Re: PGP Secure? Nope!

From: remove^me (daryll(remove^me)@myrealbox.com)
Date: 03/22/03 

From: Daryll Hofmen <daryll(remove^me)@myrealbox.com>
Date: Sat, 22 Mar 2003 06:14:34 GMT

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

This whole argument isn't so much about pgp. Since most pgp related
software out there is open source, and independent of each other, I think
we can rule out the idea that the software itself has backdoors coded into
it. What this all comes down to is then the algorithms.

To make an assumption that the NSA has the capability to crack the most
secure algorithms out there is rather foolish. I find way too many people
overestimate the power of intelligence agencies. We need to understand how
cryptography advances now days. You make reference to the cracking of
56bit DES. Everyone knew DES was cracked in about three minutes a few
years back. It was even crack by amateurs in a EFF contest. And
mathematically, 56bit DES is quite a bit easier to crack than some newer
algorithms. If all the most powerfull computers working together couldn't
brute force this stuff, then what is to say the NSA can? If not brute
force, then where do they get this mathematical knowledge? Most of these
mathematics come from universities and research institutes. The idea that
all of the smartest people out there go and work for the NSA is absurd.
Other than all the cool spy movies I have seen, there is no reason to
believe that the NSA has a bunch of mathematics or supercomputers that is
light years ahead of the rest of the world.

Regarding not caring if the NSA is listening on you, one of the most
important things in maintaining a fair democracy, is to never fully trust
your government.
- --
          Daryll Hofmen

On March 21, 2003 08:00 am, Frode wrote:

>>>> countries, then the NSA snooping your mail might alert them to the
>>>> fact they might want to keep an eye on you. If your mail is
>>>> encrypted, then all they know is you're encrypting mail, but they
>>>> don't know what the subject is.
>>> The point is, the NSA (and probably a few other organisations too)
>>> probably has the mathemical knowledge and the computing power to do
>>> this realtime.
>> LMFAO REAL TIME!!!!!! one feels you should do a little more research!
>
> The NSA was capable of breaking low (56bit) keys at least 5 years ago in
> realtime, or very close to it. I don't know exactly as the person I
> witnessed doing it had to submit a job with the remote machine (I found it
> funny at the time the previous box had been called "Curious" and this one
> was called "Too Curious") and wait for a callback with the result. It took
> a few minutes, but that was most likely due to a task queue. Although the
> likelyhood of anybody who doesn't know me in person believing my word on
> it is next to nil, I still felt I should make the post. Who knows what
> they're capable of today. I for one couldn't care less though. It's not
> the NSA I'm worried about, and either way there's finally enough encrypted
> mails floating around to make it very unlikely they have the capacity to
> decrypt and scan all of it, even if they are indeed capable of decrypting
> higher bit keys.
>
> If you feel like replying to this to tell me I'm full of BS and don't know
> anybody with the security clearance to do what I just stated, feel free to
> not respond at all. There's no way I can convince you and I have no
> intention of spending time trying.
>
>
> --
> Frode

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (GNU/Linux)

iD8DBQE+e/9KjgusE4JBGPsRAr6aAJ9YY11ZYUEpLM3hYTdMxCXzC1VfBwCfUdjO
XnjcbOBHrL1DghzkLKqAqNM=
=NBWJ
-----END PGP SIGNATURE-----

Relevant Pages

  • Re: IBM builds biggest-ever disk for secret customer
    ... Secrecy breeds incompetence, because ... access to classified mathematics journals and research. ... plenty of people within the NSA who can point out mistakes -- and the ...
    (sci.crypt)
  • Re: Wikipedia "Cryptography" reaches Featured Article status
    ... NSA has characterized DES as one of their biggest ... If NSA had always before used to force their algorithms into silicon ... chips with special "coating", that would clearly tell that NSA did not ...
    (sci.crypt)
  • Re: Wikipedia "Cryptography" reaches Featured Article status
    ... a mistake. ... The introduction of DES is considered to have been a catalyst for the ... NSA has characterized DES as one of their biggest ... Certainly the unkeyed Initial Permutation and Final Permutation make no sense for security or for software, but IIRC, it allows hardware registers to be filled in parallel (or something. ...
    (sci.crypt)
  • Re: Wikipedia "Cryptography" reaches Featured Article status
    ... So DES was a mistake because it was followed by research? ... Or because the NSA was not able to predict the future very well? ... NBS standardization process and the algorithm ended up being ...
    (sci.crypt)
  • Re: Wikipedia "Cryptography" reaches Featured Article status
    ... The controversy over DES eventually subsided, but in late 1985 NSA ... then isn't it a consequence of the reduced key ... of its major elements except the criteria for S-box design have been ...
    (sci.crypt)