← Back to context

Comment by alephnerd

7 hours ago

It's still being implemented or defined.

The worry about "harvest and decrypt" in a 5 year timeframe is primarily from a nation state/natsec perspective.

If you are being targeted by a nation state as a line level engineer, harvest and decrypt is the least of your worries.

I am reminded of a certain comedian who lost his job hosting an awards ceremony because he had once said something on stage that people didn't like....

...8 years previously.[1]

Long, long ago in a datacenter far away, breaking 3DES used to be the province of expensive bespoke hardware owned by only the elite nation states. Today it is so trivial that the gpu in your second hand laptop can do it "at scale".

5 years ago ChatGPT was a wet dream.

We should be very conservative in our planning where future security is concerned. The only thing we can be sure of is that Murphy's Law is looking for every chance to make us look foolish.

[1] https://www.bbc.com/news/entertainment-arts-46479017

  • As far as I know, cracking 3DES is still not trivial, and requires a very large number of operations and/or a very large amount of data. But can just about be done in some situations.

    If you have any link to trivially cracking it on your second hand laptop and doing it at scale, would be very interested.

    • Mea culpa! I must have had a brain fart and added the 3 in there. My sincere apologies!

      Of course I can't find the link to whatever I read that discussed gpu accelerated des cracking now.