Статьи

В новостях пиарят vuvuzela и HORNET.

The law-enforcement narrative is wrong to position privacy as an individual good when it is, just as much, a social good. It is equally wrong to regard privacy and security as conflicting values, as privacy enhances security as often as it rubs against it. (page 27)

На слайдах эта мысль хорошо передана: массовая слежка и отсутствие privacy плохи тем, что не позволяют кому-либо поставить вопрос о резонности общепринятой морали, убивают индивидуализм и самовыражение, а также принуждают общество к тотальной безликости и конформизму.

U.S. universities were thoroughly infiltrated with informants: selected students, faculty, staff, and administrators would report to an extensive network of FBI handlers on anything political going on on campus.

Неожиданно. Всегда думал, что это местное изобретение.

In ongoing work, colleagues and I are working out a provable-security treatment for the approach above. It uses conventional, game-based definition, not the fuzzy concepts or vocabulary from much of the anonymity literature.¹³⁴ We hope that the anonymous messaging in this untrusted-server model will eventually prove practical for the high-latency setting. We will see. (page 31)

Rogaway собирается теоретически обосновать модель pond'а и вообще всячески этот метод пиарит.

Many times I have spoken to people who seem to have no real idea why they are studying what they are. The real answer is often that they can do it, it gets published, and that people did this stuff before. These are lousy reasons for doing something. (page 34)

Метко подмечено. Заключение:

Learn some privacy tools. I would like to gently suggest that we cryptographers would do well to learn, and use, contemporary privacy tools. Very few of us use tools like OTR, PGP, Signal, Tails, and Tor. It' kind of an embarrassment — and I suspect our collective work suffers for it. Christopher Soghoian insightfully remarks: "It's as if the entire academic medical community smoked 20 cigarettes a day, used intravenous drugs with shared needles, and had unprotected sex with random partners on a regular basis."¹⁸³ (page 40)

It has been said that just because you don't take an interest in politics, doesn't mean politics won't take an interest in you.²⁰⁷ Since cryptography is a tool for shifting power, the people who know this subject well, like it or not, inherit some of that power. As a cryptographer, you can ignore this landscape of power, and all political and moral dimensions of our field. But that won't make them go away. It will just tend to make your work less relevant or socially useful.

My hope for this essay is that you will internalize this fact, and recognize it as the starting point for developing an ethically driven vision for what you want to accomplish with your scientific work.

My thanks to the IACR Board for the privilege of giving this year's IACR Distinguished Lecture. It is an honor that happens at most once in a cryptographer's career, and I have tried my best to use this opportunity wisely.

This essay owes its existence to the courage of Edward Snowden. (page 48)

С точки зрения философии области статья эпохиальная и очень убедительная в аргументации, хотя я бы не стал так сгущать краски. Просто каждый должен заниматься своим делом, и всё нужно — и практический PET и теоретическое крипто, проблема лишь в распределении усилий, на всё и вся банально рук не хватает. Rogaway отметил, что тренд прихода теоретиков в PET есть и ощутим, но пока это не мейнстрим. Цель Rogaway'я сделать это именно мейнстримом среди теоретиков — областью, откуда следует черпать постановку новых задач. Удивило его заявление, что до сноуденовских откровений он всё это (важность PET) не осознавал.