Real World Cryptography Workshop 2015 1日目まとめ

Gareth T. Davies @gareth_t_davies

Now time for @garrettr_ and @bcrypt to talk about SecureDrop. #realworldcrypto

Alec Muffett @AlecMuffett

#SecureDrop explanatory slide at #realworldcrypto instagram.com/p/xjGTWxvjTY/

拡大

Gareth T. Davies @gareth_t_davies

Challenge is to provide a service that is usable by whistleblowers and sources who aren't necessarily tech-savvy #realworldcrypto

Gareth T. Davies @gareth_t_davies

Small demo of SecureDrop, interesting inherent conflict between forensic deniability and desire for end-to-end encryption #realworldcrypto

virginie galindo @poulpita

[web crypto] @W3C Web Crypto WG will soon recharter, join the conversation ! lists.w3.org/Archives/Publi… (ping #realworldcrypto)

Emiliano DC 💉💉🇪🇺 @emilianoucl

@_emilianodc Apparently, wrong hash tag. Correct one is #realworldcrypto. But I like the rugby #RWC2015 kinda better

George Tankersley @gtank__

Catching the first day of #realworldcrypto before my flight. Takeaway: "you should encourage sources to dl porn over Tor"

Jan Schaumann (@jschauma@mstdn.social) @jschauma

#realworldcrypto advice: "download s bunch of porn" (plausible deniability for having Tor) "that's a really good idea"

Gareth T. Davies @gareth_t_davies

John Kelsey from NIST suggests sources use Tor to download embarrassing porn to indicate a 'valid reason' for having Tor #realworldcrypto

- tangente roja - @tangenteroja

The Coffee break definitely had authentic overcrowded nightclub vibe. Apart from no music and lights. #realworldcrypto

Graham Steel @graham_steel

API watch: so far at #realworldcrypto two mentions of webcrypto API, one mention of PKCS#11..

UCL InfoSec @uclisec

Shamelessly squatting #realworldcrypto hashtag to promote UCL MSc in InfoSec, lots of real world crypto (& security)! cs.ucl.ac.uk/degrees/msc_is…

Alec Muffett @AlecMuffett

Facebook & Twitter at #realworldcrypto pic.twitter.com/abqgg4GbWo

拡大

Cryptosense @cryptosense

#RealWorldCrypto starts today, sponsored by @cryptosense, @graham_steel will be speaking this afternoon about developments in crypto APIs

Gareth T. Davies @gareth_t_davies

After a rapid round of lightning talks it's time for @hashbreaker to talk about error-prone cryptographic designs. #realworldcrypto

Alec Muffett @AlecMuffett

DJB at #realworldcrypto instagram.com/p/xjPoYKPjcc/

拡大

Gareth T. Davies @gareth_t_davies

Where does blame lie in major cryptofails, eg Sony PS3? Implementation was stupid but algorithm/standard allowed the idiocy #realworldcrypto

Real World Crypto @RealWorldCrypto

We are packed out at RWC 2015 - more than 350 people in attendance #realworldcrypto pic.twitter.com/KRjCp2H4xI

拡大

Gareth T. Davies @gareth_t_davies

Hard to implement AES securely while insisting on its initial design, so shift to naturally constant-time ciphers is good #realworldcrypto

Gareth T. Davies @gareth_t_davies

Incorporating AES into complex protocols increases security challenge, yet public review often looks at primitives alone #realworldcrypto

Gareth T. Davies @gareth_t_davies

Mostly preaching to the converted, provable security must take into account implementations, side-channels and protocols #realworldcrypto

Gareth T. Davies @gareth_t_davies

Real need to advance understanding of and defences for HTTPS (and TLS). John Kelsey from NIST now to react... #realworldcrypto

Real World Crypto @RealWorldCrypto

Great talk by Dan Bernstein - asks: which TLS attacks could have been prevented by designers rather than implementors? #realworldcrypto

Filippo Valsorda @filippo.abyssdomain.expert @FiloSottile

The guy next to me is prying into my papers/screens and the one behind me has a recorder on. I liked the #31c3 crowd better #realworldcrypto

Gareth T. Davies @gareth_t_davies

Dual EC DRBG story overview from John Kelsey, "circumstantial evidence" that NSA put deliberate backdoor in but "no proof" #realworldcrypto