[Cryptography] RSA is dead.

Dirk-Willem van Gulik dirkx at webweaving.org
Sun Dec 22 16:58:02 EST 2013


On 22 Dec 2013, at 13:53, Ralf Senderek <crypto at senderek.ie> wrote:

> Isn't the most obvious conclusion that no crypto tool can be secure if it
> is not open source? Even if there is no guarantee that the code is

If you (or a small team) are good enough to write crypto code that has no side channels, no timing issues across the branches (or power surges twiddling coils in what seems to a fashionable manner) - then you darn well should be able to squeeze in a little channel of your own. Defence & building is always harder than a single offence or pointed destruction.

I doubt that this is a technical issue; it is a social and geopolitical one. Having some french, german and russian folks agree with their American and Chinese brethren on something is a good start.

Dw.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 841 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://www.metzdowd.com/pipermail/cryptography/attachments/20131222/cb3b1221/attachment.pgp>


More information about the cryptography mailing list