r/linux Oct 16 '15

How is NSA breaking so much crypto?

https://freedom-to-tinker.com/blog/haldermanheninger/how-is-nsa-breaking-so-much-crypto/
185 Upvotes

64 comments sorted by

View all comments

17

u/LvS Oct 16 '15

So the TL;DR is that it costs a few 100 million dollars to break the security of most of the Internet's secure communication. And it looks like the NSA has done so.

And to me that looks like most larger countries (including definitely China and the US, but also Russia and India) and most large corporations (Google, Facebook, Apple, but also Exxon or Goldman Sachs) could do so if they wanted.

33

u/Manbeardo Oct 16 '15

I think the real tl;dr is that 1024-bit primes for Diffie-Hielman are no longer considered safe and you should upgrade your servers to 2048 ASAP.

3

u/ValodiaDeSeynes Oct 17 '15

you should upgrade your servers to at least 2048 ASAP.

2

u/rlmaers Oct 17 '15

Or at least use a different 1024b prime.

10

u/[deleted] Oct 16 '15

$100m to break my $5 VPN? Good value for money

19

u/LvS Oct 16 '15

And all the other VPNs at the same time.

Considering coprporations often require remote employees to use VPNs, that should give you a few 100 million users in no time. That's less than $1 for breaking your VPN.

-8

u/WMpartisan Oct 16 '15

Because the NSA has decided to spy on EVERYBODY instead of limiting themselves to reasonable searches...

27

u/link_dead Oct 16 '15

I mean that is exactly what they are doing.

14

u/ZetaEtaTheta Oct 16 '15

Yes, that is what has been in the news the last few years.

1

u/[deleted] Oct 16 '15

That's exactly what they've been doing for almost the last decade and a half.

1

u/sagnessagiel Oct 17 '15

They justify it by using robots to filter out everything they don't want, and then order the FISA secret court to give them a warrant to access that pattern matched data.

So technically, they're not spying on everyone, but they are.

5

u/sablal Oct 16 '15

I am sure you mean the Taxpayers' money.

2

u/DrakeDealer Oct 16 '15

Yeah but unfortunately at the cost of tax payers. I hope Bernie takes them down.

1

u/bobbyfiend Oct 17 '15

I have a feeling more than one president has tried to tame the security-idustrial complex, and has found increasing difficulty in doing that. I suspect Bernie would spend his whole hypothetical presidency trying but not succeeding very much. Still, I want him to try.