Hacker News new | ask | show | jobs
by bArray 896 days ago
"NSA grade" irks me - to think these guys have your best interest at heart. In the 1970's they weakened DES [1]. In 2015 the NSA created a backdoor and pressured companies into installing it [2]. In 2016 you had the leaked tools stolen and used by the Shadow Brokers / Equation Group [3]. More recently the NSA made arguments against double encryption to combat weaknesses in potential quantum-safe encryption algorithms [4].

The point is that "NSA grade" likely means "NSA accessible". The major difference between WPA2 and WPA3 is the individual encryption. My guess would be that there is some backdoor during SAE and they could force a complete reconnect by temporarily jamming/disrupting all users on a network.

[1] https://arstechnica.com/information-technology/2013/09/the-n...

[2] https://twitter.com/matthew_d_green/status/14334701097425182...

[3] https://en.wikipedia.org/wiki/The_Shadow_Brokers

[4] https://blog.cr.yp.to/20240102-hybrid.html

2 comments

On your first point, I’m not aware of NSA weakening of DES. Only in-fact strengthening it against differential crypto analysis. Your link seems to echo that. Were you thinking of something else?

Of course, the fact the NSA was aware of differential crypto analysis some years before the rest of us is another thing…

> Of course, the fact the NSA was aware of differential crypto analysis some years before the rest of us is another thing…

It is more a case that somebody else discovered it and they were forced to get in-front of it.

NSA. Is that the organization of unemployed mathematicians that thinks it is 1989? The group that can't crack the super secret algorithm of "https". Yeah, that is the one, the group that is puzzled by large prime numbers.
I know I shouldn't, but... https isn't an algorithm.
lol. I know. I should have used "for"