Name: Root Causes 06: Quantum-Resistant Cryptography by Tim Callan in CipherVerse
Duration: 20 min 43 s
Description: The pending cryptographic Quantum Apocalypse requires that we replace the hashing and encryption algorithms used through the internet, enterprise networks, mobile service, and popular devices. Join our experts to learn more about the requirements for quantum-resistant algorithms to survive the Quantum Apocalypse.

CipherVerse

It's a bloodbath on Bugzilla. Since March 9, more than 25 new Bugzilla bugs been written up, which is 10x the typical pace. And it's not over. In this episode we explain what is going on and why.

Root Causes 372: Bugzilla Bloodbath

A massive name space attack has hijacked more than 21,000 domains and subdomains, including a who's who list of major global brands. This huge and innovative attack takes advantage of inherited trust in abandoned domains.  We explain what is happening.

Root Causes 373: Massive Brand Hijack Subverts More Than 21,000 Domains and Subdomains

NIST Cyber Security Framework version 2.0 is released. It includes guidance on identity management and authentication. In this first episode of a series, we describe this framework's basic structure and its effect on industry.

Root Causes 374: NIST Cyber Security Framework 2 Released

In this guest episode we discuss name space hygiene with Geir Rasmussen, founder of NodeZro. CNAMEs, SPF, DMARC, name server entries, and other DNS identifiers, left unattended, can expose companies to identity-based attacks. We lay out the steps in addressing name space cleanup.

Root Causes 375: What Is Name Space Lifecycle Management?

Gartner has released a new framework for Certificate Lifecycle Management, called the Seven Core Functions of Certificate Automation. We walk through this framework and answer how it fits in with our own Five Pillars of CLM.

Root Causes 376: Gartner's New CLM Framework

If you issue public certificates that are fully compliant except that they do not reflect what your CPS says, are they misissued? Do they require revocation? This is a question with real stakes as we see multiple current instances of a CA denying revocation for that reason. In this episode we explore this issue.

Root Causes 377: Is CPS/Issuance Misalignment a Revocation Event?

In the latest in our ongoing series of discussions of the Bugzilla Bloodbath, we delve deep into the problem of failure to revoke on time and the multiple causes that lead to this ongoing failure. And what to do about them.

Root Causes 378: Why Are Forced Revocations So Difficult?

On August 13, 2024, NIST released its first three standards for PQC algorithms, ML-KEM, ML-DSA, and SLH-DSA.  We tell you where to find them and talk about what happens next.

Root Causes 413: NIST Releases Standards for First Three PQC Algorithms

In this episode we detail the mandatory revocation periods for leaf certificates and intermediates and explain when a 24-hour versus a 120-hour revocation deadline applies.

Root Causes 414: What Are the Revocation Periods for Public Certificates?

NIST recently released PQC algorithmic standards in FIPS-203, FIPS-204, and FIPS-205 (ML-KEM, ML-DSA, and SLH-DSA). We describe what is necessary for enterprises to begin using these algorithms.

Root Causes 415: What Can I Do with These New FIPS PQC Standards?

On June 10, The Institute of World Politics welcomed Andres Kütt, Head Software Architect, and Liina Areng, Head of International Relations, both of the Estonian Information System Authority to speak on the state of cyber security globally, as well as their country’s pioneering transition to electronic governance. Mr. Kütt and Ms. Areng generously offered their time and expertise to inform the IWP community about the importance of a rapidly changing cyber landscape. 

Mr. Kütt told the audience how there is a constant war being waged between the governments, corporations, and organizations that secure private data and the rogue criminal hackers who seek to steal it from their databases. In reality, he said, there is not a guaranteed method of securing online data in this modern era. Rather, there are differing levels of coding sophistication and mathematical formulas by which cryptographers and cyber attackers engage in their web-based warfare. 

