Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Step one: send a file that's cryptographically signed. Step two: the client solves the problem of "which of these duplicate and conflicting packets do I need to assemble together to make a message that is appropriately signed?"


I solved it by cryptographically signing each packet. The signature was checked before decrypting the packet.

Some customers (e.g. DOD) sent in clear, unsigned. They trusted their networks.


> Some customers (e.g. DOD) sent in clear, unsigned. They trusted their networks.

Wow. I had no idea. This may be one of the dumbest things I've ever read. Encryption is free.


Didn't use to be. VIA/centaur was the first to add AES instructions, later picked up by Intel and AMD. Its not free, but not expensive.

A brilliant woman from, where, Slovenia? figured a way to use SSE instructions to encrypt just as fast as the built-in instructions, I think 2 cycles per byte.

I guess DJB's ciphers run much the same way, nowadays.


If you ever track down a citation for that I'd love to know more.


Might be Emilia Kasper, now apparently at Google. Probably it was 2 cycles per bit, not byte.

There are pretty good references starting from https://crypto.stanford.edu/vpaes/ .



Bandwidth for signature values in each packet is not. Additionally, as is pointed out down-thread, crypto wasn’t always free either.


Actually the signature was almost free, because it was also the nonce for the header, which was the nonce for the rest of the packet. IIRC.


not true, although i'm sure there are one-off instances where there's no encryption. but in general there's lots of encryption on each of the different levels of secure government networks.


Right, they didn't want us encrypting what they were going to encrypt in their routers anyway. "Trusted" is a technical term.

So they started using Aspera to send video from the UAVs over Iraq etc. to the Pentagon. Before that, they were literally flying boxes of videotapes (or CDs? Tapes seem hard to believe, except this was govt.) to a warehouse, where analysts could check them out, like from your neighborhood library.

Probably now it's all realtime. But they have to stream it, somehow, so it is likely still going via Aspera to Nevada or wherever they work the remote pilots.


Sounds like this was a (little?) while ago.

On first read I thought you meant Aspera ran on the UAVs :) but I now realize the high unlikeliness of that...


At the time (mid-late 2000s) the video output from the UAVs was sent in the clear, in analog format, and recorded in analog format. So they had to start digitizing it in the field to transfer as files.

Jihadists could tune in an ordinary scanner, and watch the video coming from them. Embarrassing.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: