I think it works but I also think its plausible and probable there is deep supply chain issues you can do absolutely nothing about that gives some edge with knowledge of how the csprng works. It would be the most closey guarded secret weapon of all time since the only thing that allows the weapon work is if confidence stays high.
USA obviously wants to be able to spy on enemy coms. There's only so many possible ways to achieve that if brute forcing takes would take more energy than the universe has.
I don't think you have to be a nut to understand both sides of the equation.
It would be pointless for an open source product to do it. If you're a private company you won't be able to sell your product to any enterprise if you use non-standard algorithms.
If you are a military/agency domestic or foreign you can make your own ciphers and keep them secret, in fact pretty much everyone does do this.
> The cryptography community outside the military-industrial complex today is
> largely primed to call out Clipper Chip style bullshit whenever it happens.
> (See also: the EU’s ChatControl.)
It’s worth noting that we rarely get mad about the clipper chip problem because, honestly, it’s basically standard now. Almost every device we own—laptops, phones, servers—runs a secure enclave or similar signed security processor that sits above the hypervisor level.
We’ve been accepting this architecture for over a decade. Yes, there are efforts to limit their power, but they’re becoming a bigger threat, not smaller. And let’s be real, these things leak. We’ve seen master keys and exploits in Xbox, PS3/4, and various Nvidia incidents. There are probably others out there that we just don’t know about yet.
4 comments
[ 0.24 ms ] story [ 7.8 ms ] threadUSA obviously wants to be able to spy on enemy coms. There's only so many possible ways to achieve that if brute forcing takes would take more energy than the universe has.
I don't think you have to be a nut to understand both sides of the equation.
Well I suppose that openssl is full of exploits anyway, both intended and non malicious
If you are a military/agency domestic or foreign you can make your own ciphers and keep them secret, in fact pretty much everyone does do this.
It’s worth noting that we rarely get mad about the clipper chip problem because, honestly, it’s basically standard now. Almost every device we own—laptops, phones, servers—runs a secure enclave or similar signed security processor that sits above the hypervisor level.
We’ve been accepting this architecture for over a decade. Yes, there are efforts to limit their power, but they’re becoming a bigger threat, not smaller. And let’s be real, these things leak. We’ve seen master keys and exploits in Xbox, PS3/4, and various Nvidia incidents. There are probably others out there that we just don’t know about yet.