And some fundamental "truths" about information entropy are even being questioned:

   http://newsoffice.mit.edu/2013/encryption-is-less-secure-than-we-thought-0814

And a "new" method offered for generating keys which is reputed to not be vulnerable to brute-force attacks, based on coupled systems:

   http://journals.aps.org/prx/abstract/10.1103/PhysRevX.4.011026
   http://www.gizmag.com/human-biology-unbreakable-encryption/31504/
   https://www.schneier.com/blog/archives/2014/04/unbreakable_enc.html

It is a major PITA. Certificates on affected servers (which include Amazon EC2 Linus servers) may have had their private keys exposed, so certificates have to be reissued with different keys. This is, apparently, a major bottleneck.

—Barry



On 9 Apr 2014, at 21:23, Owen Densmore wrote:

Worth knowing about:

http://www.washingtonpost.com/news/morning-mix/wp/2014/04/09/major-bug-called-heartbleed-exposes-data-across-the-internet/

Pretty serious crypto flaw.

[image: Inline image 1]
-- Owen

[image.png]
============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College
to unsubscribe http://redfish.com/mailman/listinfo/friam_redfish.com

============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College
to unsubscribe http://redfish.com/mailman/listinfo/friam_redfish.com


============================================================
FRIAM Applied Complexity Group listserv
Meets Fridays 9a-11:30 at cafe at St. John's College
to unsubscribe http://redfish.com/mailman/listinfo/friam_redfish.com

Reply via email to