News for hackers. Stuff that matters.
Re:RFC 7258 – Pervasive Monitoring Is an Attack by higherpurpose on Monday June 30, 2014 @02:32AM (#7963967)
I don't know how seriously to take this when IETF keeps letting this happen:

http://arstechnica.com/security/2014/01/nsa-employee-will-co...

Re:RFC 7258 – Pervasive Monitoring Is an Attack by AlyssaRowan on Monday June 30, 2014 @08:57AM (#7964777)
You'll recognise me from the CFRG threads about that topic.

The subject is moot now: Kevin M. Igoe is retiring, so he's stepping down at the end of the year (and probably not doing anything major until then, other than participating as anyone else could, with of course full knowledge of where he works). The other current co-chair is also stepping down, in favour of two new unrelated co-chairs who have been extremely open and forthright with their status - and, to the best of my knowledge, don't work for a Nation State Adversary. Things seem to have turned out okay.

In the meantime, CFRG has been documenting - in the public eye - a ChaCha20-Poly1305 AEAD (the djb alternative to the NIST-preferred AES-GCM; a fast, 256-bit secure constant-time authenticated stream cipher AEAD) and has, after a lively discussion, selected djb's Curve25519 (the most mature of the so-called "SafeCurves") as the preferred curve for new IETF protocols; amongst some other lively and open discussion about the promises and perils of PAKEs, signature schemes and other such things. They'll be coming to protocols near you soon: various WG drafts are in progress now.

Re:RFC 7258 – Pervasive Monitoring Is an Attack by _mhp_ on Monday June 30, 2014 @06:56AM (#7964451)
Kevin Igoe is retiring next year, and is currently handing over to the two new CFRG chairs. They introduce themselves here:

http://www.ietf.org/mail-archive/web/cfrg/current/msg04552.h...

http://www.ietf.org/mail-archive/web/cfrg/current/msg04553.h...