Юмор

Помните, что операционная система не полностью под вашим контролем — команды для неё приходят из Редмонда вместе с апдейтами.

Избранное и прекрасное из рассекреченного документа АНБ от 1981 года (оригинал был 1973 года, это дополненное переиздание), рассекречено в 2015.

На поле боя криптографию отключают и передают всё открытым текстом ради увеличения дальности связи на 10% или из-за недопустимости задержки голоса в 3/5 секунды:

Finally, our own engineers sent to Vietnam reported back: “Sorry about that, S2; the system reduces range – typically by 10% or more.”

In tactical air, it was claimed that the delay – up to 3/5 of a second of required wait between pushing to talk and ability to communicate – was intolerable when air-to-air warnings among pilots had to be instantaneous.

Также есть упоминания про неудобность ручной сверки ключей и пр. с выводом, что если крипто не простое в использовании неподготовленным пользователем – то оно практически бесполезно.

АНБ умеет искать дыры, но не умеет делать безопасные системы:

It seems to me that NSA does not yet have much expertise in computer security. Rather, we are expert in computer insecurity.

И заниматься латанием дыр вместо доказуемой безопасности:

Finally, the results of our own monitoring and analysis of communications,at best, prove vulnerability, not threat, are often remarkably ineffective.

АНБ не верит в крипто с открытым ключом:

We called it non-encrypted encryption (NSE) and were trying to solve the same problem of key distribution. We treated our work on it as SECRET and still do. We did not leap to its adoption for a variety of a reason. Foremost, we were uncertain of its security potential. The fact that mathematicians had not yet found a way to factor large numbers did not mean that there was no way.

АНБ переживало из-за распространения DES:

Problems of this kind let to campaign to use the DES – the only unclassified Government-approved crypto system available,

Вроде алгоритм был специально отсталый, чтобы врагам не помогать:

Accordingly, the system was not designed to meet our high grade standards and were not interested in educating the world at large in the best we can do.

Но даже такой отсталый алгоритм они сами не могли ломать:

Nonetheless, the system is very strong; has stood up to our continuing analysis, and we still see no solution to it short of a brute force exhaustion of all its 2^56 variables.

Впрочем, они даже у себя там внутри не особо бы распространялись:

Cynics, however, still ask “Are we breaking it?” The answer is no. But could we? The answer is “I don’t know; if I did I wouldn’t tell you” And there’s a good reason for this diffidence.

Независимые криптографы угрожают национальной безопасности:

The principal reason that there is an NSA consensus that unrestrained academic work has the potential for harm to our mission is because, if first-case U.S. mathematicians, computer scientists, and engineers begin to probe deeply into cryptology, and especially into cryptanalytics, they are likely to educate U.S. SIGINT target countries who may react with improved COMSEC. Less likely, but possible, is their potential for discovering and publishing analytic techniques that might put some U.S. crypto systems in jeopardy.

Они сравнивают открытое крипто с открытыми исследованиями в области создания ядерного оружия:

We have made some half-heated attempt to draw an analogy between our concerns for cryptology with those for private research and development in the nuclear weapons field which led to the Atomic Energy Act that does – at least in theory – constrain open work in that field. But there is no comparable public perception of clear and present danger in the case of cryptology and, despite the “law,” academicians have sanctioned research revelatory of atomic secrets including publications on how to build an atomic bomb.

Но что касается NSF/ONR/DARPA, то те думают иначе под влиянием властей и способствуют свободным исследованиям чтобы не враждовать с научным сообществом, а наладить с ними доверительные отношения, призывая их к ответственности:

Among them are the National Science Foundation (NSF), the Office of Naval Research (ONR) and the Defense Advanced Research Projects Agency (DARPA). NSA supplies a little itself. The wedge is blunted because Government officials administering grants from most of these institutions have been drawn largely from the academic community who believe strongly in the value of research performed outside Government, and are sympathetic to concerns about abridgement of Academic Freedom.

Backdoors in backdoors should be called cat flaps.

The passwords are sent by US Postal Mail which cannot be opened by the government without a search warrant.

Бизнес по продаже паролей, судя по всему, идёт успешно. Можно поддержать других.