[Cryptography] soft chewy center
bmanning at vacation.karoshi.com
bmanning at vacation.karoshi.com
Tue Sep 10 17:58:28 EDT 2013
much of the discussion these past few weeks seems to be centered on channel and container
protection, secure paths, encrypted file systems, etc. much effort has gone into ensureing
opaque environments for data to flow. and while interesting and perhaps useful, not a whole lot
of effort seems to targeting the integrity of the data itself. wrapping the soft chewy middle
with a hard candy shell can and does hide the fact that your core/data may be rotten.
some years back, i was part of a debate on the relative value of crypto - and it was pointed
out that for some sectors, crypto ensured _failure_ simply because processing the bits introduced
latency. for these sectors, speed was paramount.
think HFT or any sort of "Flash Mob" event where you want in/out as quickly as possible.
crypto in and of itself is not a generator of value. Sprinkeling Security/Crypto pixie dust
on -everything- can not be a good idea.
Just my 0.02 lira. Jari and Stephen, please don't take the IETF there - its a wasteland.
/bill
More information about the cryptography
mailing list