Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.security.pgp.discuss > #193

Re: Does the NSA cracking include PGP?

Cross-posted to 2 groups.

Show all headers | View raw

On 2013-09-10, Ramon F Herrera <ramon@conexus.net> wrote:
>
> I have seen several articles about the NSA+British intel "news". They 
> mention all the relevant protocols but PGP is conspicuously absent.
>
> http://www.zdnet.com/has-the-nsa-broken-ssl-tls-aes-7000020312/?s_cid=e539&ttag=e539
>
> Is it perhaps because PGP is based on one of the others?

PGP is based on RSA and AES. 
But the suggestion (NSA is NOT going to confirm what they can do) is
that the problem is not the encryption, but the "side channels"-- eg
persuading the manufacturers to put in back doors, finding bugs in the
implimentation, etc. 
Thus you want to look carefully at your PGP source code, and make sure
you compile it from source rather than relying on someone else doing it
for you. 


>
> TIA,
>
> -Ramon
>

Back to comp.security.pgp.discuss | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Does the NSA cracking include PGP? Ramon F Herrera <ramon@conexus.net> - 2013-09-10 12:22 -0500
  Re: Does the NSA cracking include PGP? unruh <unruh@invalid.ca> - 2013-09-10 18:21 +0000
  Re: Does the NSA cracking include PGP? "David W. Hodgins" <dwhodgins@nomail.afraid.org> - 2013-09-11 03:18 -0400
    Re: Does the NSA cracking include PGP? Juergen Nieveler <juergen.nieveler.nospam@arcor.de> - 2013-09-15 14:37 +0000
  Re: Does the NSA cracking include PGP? Nomen Nescio <nobody@dizum.com> - 2013-09-11 15:52 +0200
    Re: Does the NSA cracking include PGP? Collin <collin@sibilance.org> - 2013-09-11 10:30 -0400
    Re: Does the NSA cracking include PGP? unruh <unruh@invalid.ca> - 2013-09-11 15:38 +0000

csiph-web