Mr. Kütt explained how, essentially, this worldwide data conflict is driven by secure codes and encryptions that protect data and the efforts by rogue states or actors to disrupt them. Time, he says, is the worst enemy of cryptographers, as their electronic battlements are constantly under siege. The most effective way to mitigate the risk of cyber attack, he noted, is to hire the most talented pool of cyber defenders. 

Mr. Kütt and Ms. Areng informed the audience that governments are at the forefront of the cyber challenges that face the 21st century. The Republic of Estonia in particular has been a global leader in so-called “E-governance,” transforming their Baltic nation of 1.3 million into a cyber powerhouse. Estonia, they report, has been highly successful in its endeavor to render the services and obligations of government into electronic models. For example, Estonia is the only one of its kind in the world to have institutionalized E-voting in national elections. This kind of groundbreaking civic engagement, the speakers emphasized, is dependent on a high degree of trust in its accuracy and incorruptibility. 

Mr. Kütt and Ms. Areng explained how the Estonian government relies on its advanced corps of citizen-cryptographers. The Cyber Defense League was established in 2010 as a response to the unprecedented cyber attacks on the country years earlier. This organization of volunteer cryptographers serves the national cyber defense by donating their talents in service to Estonia. 

Mr. Kütt and Ms. Areng went on to explain the interconnectedness of the digital ecosystems that populate the Internet. What affects one facet of the web is sure to translate into tangible consequences for the other. Further, the immense difficulty in identifying the origins of a cyber attack means that a coherent, reliable encryption is increasingly the only viable avenue of defense. 

Cryptography And Trust- Estonia And The Modern Information Society

Information Security
 1. Introduction
  ○ Security by obscurity
   § Steganography
    □ Hiding data inside another form of data, like using non-used bits in image to hide a message
     § Cool, but not practical.
     § Disadvantages
      ◊ Algorithm secrecy vs. key secrecy
  ○ Cryptography is everywhere and yet if done right, you can barely see it.
  ○ Goals: 
   § Confidentiality
    □ Secrets stay secret.
   § Integrity
    □ Data is not tampered with.
   § Non-Repudiation
    □ No party can deny sending messages.
   § Authentication
    □ Each party can ensure that the sender is what they expect.
  ○ Cryptography
   § Hashing
   § Encryption
   § Signing
   § Protocols
  ○ Random Number Generators
   § Extremely important, almost all encryption/hashing strength is affected by how random the random number generator is.
   § Don't use simple random number, use a cryptographic random number generator with a sophisticated source of entropy.
   § Pseudorandom number generator
   § Dual_EC_DRBG random generator backdoor
 2. Body
  ○ Hashing (one Way)
   § Properties
    □ Fixed length output no matter what size the input was
    □ Very easy to compute the hash of a given message, however very hard to compute from a hash the corresponding input.
    □ Mathematically infeasible to generate a message that has a given hash
    □ Any modification to a message produces a completely different hash that has no relationship to the original message's hash.
    □ It is mathematically infeasible to find two messages with the same hash. Hash Collision
   § Hashing Functions
    □ Provides data integrity, however lacks authentication
    □ Examples
     ® MD5 
      ◊ Considered Insecure
     ® Secure Hash Family SHA-X, Sha-1, Sha-2 [Sha256, Sha512], Sha-3
      ◊ Sha-1 is considered insecure.
      ◊ Sha-1, Sha-2 designed by NSA
      ◊ Sha-3 is not designed by NSA, Competition winner.
    □ Attacks
     ® Brute force
      ◊ CPU's are getting faster and cheaper every day.
      ◊ GPU's are getting faster and cheaper every day.
      ◊ Special Hash calculating hardware is becoming more available especially with the BitCoin push.
     ® Rainbow table attacks
      ◊ Pre-Calculated tables where you can reverse lookup a hash to a value
      ◊ Try www.crackstation.net
   § Hash Message Authentication Codes (HMAC)
    □ Adds authentication to integrity
    □ Can be used with all previous algorithms, HMACMD5, HMACShA1, HMAC256 … etc.
   § Salted Hash
    □ Adds random salt to mitigate rainbow table
    □ Salts are unique per record, and not a secret.
   § Password Based Key Derivation Function (PBKDF2)
    □ RSA Public Key Cryptographic Standard PKCS #5 Version 2.0
    □ Internet Engineering Task Force RFC 2898 Specification
     ® Adds a lot of iterations to slow it just enough to mitigate brute force (default 50,000 iterations)
     ® Adds random salt to mitigate rainbow table
    □ Disadvantage: It can be easily implemented with hardware which makes it vulnerable to bruteforce even with high number of iterations
   § Bcrypt
    □ Password Hashing function
    □ State of the art password hashing
   § Usages
    □ Integrity Check
Password Storage

