SoylentNews

AnonTechie [soylentnews.org] writes:

Crypto-guru slams 'NSA-proof' tech. The maths is good, it's the implementation that sucks.

In a presentation titled "Crypto Won't Save You" at the AusCERT conference on Australia's Gold Coast, respected cryptographer Peter Gutmann of the University of Auckland took security bods through a decade of breaches featuring a laundry list of the world's biggest brands. Gutmann's point was to demonstrate how the weakest point of cryptography was typically in its implementation rather than the maths itself. He demonstrated that consumer devices from the Amazon Kindle to the Sony Playstation and Microsoft Xbox consoles were hacked not because of weak cryptography, but due to poor deployment of security mechanisms, which were bypassed by attackers.

http://www.theregister.co.uk/2014/05/16/kiwi_prof_ calls_bunk_on_nsaproof_tech_says_crypto_is_enough/ [theregister.co.uk]

View Gutmann's 95-page slide deck here [PDF].
http://regmedia.co.uk/2014/05/16/0955_peter_gutman n.pdf [regmedia.co.uk]

---

Original Submission