Re: Byte Addressability And Beyond

On Wed, 5 Jun 2024 16:16:32 -0000 (UTC)
"Stephen Fuld" <SFuld@alumni.cmu.edu.invalid> wrote:

Michael S wrote:
 
 
snip lots of stuff about encryption alternatives
 
 
 

The best, the most secure encryption is an end-to-end encryption.
Which means application-to-application.
It's not that other, "piece-wise" encryption types can't be used,
but if you are serious about privacy you should consider them
insufficient. 

 
 
That's fair.  But there are counter arguments like not doing the
encryption on a processor that is also executing arbitrary user code
makes it more immune from side attacks.
 
 
 

Side-channel attacks on AES were 99%-fantasy of bored (or
attention-seeking) security researchers even before Rijndael core was
put in CPU hardware. Much more so now.
Weak point tends to be key management rather than encryption itself.
And, BTW, running arbitrary hostile code on your computer is bad, bad,
bad idea for 1e9 other reasons.