Our facebook Page
http://facebook.com/askdeveloper

On Sound Cloud
http://soundcloud.com/askdeveloper

Please Like & Subscribe

AskDeveloper Podcast

EP46 - AskDeveloper Podcast - Cryptography - Part 1 - Introduction and Hashing

#3 John Pacific of NuCypher | Applied Cryptography, Adversarial Thinking & Arbitrary Computation on Encrypted Data

#3 John Pacific of NuCypher | Applied Cryptography, Adversarial Thinking & Arbitrary Computation

Interview location: Palo Alto
Interview date: Thursday 31st Jan, 2018
Company: Cryptomathic
Role: Cryptographer and Security Expert

A number of pioneers developed the cryptographic and technical foundations for which Bitcoin is built upon. Nick Szabo highlighted a number of these people in his Tweet:

“Inventors of the most important technologies in Bitcoin: digital signatures and Merkle trees (Merkle), elliptic curve crypto (Koblitz), malicious-fault-tolerant consensus (Lamport), elliptic curve crypto (independent inventor: Miller).”

Many others along the way have contributed to the success of Bitcoin, either through early work or attempts at created a digital currency, names such as Adam Back, David Chaum and Szabo himself.

Whitfield Diffie sits alongside all of these people. His work on cryptography should not be forgotten in the history of Bitcoin and I had the pleasure of sitting down with him to discuss this, how he was introduced to Bitcoin and other such topics as privacy and security.

The What Bitcoin Did Podcast

Whitfield Diffie on the History of Cryptography

The pending cryptographic Quantum Apocalypse requires that we replace the hashing and encryption algorithms used through the internet, enterprise networks, mobile service, and popular devices. Join our experts to learn more about the requirements for quantum-resistant algorithms to survive the Quantum Apocalypse.

Root Causes 06: Quantum-Resistant Cryptography

Founder of EPIC Knowledge Society and SPACE Creative Culture Labs. I am a Futurist and Data Scientist with Professional Mastery and Pragmatic Insights on Digital Transformation and Innovation Management with extensive credentials on Digital Enterprise Architectures, Crypto Economics, Customer Experience Design, Social Entrepreneurship Incubation, Business Model Innovation, Innovation Ecosystems, Innovation Analytics, Innovation Consulting, Social Business Networks, Academic Research Networks, Industrial Research Alliances, New Service Incubation, New Product Incubation, New Platform Innovation, High performing Teams, Cross Competency Innovation etc.

Digital certificate industry veterans Tim Callan and Jason Soroko explore the issues surrounding digital identity, PKI, and cryptographic connections in today's dynamic and evolving computing world. Best practices in digital certificates are continually under pressure from technology trends, new laws and regulations, cryptographic advances, and the evolution of our computing architectures to be more virtual, agile, ubiquitous, and cloud-based. Jason and Tim (and the occasional guest subject matter expert) will help you stay current on developments in this essential technology platform and to understand the whys and wherefores of popular Public Key Infrastructures.

Root Causes 06: Quantum-Resistant Cryptography

Tim Callan

Related tracks