4 Apr
2014
4 Apr
'14
2:51 p.m.
On Fri, 4 Apr 2014, Brian West wrote:
https://www.aclu.org/files/natsec/nsa/vpn-and-voip-exploitation-with-hammerc...
Thoughts?
The techniques are not new or unknown. The pervasiveness of the implementation surprises many Addressing side channel leakage (implementation weaknesses) which is used to crack open the crypto remains an ongoing task. MOving to using SRTP everywhere, adding hooks to use real hardware based RNGs, and considering if we need to move to some sort of 'perfect forward security' comes to mind. Reviewing the strength of the DH key exchange when used (another NSA compromise vector) would be useful -- Russ herrold