Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[Hendrik]

ECC is only insecure if the curves it uses are flawed.

ECC itself is a really great encryption system, because it encrypts much stronger than classic algorithms at a much higher speed/throughput, which means you get much better encryption at no loss of CPU time.
There are a lot of variants of ECC, and you just gotta pick one that is considered secure.

Here is some information on secure curves:
http://safecurves.cr.yp.to/

I usually visit the C3 congress in december (since it moved to my city at the very least), which typically has at least a couple of talks about encryption security, where these issues were brought up last year.

[bob]

ECC is only insecure if the curves it uses are flawed.

ECC itself is a really great encryption system, because it encrypts much stronger than classic algorithms at a much higher speed/throughput, which means you get much better encryption at no loss of CPU time.
There are a lot of variants of ECC, and you just gotta pick one that is considered secure.

Here is some information on secure curves:
http://safecurves.cr.yp.to/

I usually visit the C3 congress in december (since it moved to my city at the very least), which typically has at least a couple of talks about encryption security, where these issues were brought up last year.

Watched the Jacob Appelbaum talk, it was cool!

[glynor]

ECC is only insecure if the curves it uses are flawed.

Well... P256 is one of those:



But in any case, Bruce Schneier said regarding them:

I strongly believe that the NSA has a significant advantage in breaking ECC. This doesn't mean it's bad, but I think we need to 1) make sure we know where our curves come from, and 2) build in a hefty security margin.

He's also said that he basically doesn't trust any of the curves in current use .

[glynor]

ECC itself is a really great encryption system, because it encrypts much stronger than classic algorithms at a much higher speed/throughput, which means you get much better encryption at no loss of CPU time.

Incidentally, one of the other (previous to the more recent revelations) criticisms of NIST P-256 was also that it was unusually slow.  Far slower than traditional log-style system with similar security levels, in fact.  I'm too busy to look up quotes on that right now, but...

I'm overall somewhat dubious about ECC itself right now.  I wouldn't say the whole system is flawed, but I'd basically echo what Bruce said above... Hidden curves aren't good, as you can unravel the whole stack.  And, they're extremely susceptible to problems with pseudo-random number generators, so... Caution is warranted.

I mostly just found it interesting that iOS in general and the iPhone 5S in particular has such an exquisitely designed security system (just one example, every single file on the NAND is encrypted with a separate and distinct key)... But then over here is this brand-new cloud system and it is using NIST P-256?  Really?  Now?

If it was last year, I'd say... Okay.  But to launch it now?

Just odd.  It could certainly be, however, because hardware/OS guys are on one side, and Apple keeps their server-side guys in a basement on the side and doesn't let them play with the cool people (which explains their aptitude with online services generally as well).  But... It is a bit odd, to say the least.  And I would NOT use iCloud Keychain.

I usually visit the C3 congress in december (since it moved to my city at the very least), which typically has at least a couple of talks about encryption security, where these issues were brought up last year.

I'd love to go sometime.  Jealous.

[6233638]

If they were going after you, it would be much easier to attack YOU

http://xkcd.com/538/

[pcstockton]

They don't have my passwords, which is why I don't have any threat on this from them.

They have an AES 256-bit encrypted blob for which I have the only key.

You would be well served to learn about how it works before you make assumptions on things you didn't research.

Glynor,

What is your take on Dashlane?  I have been using it for a while now and love it.  It apparently only keeps your master key on the local computer, not sent to them.  If that matters.  But I would use something else when my year premium subscription runs out, if you think there are safe options.

Thanks!
Patrick

[JimH]

IBM, Intel, Cisco, others join Linux Foundation effort:

http://www.eweek.com/security/linux-foundation-aims-to-prevent-next-heartbleed-recruits-tech-gians.html/

[pcstockton]

Glynor,

What is your take on Dashlane?  I have been using it for a while now and love it.  It apparently only keeps your master key on the local computer, not sent to them.  If that matters.  But I would use something else when my year premium subscription runs out, if you think there are safe options.

Thanks!
Patrick

[glynor]

I don't know much about it, and haven't read any detailed reviews from trusted experts.  Sorry, can't say.

[pcstockton]

thanks bud!