Re: [Cfrg] [TLS] 3DES diediedie

> Whitness the long litany of attacks against TLS
> that exploit stuff that should have been nuked
> a long time ago (but was kept for "compatiblity";
> and similarly for other protocols).

Many of these attacks are made possible by poor design of the TLS protocol 
in the first place, which for some reason did not protect the integrity of 
algorithm negotiation, allowing for downgrade attacks, and requiring 
otherwise potentially useful algorithms to be eliminated because the 
algorithm negotiation is insecure.

For comparison, the design of SSH has not had this problem since around the 
year 2000.

denis

----- Original Message -----
From: Ilari Liusvaara
Sent: Thursday, September 8, 2016 10:38
To: Derek Atkins
Cc: Hilarie Orman ; cfrg@irtf.org ; JoachimStrömbergson
Subject: Re: [Cfrg] [TLS] 3DES diediedie

On Thu, Sep 08, 2016 at 11:18:47AM -0400, Derek Atkins wrote:
>
> My light bulb example that I keep returning to are really only designed
> to speak to the local controller(s).  They don't phone home.  Sure, they
> may have IPv6, and may be running (D)TLS, but their use case is rather
> limited.  They probably don't have a full OS, just an embedded
> firmware.
>
> So why does this device need to same level of security protection that I
> need when I'm communicating with my bank?  Wouldn't you rather it have a
> lower bar (e.g. 3DES) versus have zero security?  Honestly, that's the
> fight I'm fighting here with manufacturers.  They say encryption is too
> expensive, so they would rather do nothing.  I'm trying to give them
> something, anything, to get the bar raised.  Even single DES is better
> than nothing (although if they can do 1DES they can do 3DES).

Because having the "lower bar", especially with "standard" protocols
lowers security FOR EVERYONE ELSE. Whitness the long litany of attacks
against TLS that exploit stuff that should have been nuked a long time
ago (but was kept for "compatiblity"; and similarly for other protocols).

(And the bad crypto is just a tip of the iceberg when it comes to the
insecurity of IoT stuff, and the reasons why I really don't want to
deal with any IoT devices if I can help it at all).

-Ilari

_______________________________________________
Cfrg mailing list
Cfrg@irtf.org
https://www.irtf.org/mailman/listinfo/cfrg 