Feeds

Crypto protocols mostly crocked says euro infosec think-tank ENISA

Get ready to change ciphers and double key lengths if you want to live

The Power of One eBook: Top reasons to choose HP BladeSystem

It's past time to plan the abandonment of legacy crypto, warns the European Union Agency for Network and Information Security (ENISA) in a new 96-page study providing recommendations for crypto designers that also says most protocols are hard to install in a secure fashion.

The good news, however: behind the huge amount of detail that you'd have to work through if you were actually implementing crypto, ENISA says (PDF) there are only two decisions that have to be made at the high level:

  • 1 – Is the legacy system you're already using fit for purpose, in terms of its crypto primitive, scheme, protocol and key size? If the answer is no, ENISA makes a strong recommendation that the system be updated “as a matter of urgency”.
  • 2 – Is the primitive, scheme, protocol or key size you're looking at suitable for new deployments?

The second case, ENISA writes, depends on characteristics like proofs of security, key sizes of 128 bits of symmetric security or better, are well-studied and without structural weaknesses, are standardised, and have a reasonable existing installed base.

Mind you, the group is pretty demanding about what it considers “fit for future” deployment: you – or rather, the best research you can find – should expect the system to remain secure for between 10 and 50 years.

In a remark that won't surprise insiders but illustrates the complexity of the world of crypto, ENISA notes that while primitives and schemes are well-studied, the area of protocols is less so. To understand why this is important, here are the divisions between these three fields:

  • Primitives – the basic building blocks that arise from the mathematical foundations of cryptography. These include block ciphers, hash functions, stream ciphers, factorings, discrete logarithms, and pairings.
  • Schemes – How the building blocks are assembled together, along with whatever proof exists that the scheme doesn't provide opportunities for an attacker to break the underlying primitives.
  • Protocols – Things like TLS, which stipulate how two ends of a conversation choose their encryption scheme.

Not only are protocols under-studied, the report states, but “most of the deployed protocols which can be used by a naive user, are in fact either incredibly complex to install in a manner which we would deem secure, or are in fact insecure with respect to modern cryptographic standards.”

Lovely stuff.

Edited by Professor Nigel Smart, Professor of Cryptology at Bristol University, the report also recommends a list of primitives, schemes and protocols it believes are sufficient for future deployments. While too long to reproduce here, ENISA's view of primitives is worth looking at.

For block ciphers, only AES and Camilla are considered suitable for future deployments: 3DES, Kasumi, Blowfish still get a pass mark for legacy applications only, and DES, of course, is a dead duck.

Crypto designers should stick to SHA-2, SHA-3 or Whirlpool for their hashes, and where there's a choice, opt for longer outputs. SHA-1, SHA-2 and RIPEMD-160 are only suitable for legacy applications. Rabbit and SNOW 3G are future-suitable stream ciphers.

Designers should work with at least 128 bit keys for AES; 256-bit for hashing, and their public key primitives should be at least 256 bits long, ENISA says, and should plan that each of these be doubled in the future. ®

The Power of One eBook: Top reasons to choose HP BladeSystem

More from The Register

next story
HIDDEN packet sniffer spy tech in MILLIONS of iPhones, iPads – expert
Don't panic though – Apple's backdoor is not wide open to all, guru tells us
BMW's ConnectedDrive falls over, bosses blame upgrade snafu
Traffic flows up 20% as motorway middle lanes miraculously unclog
LibreSSL RNG bug fix: What's all the forking fuss about, ask devs
Blow to bit-spitter 'tis but a flesh wound, claim team
Mozilla fixes CRITICAL security holes in Firefox, urges v31 upgrade
Misc memory hazards 'could be exploited' - and guess what, one's a Javascript vuln
Putin: Crack Tor for me and I'll make you a MILLIONAIRE
Russian Interior Ministry offers big pile o' roubles for busting pro-privacy browser
Manic malware Mayhem spreads through Linux, FreeBSD web servers
And how Google could cripple infection rate in a second
Don't look, Snowden: Security biz chases Tails with zero-day flaws alert
Exodus vows not to sell secrets of whistleblower's favorite OS
Researcher sat on critical IE bugs for THREE YEARS
VUPEN waited for Pwn2Own cash while IE's sandbox leaked
prev story

Whitepapers

Top three mobile application threats
Prevent sensitive data leakage over insecure channels or stolen mobile devices.
Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Top 8 considerations to enable and simplify mobility
In this whitepaper learn how to successfully add mobile capabilities simply and cost effectively.
Application security programs and practises
Follow a few strategies and your organization can gain the full benefits of open source and the cloud without compromising the security of your applications.
The Essential Guide to IT Transformation
ServiceNow discusses three IT transformations that can help CIO's automate IT services to transform IT and the enterprise.