Re: Torvalds Slams Theoretical Security

Lawrence D'Oliveiro <ldo@nz.invalid> writes:

Richard Kettlewell wrote:

The obvious answer is attacks on weak cryptography. RSA-1024 and DH-1024
are probably breakable by the biggest SIGINT agencies (and anyone else
with comparable compute resources: cloud service providers for example).

>
Weak cryptography is easy to fix. The hard part to fix is weak random
numbers.

Other way round. A bad RNG can be swapped out for a better one with
little or no impact on anything else. Cryptographic choices that are
baked into a protocol or API are a lot more challenging to shift.

--
https://www.greenend.org.uk/rjk/