[146819] in cryptography@c2.net mail archive

home help back first fref pref prev next nref lref last post

Re: [Cryptography] Why prefer symmetric crypto over public key

daemon@ATHENA.MIT.EDU (Jaap-Henk Hoepman)
Sun Sep 8 12:02:38 2013

X-Original-To: cryptography@metzdowd.com
In-Reply-To: <CAHWD2rL4FcGxLDR32LRJgok1X7CE1p8b2=6QH_LoHWAEgJDfVA@mail.gmail.com>
From: Jaap-Henk Hoepman <jhh@cs.ru.nl>
Date: Sun, 8 Sep 2013 14:10:09 +0200
To: =?utf-8?Q?Lodewijk_andr=C3=A9_de_la_porte?= <l@odewijk.nl>
Cc: Tony Arcieri <bascule@gmail.com>, Crypto <cryptography@metzdowd.com>,
	"Perry E. Metzger" <perry@piermont.com>
Errors-To: cryptography-bounces+crypto.discuss=bloom-picayune.mit.edu@metzdowd.com


> 
> Symetric cryptography does a much easier thing. It combines data and some mysterious data (key) in a way that you cannot extract data without the mysterious data from the result. It's like a + b = c. Given c you need b to find a. The tricks that are involved are mostly about sufficiently mixing data, to make sure there's enough possible b's to never guess it correctly and that all those b's have the same chance of being the one b. Preferably even when you have both A and C, but that's really hard. 
> 
> So I'd say Bruce said that in an effort to move to more well understood cryptography. It is also a way to move people towards simply better algorithms, as most public key systems are very, very bad.

Funny. I would have said exactly the opposite: public key crypto is much better understood because it is based on mathematical theorems and reductions to (admittedly presumed) hard problems, whereas symmetric crypto is really a black art that mixes some simple bit wise operations and hopes for the best (yes, I know this is a bit of caricature...)

Jaap-Henk
_______________________________________________
The cryptography mailing list
cryptography@metzdowd.com
http://www.metzdowd.com/mailman/listinfo/cryptography

home help back first fref pref prev next nref lref last post