Re: [Cfrg] [TLS] 3DES diediedie

[Joachim Strömbergson <[e-mail]>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Aloha!

Ilari Liusvaara wrote:
> On Wed, Sep 07, 2016 at 09:50:30AM +0200, Joachim Strömbergson
> wrote:
>> Researching lightweight ciphers is cool and good. But I don't
>> expect to see many symmetric primitives gain any major deployment.
>> Where I think we have a clear need for IoT is lightweight
>> asymmetric primitives. Key exchange, signatures etc. Too many
>> devices use PSK simply because key exchange is too costly, takes
>> too long time.
> 
> Unfortunately, the lightest weight asymmetric stuff currently known 
> that doesn't look to be broken to hell or at least look seriously 
> shaky is things like "Kummer" or "FourQ", which are like ~half of the
> cost of Curve25519...
> 
> And I don't expect this to change, in fact, to get even worse when 
> considering PQ stuff.
> 
> Yes, RLWE is lighter CPU-wise than either of those two above, but the
> extra communication costs from much larger keys will more than offset
> that.

I'm afraid that you are right. But as I said, this is one area where
good research result could have good traction in industry and be very
heopful.


>> Where I specifically see a big need is for a good standardized
>> firmware update mechanism. Today everybody either rolls their own
>> firmware mechanism or get a (broken) one from their MCU vendor. I
>> think there were a new working group for this within the IETF.
>> Can't remember and can't find. But I think that it a very good
>> idea.
> 
> I took a look at the IETF WGs, and didn't see anything that would
> look relevant...

It was Stephens workshop I was thinking of. I blame old age.

FW update is soo broken. Vendor solutions where the security is 3DES in
ECB mode only (no auth at all), solutions where you either can easily
get stuck in update mode, update and get stuck halfway through etc.

- -- 
Med vänlig hälsning, Yours

Joachim Strömbergson - Alltid i harmonisk svängning.
========================================================================
 Joachim Strömbergson          Secworks AB          [e-mail]
========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=OEF7
-----END PGP SIGNATURE-----