<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>algorithms &#8211; Noise</title>
	<atom:link href="https://noise.getoto.net/tag/algorithms/feed/" rel="self" type="application/rss+xml" />
	<link>https://noise.getoto.net</link>
	<description>The collective thoughts of the interwebz</description>
	<lastBuildDate>Mon, 15 Sep 2025 16:08:53 +0000</lastBuildDate>
	<language>en-US</language>
	<sy:updatePeriod>
	hourly	</sy:updatePeriod>
	<sy:updateFrequency>
	1	</sy:updateFrequency>
	<generator>https://wordpress.org/?v=6.8.2</generator>
	<item>
		<title>Microsoft Still Uses RC4</title>
		<link>https://noise.getoto.net/2025/09/16/microsoft-still-uses-rc4/</link>
		
		<dc:creator><![CDATA[Bruce Schneier]]></dc:creator>
		<pubDate>Tue, 16 Sep 2025 11:06:44 +0000</pubDate>
				<category><![CDATA[algorithms]]></category>
		<category><![CDATA[microsoft]]></category>
		<category><![CDATA[ransomware]]></category>
		<category><![CDATA[RC4]]></category>
		<category><![CDATA[Uncategorized]]></category>
		<guid isPermaLink="false">https://www.schneier.com/?p=70791</guid>

					<description><![CDATA[Senator Ron Wyden has asked the Federal Trade Commission to investigate Microsoft over its continued use of the RC4 encryption algorithm. The letter talks about a hacker technique called Kerberoasting, that exploits the Kerberos authentication system.
]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>Demo of AES GCM Misuse Problems</title>
		<link>https://noise.getoto.net/2024/06/14/demo-of-aes-gcm-misuse-problems/</link>
		
		<dc:creator><![CDATA[Bruce Schneier]]></dc:creator>
		<pubDate>Fri, 14 Jun 2024 11:05:35 +0000</pubDate>
				<category><![CDATA[aes]]></category>
		<category><![CDATA[algorithms]]></category>
		<category><![CDATA[cryptanalysis]]></category>
		<category><![CDATA[encryption]]></category>
		<category><![CDATA[Uncategorized]]></category>
		<guid isPermaLink="false">https://www.schneier.com/?p=69025</guid>

					<description><![CDATA[This is  really neat demo of the security problems arising from reusing nonces with a symmetric cipher in GCM mode.
]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>NIST Draft Document on Post-Quantum Cryptography Guidance</title>
		<link>https://noise.getoto.net/2023/05/02/nist-draft-document-on-post-quantum-cryptography-guidance/</link>
		
		<dc:creator><![CDATA[Bruce Schneier]]></dc:creator>
		<pubDate>Tue, 02 May 2023 14:10:30 +0000</pubDate>
				<category><![CDATA[algorithms]]></category>
		<category><![CDATA[Applied Cryptography]]></category>
		<category><![CDATA[nist]]></category>
		<category><![CDATA[quantum computing]]></category>
		<category><![CDATA[Uncategorized]]></category>
		<guid isPermaLink="false">https://www.schneier.com/?p=67297</guid>

					<description><![CDATA[NIST has released a draft of Special Publication1800-38A: &#8220;Migration to Post-Quantum Cryptography: Preparation for Considering the Implementation and Adoption of Quantum Safe Cryptography.&#8221; It&#8217;s only four pages long, and it doesn&#38;#821...]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>NIST’s Post-Quantum Cryptography Standards</title>
		<link>https://noise.getoto.net/2022/08/08/nists-post-quantum-cryptography-standards/</link>
		
		<dc:creator><![CDATA[Schneier.com Webmaster]]></dc:creator>
		<pubDate>Mon, 08 Aug 2022 11:20:29 +0000</pubDate>
				<category><![CDATA[algorithms]]></category>
		<category><![CDATA[cryptanalysis]]></category>
		<category><![CDATA[Cryptography]]></category>
		<category><![CDATA[nist]]></category>
		<category><![CDATA[quantum computing]]></category>
		<category><![CDATA[quantum cryptography]]></category>
		<category><![CDATA[Uncategorized]]></category>
		<guid isPermaLink="false">https://www.schneier.com/?p=65754</guid>

