Rendered at 07:11:43 GMT+0000 (Coordinated Universal Time) with Cloudflare Workers.
n0th3rwcf4n2026 21 hours ago [-]
> The cryptography community outside the military-industrial complex today is
> largely primed to call out Clipper Chip style bullshit whenever it happens.
> (See also: the EU’s ChatControl.)
It’s worth noting that we rarely get mad about the clipper chip problem because, honestly, it’s basically standard now. Almost every device we own—laptops, phones, servers—runs a secure enclave or similar signed security processor that sits above the hypervisor level.
We’ve been accepting this architecture for over a decade. Yes, there are efforts to limit their power, but they’re becoming a bigger threat, not smaller. And let’s be real, these things leak. We’ve seen master keys and exploits in Xbox, PS3/4, and various Nvidia incidents. There are probably others out there that we just don’t know about yet.
datas 2 days ago [-]
I think it works but I also think its plausible and probable there is deep supply chain issues you can do absolutely nothing about that gives some edge with knowledge of how the csprng works. It would be the most closey guarded secret weapon of all time since the only thing that allows the weapon work is if confidence stays high.
USA obviously wants to be able to spy on enemy coms. There's only so many possible ways to achieve that if brute forcing takes would take more energy than the universe has.
I don't think you have to be a nut to understand both sides of the equation.
nextaccountic 1 days ago [-]
Are you saying that rolling your own cryptography may guard against exploits in common third party libraries?
Well I suppose that openssl is full of exploits anyway, both intended and non malicious
It’s worth noting that we rarely get mad about the clipper chip problem because, honestly, it’s basically standard now. Almost every device we own—laptops, phones, servers—runs a secure enclave or similar signed security processor that sits above the hypervisor level.
We’ve been accepting this architecture for over a decade. Yes, there are efforts to limit their power, but they’re becoming a bigger threat, not smaller. And let’s be real, these things leak. We’ve seen master keys and exploits in Xbox, PS3/4, and various Nvidia incidents. There are probably others out there that we just don’t know about yet.
USA obviously wants to be able to spy on enemy coms. There's only so many possible ways to achieve that if brute forcing takes would take more energy than the universe has.
I don't think you have to be a nut to understand both sides of the equation.
Well I suppose that openssl is full of exploits anyway, both intended and non malicious