Re: Torvalds Slams Theoretical Security

"186282@ud0s4.net" <186283@ud0s4.net> writes:

  The problem is State-funded actors these days and the MASSIVE
  computing power they can bring to bear.

Well, it’s _a_ problem, for people and organizations who are realistic
targets of state actors. But (for example) for most private individuals
the biggest threat is criminals trying to access their bank account or
credit card.

  At least SOME of those "theoretical" attack vectors CAN become real
  attack vectors.
>
  But WHICH ???

The obvious answer is attacks on weak cryptography. RSA-1024 and DH-1024
are probably breakable by the biggest SIGINT agencies (and anyone else
with comparable compute resources: cloud service providers for example).

https://weakdh.org/imperfect-forward-secrecy.pdf attempted to analyse
this (among other things) nearly a decade ago, as a concrete example.

--
https://www.greenend.org.uk/rjk/