10 years ago I annoyed the entire crypto-supply industry:
Hypothesis #1 -- The One True Cipher Suite
iang.org/ssl/h1_the_one… 1/7
Hypothesis #1 -- The One True Cipher Suite
iang.org/ssl/h1_the_one… 1/7
The One True Cipher Suite was born of watching projects and groups wallow in the mire of complexity, as doubt caused teams to add multiple algorithms- a complexity that easily doubled the cost of the protocol with consequent knock-on effects & costs 2/7
The One True Cipher Suite was widely ridiculed in crypto and standards circles. Developers and standards groups like the IETF just could not let go of crypto agility. This sacred cow led the TLS group to field something like 200 standard suites 3/7
Now, NIST has announced that AES as a single standard algorithm is worth $250 billion economic benefit over 20 years
nvlpubs.nist.gov/nistpubs/gcr/2…
nist.gov/news-events/ne…
4/7
nvlpubs.nist.gov/nistpubs/gcr/2…
nist.gov/news-events/ne…
4/7
h/t to Bruce Schneier, who also said:
“I have no idea how to even begin to assess the quality of the study and its conclusions -- it's all in the 150-page report, though -- but I do like the pretty block diagram of AES on the report's cover.”
5/7
“I have no idea how to even begin to assess the quality of the study and its conclusions -- it's all in the 150-page report, though -- but I do like the pretty block diagram of AES on the report's cover.”
5/7
One good suite of ales allows agility within the protocol to be dropped. Entirely. Instead, upgrade the entire protocol to an entirely new suite, every 7 years.
Crypto-agility was a sacred cow that should have been killed years ago
6/7
Crypto-agility was a sacred cow that should have been killed years ago
6/7
In another footnote, we of the Cryptix team supported the AES project because we knew it was the way forward. Raif built the Java test suite and others wrote and deployed contender algorithms. 7/7
