Timeline for Disclosure of Catastrophic Cryptanalytic Breakthroughs
Current License: CC BY-SA 4.0
10 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Dec 10, 2023 at 12:08 | history | bumped | CommunityBot | This question has answers that may be good or bad; the system has marked it active so that they can be reviewed. | |
| Nov 11, 2023 at 12:50 | comment | added | Paul Uszak | @fgrieu Did you consider selling that to DGSE or a 3rd party company? | |
| Nov 10, 2023 at 22:11 | comment | added | Geoffroy Couteau | How about proving that you have a solution without disclosing it (by solving challenges, or using ZK proofs if you want to be fancy), and leaving people, say, a year to adapt? | |
| Nov 10, 2023 at 17:03 | history | became hot network question | |||
| Nov 10, 2023 at 11:44 | answer | added | Paul Uszak | timeline score: 1 | |
| Nov 10, 2023 at 10:04 | comment | added | fgrieu♦ | Facing a lesser kind of situation in 1999, I posted a public announcement, circulated test vectors to (initially skeptical) researchers that contacted me, learned LaTex to publish a paper at Eurocrypt 1999, made a lecture. The vulnerable signature standard was withdrawn. | |
| Nov 10, 2023 at 9:23 | comment | added | kelalaka | Well, nobody can force Schnorr or someone else (publish or perish). They work theoretically, If you work in the wild, as the GCD them all attacks you inform the corresponding. This depends on the case, I think. | |
| Nov 10, 2023 at 9:15 | comment | added | kodlu | Yes, sure, but I am asking about something as major as Schnorr's claimed breakthrough. He just published it. Did he really have another option? It would affect all crypto, no? So maybe the question is, is it possible to effectively expunge all traces of RSA from the internet infrastructure in 6 months? Schnorr wants to publish his mathematical breakthrough, and there is always the possiblity that he may get scooped by someone else while waiting. It is common for math breakthroughs to happen simultaneously | |
| Nov 10, 2023 at 9:10 | comment | added | kelalaka | Don't the researchers give 6 months before disclosure and In the meantime, they also provide possible mitigations? The Black Hat contains tons of such attacks? for example HartBleed? | |
| Nov 10, 2023 at 9:03 | history | asked | kodlu | CC BY-SA 4.0 |