SoylentNews is people
SoylentNews
Submitted via IRC for soycow1984
Recent academic work focused on weak cryptographic protections in the implementation of the IEEE P1735 standard has been escalated to an alert published Friday by the Department of Homeland Security.
DHS' US-CERT warned the IEEE P1735 standard for encrypting electronic-design intellectual property and the management of access rights for such IP is flawed.
"In the most egregious cases, enable attack vectors that allow recovery of the entire underlying plaintext IP," US-CERT said in its alert, citing researchers that found the flaw. "Implementations of IEEE P1735 may be weak to cryptographic attacks that allow an attacker to obtain plaintext intellectual property without the key, among other impacts."
The Institute of Electrical and Electronics Engineers (IEEE) P1735 standard flaw was first reported by a team of University of Florida researchers. In September, the researchers released a paper titled Standardizing Bad Cryptographic Practice (PDF).
In all, seven CVE IDs are assigned to the flaw and document the weakness in the P1735 standard.
Source: https://threatpost.com/us-cert-warns-of-crypto-bugs-in-ieee-standard/128784/
(Score: 2) by bob_super on Monday November 13 2017, @08:32PM
> leads me to question the value of the property contained.
Lots of tech companies use this to distribute their designs to customers, without giving away the source code (RTL in my case).
If people start to design in those features, without paying the company which invested hundreds or thousands of man-hours to generate and verify the code, then the whole chip industry will take a major hit.
I don't like having to pay IP fees or royalties, but re-inventing the wheel isn't how I generate sales. If the people providing the wheels fold because they can't trust, or if they make my life twice as hard because they have to protect their income, then I lose time and money.