59PM
(#23840372)
Data headers, Routing, Physical Location, and some kind of user / device identifier (e.g. Hardware ID); would already make an incredibly powerful data set. And those are things that governments around the world mandate that ISPs must log for law enforcement activities. If it's logable, one must assume that any bad actor with a backdoor can obtain a copy too.
If your argument here is “who cares if we can trust the hardware if the encryption works” I’d encourage you to think about how you know that the encryption “works” if you can’t trust the hardware. A lot of the encryption is out of necessity far removed from the end user, it’s not exactly PGP over email. And everything is never encrypted, the operations of mobile networks require a lot of extra metadata about the operations that is still sensitive even if you completely disregard the traffic over the network.