					<description><![CDATA[<p>Quantum computing is a completely new paradigm for computers. A quantum computer uses quantum properties such as superposition, which allows a qubit (a quantum bit) to be neither 0 nor 1, but something much more complicated. In theory, such a computer can solve problems too complex for conventional computers.</p>
<p>Current quantum computers are still toy prototypes, and the engineering advances required to build a functionally useful quantum computer are <a href="https://www.schneier.com/essays/archives/2018/09/cryptography_after_t.html">somewhere between</a> a few years away and impossible. Even so, we already know that that such a computer could potentially factor large numbers and compute discrete logs, and break the RSA and Diffie-Hellman public-key algorithms in all of the useful key sizes...</p>]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>SIKE Broken</title>
		<link>https://noise.getoto.net/2022/08/04/sike-broken/</link>
		
		<dc:creator><![CDATA[Bruce Schneier]]></dc:creator>
		<pubDate>Thu, 04 Aug 2022 11:56:22 +0000</pubDate>
				<category><![CDATA[algorithms]]></category>
		<category><![CDATA[cryptanalysis]]></category>
		<category><![CDATA[Cryptography]]></category>
		<category><![CDATA[encryption]]></category>
		<category><![CDATA[nist]]></category>
		<category><![CDATA[quantum computing]]></category>
		<category><![CDATA[Uncategorized]]></category>
		<guid isPermaLink="false">https://www.schneier.com/?p=65750</guid>

					<description><![CDATA[<p><a href="https://sike.org/">SIKE</a> is one of the new algorithms that NIST <a href="https://csrc.nist.gov/News/2022/pqc-candidates-to-be-standardized-and-round-4">recently added</a> to the post-quantum cryptography competition.</p>
<p>It was just <a href="https://eprint.iacr.org/2022/975.pdf">broken</a>, really badly.</p>
<blockquote><p>We present an efficient key recovery attack on the Supersingular Isogeny Diffie­-Hellman protocol (SIDH), based on a “glue-and-split” theorem due to Kani. Our attack exploits the existence of a small non-scalar endomorphism on the starting curve, and it also relies on the auxiliary torsion point information that Alice and Bob share during the protocol. Our Magma implementation breaks the instantiation SIKEp434, which aims at security level 1 of the Post-Quantum Cryptography standardization process currently ran by NIST, in about one hour on a single core...</p></blockquote>]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>On the Subversion of NIST by the NSA</title>
		<link>https://noise.getoto.net/2022/06/23/on-the-subversion-of-nist-by-the-nsa/</link>
		
		<dc:creator><![CDATA[Bruce Schneier]]></dc:creator>
		<pubDate>Thu, 23 Jun 2022 11:05:08 +0000</pubDate>
				<category><![CDATA[academic papers]]></category>
		<category><![CDATA[algorithms]]></category>
		<category><![CDATA[Cryptography]]></category>
		<category><![CDATA[nist]]></category>
		<category><![CDATA[NSA]]></category>
		<category><![CDATA[Uncategorized]]></category>
		<guid isPermaLink="false">https://www.schneier.com/?p=65581</guid>

					<description><![CDATA[<p>Nadiya Kostyuk and Susan Landau wrote an interesting paper: “<a href="https://harvardnsj.org/wp-content/uploads/sites/13/2022/06/Vol13Iss2_Kostyuk-Landau_Dual-EC-DRGB.pdf">Dueling Over DUAL_EC_DRBG: The Consequences of Corrupting a Cryptographic Standardization Process</a>“:</p>
<blockquote><p><b>Abstract:</b> In recent decades, the U.S. National Institute of Standards and Technology (NIST), which develops cryptographic standards for non-national security agencies of the U.S. government, has emerged as the de facto international source for cryptographic standards. But in 2013, Edward Snowden disclosed that the National Security Agency had subverted the integrity of a NIST cryptographic standard­the Dual_EC_DRBG­enabling easy decryption of supposedly secured communications. This discovery reinforced the desire of some public and private entities to develop their own cryptographic standards instead of relying on a U.S. government process. Yet, a decade later, no credible alternative to NIST has emerged. NIST remains the only viable candidate for effectively developing internationally trusted cryptography standards...</p></blockquote>]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>Apple’s NeuralHash Algorithm Has Been Reverse-Engineered</title>
		<link>https://noise.getoto.net/2021/08/18/apples-neuralhash-algorithm-has-been-reverse-engineered/</link>
		
