News for hackers. Stuff that matters.
Re:Six Dumbest Ideas in Computer Security by bawolff on Sunday July 14, 2024 @08:45PM (#40964425)
> which means it will likely be doable to current certificates in a few years

It is extremely unlikely a modern certificate will be broken in the time horizon of a few years through a cryptography break.

All systems eventually fail, but i expect it will be several decades at the earliest before a modern certificate breaks from a crypto attack.

Keep in mind that md5 started to be warned against in 1996. It wasn't until 2012 that a malicious attack used md5's weakness. That is 16 years from warning to attack. At this stage we dont even know about any weaknesses about currently used crypto (except quantum stuff)

Rotating certificates is more about guarding against incorrectly issued and compromised certificates.

Re:Six Dumbest Ideas in Computer Security by j16sdiz on Sunday July 14, 2024 @10:12PM (#40964765)
Many modern crypto can be broken by nonce reuse.

Rotating certificates guard against bad PRNG and birthday paradox

Re:Six Dumbest Ideas in Computer Security by bawolff on Monday July 15, 2024 @03:22AM (#40965885)
I disagree. I don't think rotating certificates would help against birthday attacks or bad prng.

Tbh, i have no idea which part you are attacking with the birthday attack in this specific context. It doesn't seem particularly relavent.

(At the risk of saying something stupid) - i was under the impression RSA did not use nonces, so i don't see how that is relavent for an rsa cert.

For an ecdsa cert, nonce reuse is pretty catastrophic. I fail to see how short lived certs help since the old certs don't magically disappear, they still exist and can be used in attacks even after being rotated.

Re:Six Dumbest Ideas in Computer Security by freeone3000 on Monday July 15, 2024 @11:43AM (#40968893)
Certs should be checked against a CRL and CT for revocation, and expired certs should never be accepted, for this reason among others.
Re:Six Dumbest Ideas in Computer Security by bawolff on Monday July 15, 2024 @08:36PM (#40972700)
CT isn't used for revocation. CRLs aren't really a thing in practise. Refusing to accept expired certs is important for other reasons but won't save you from a reused ECDSA nonce.
Re:Six Dumbest Ideas in Computer Security by marshray on Monday July 15, 2024 @08:18PM (#40972608)
If properly generated even the smallest RSA key sizes used in practice are still safe from birthday collisions.

But there have been several high-profile cases of bad RNGs generating multiple certs with RSA keys that had common factors. I think if you were put at risk by such a broken RNG, frequently re-generating your certs would tend to make things worse, not better.

Re:Six Dumbest Ideas in Computer Security by Jerrrrrrry on Monday July 15, 2024 @09:48PM (#40973044)
Don't be nice, or do it thrice - hash input twice.