		<dc:creator><![CDATA[Bruce Schneier]]></dc:creator>
		<pubDate>Wed, 18 Aug 2021 16:51:17 +0000</pubDate>
				<category><![CDATA[algorithms]]></category>
		<category><![CDATA[Apple]]></category>
		<category><![CDATA[backdoors]]></category>
		<category><![CDATA[Cryptography]]></category>
		<category><![CDATA[hashes]]></category>
		<category><![CDATA[ios]]></category>
		<category><![CDATA[iPhone]]></category>
		<category><![CDATA[Reverse Engineering]]></category>
		<category><![CDATA[Uncategorized]]></category>
		<guid isPermaLink="false">https://www.schneier.com/?p=63588</guid>

					<description><![CDATA[<p>Apple’s <a href="https://www.apple.com/child-safety/pdf/CSAM_Detection_Technical_Summary.pdf">NeuralHash algorithm</a> — the one it’s using for <a href="https://www.schneier.com/blog/archives/2021/08/apple-adds-a-backdoor-to-imesssage-and-icloud-storage.html">client-side scanning</a> on the iPhone — has been <a href="https://github.com/AsuharietYgvar/AppleNeuralHash2ONNX">reverse-engineered</a>.</p>
<p>Turns out it was already in iOS 14.3, and <a href="https://www.reddit.com/r/MachineLearning/comments/p6hsoh/p_appleneuralhash2onnx_reverseengineered_apple/">someone noticed</a>:</p>
<blockquote><p>Early tests show that it can tolerate image resizing and compression, but not cropping or rotations.</p></blockquote>
<p>We also have the <a href="https://github.com/AsuharietYgvar/AppleNeuralHash2ONNX/issues/1">first collision</a>: two images that hash to the same value.</p>
<p>The next step is to generate innocuous images that NeuralHash classifies as prohibited content.</p>
<p>This was a bad idea from the start, and Apple never seemed to consider the adversarial context of the system as a whole, and not just the cryptography...</p>]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
		<item>
		<title>Brexit Deal Mandates Old Insecure Crypto Algorithms</title>
		<link>https://noise.getoto.net/2020/12/31/brexit-deal-mandates-old-insecure-crypto-algorithms/</link>
		
		<dc:creator><![CDATA[Bruce Schneier]]></dc:creator>
		<pubDate>Thu, 31 Dec 2020 12:19:14 +0000</pubDate>
				<category><![CDATA[aes]]></category>
		<category><![CDATA[algorithms]]></category>
		<category><![CDATA[Cryptography]]></category>
		<category><![CDATA[e-mail]]></category>
		<category><![CDATA[encryption]]></category>
		<category><![CDATA[hashes]]></category>
		<category><![CDATA[rsa]]></category>
		<category><![CDATA[UK]]></category>
		<category><![CDATA[Uncategorized]]></category>
		<guid isPermaLink="false">https://www.schneier.com/?p=60696</guid>

					<description><![CDATA[<p>In what is surely an unthinking cut-and-paste issue, page 921 of the Brexit deal <a href="https://www.theverge.com/2020/12/29/22204624/brexit-eu-uk-netscape-communicator-4-crytography-email-data-dna-trade-deal">mandates</a> <a href="https://www.bbc.com/news/technology-55475433">the</a> use of SHA-1 and 1024-bit RSA:</p>
<blockquote><p>The open standard s/MIME as extension to de facto e-mail standard SMTP will be deployed to encrypt messages containing DNA profile information. The protocol s/MIME (V3) allows signed receipts, security labels, and secure mailing lists&#8230; The underlying certificate used by s/MIME mechanism has to be in compliance with X.509 standard&#8230;. The processing rules for s/MIME encryption operations&#8230; are as follows:</p>
<ol>
<li>the sequence of the operations is: first encryption and then signing,
...</li></ol></blockquote>]]></description>
		
		
		<enclosure url="" length="0" type="" />

			</item>
	</channel>
</rss>

<!--
Performance optimized by W3 Total Cache. Learn more: https://www.boldgrid.com/w3-total-cache/

Object Caching 33/160 objects using Memcached
Page Caching using Disk: Enhanced 
Lazy Loading (feed)
Database Caching using Memcached

Served from: noise.getoto.net @ 2025-12-10 02:29:03 by W3 Total Cache
-->