<div><br></div><blockquote type="cite" class="protonmail_quote"><div class="WordSection1"><ul style="margin-top:0in" type="disc"><li class="MsoListParagraph" style="margin-left:0in;mso-list:l0 level1 lfo1">I find that Firefox refuses to do any ephemeral ciphers whatsoever. What the heck? Why am I surprised. Somebody paid them. <br></li></ul><div><p class="MsoNormal">I don’t know what server you are testing against, but FF does ECDHE all the time with no problems.<br></p></div></div></blockquote><div><br></div><div>I should have said, "<i>I find that Firefox refuses to do any ephemeral ciphers whatsoever, which are not elliptic curve. (referring to DHE, EDH, et al) What the heck? Why am I surprised. Somebody paid them. Firefox insists on EC</i>."<br></div><div><br></div><div><br></div><div><blockquote type="cite" class="protonmail_quote"><div class="WordSection1"><div><ul style="margin-top:0in" type="disc"><li class="MsoListParagraph" style="margin-left:0in;mso-list:l0 level1 lfo1">If you follow Schnieder, elliptic curve is not an option. <br></li></ul><p class="MsoNormal">That’s interesting, you have a reference for that?<br></p></div></div></blockquote><div><br></div><div>Certainly. Below.<br></div></div><div><br></div><div><br></div><div><blockquote type="cite" class="protonmail_quote"><div class="WordSection1"><div><ul style="margin-top:0in" type="disc"><li class="MsoListParagraph" style="margin-left:0in;mso-list:l0 level1 lfo1">I know you guys are severely underfunded, but is there any chance that lattice encryption will be coming soon? I've searched until my face turned blue. <br></li></ul><p class="MsoNormal">We will most likely follow the IETF recommendation and see what the NIST post-quantum work comes up with. That’s my personal opinion, not necessarily that of the whole time.<br></p></div></div></blockquote><div><div><br></div><div>In August 2015, the NSA announced that it is planning to
introduce a list of approved crypto methods that would
resist quantum computers. In April 2017, NIST naturally followed
suit, starting a public vetting process which will last 4 to 6
years. Needless to say, I am hoping that there will be lattice
open-source alternatives which are not based on NIST algos. I do enterprise infosec, and if the NSA can do it, KGB probably has similar methods, not to mention Russian, Israeli, & Chinese haqxors, the Norks, corporate operations, and so on. Any crypto weakening, whether through flaw or <u><i>Intent</i></u>, is the wrong thing.<br></div><div><br></div><div>G**gle's <a href="https://en.wikipedia.org/wiki/Eric_Schmidt#Privacy">Eric
Schmidt says</a>, "<i>If you have something that you don't want
anyone to know, maybe you shouldn't be doing it in the first place</i>.
This is a profoundly undemocratic attitude. What would Thomas
Paine, or Ben Franklin, or Patrick Henry say to this?<br></div><div><br></div></div></div><blockquote type="cite" class="protonmail_quote"><div class="WordSection1"><div><p class="MsoListParagraph" style="margin-left:0in">On Sun, Dec 17, 2017 at 3:58 PM, Salz, Rich via openssl-users<br></p></div></div><div><div> <a href="mailto:openssl-users@openssl.org">openssl-users@openssl.org</a> wrote:<br></div></div><blockquote><blockquote><div>If you follow Schnieder, elliptic curve is not an option.<br></div></blockquote><div><div>That’s interesting, you have a reference for that?<br></div><div> <br></div><div> I'm guessing OP's referring to "Applied Cryptography, 2nd Edition".<br></div><div> There was one page on elliptical curve cryptography, and it didn't<br></div><div> give any real information on what it was, what problem it uses (the<br></div><div> discrete logarithm problem), how it's used, or how DH is adapted to<br></div><div> use it. The book was pretty much entirely against software patents,<br></div><div> and because ECC had been freshly patented it seemed to be much more<br></div><div> scary about the topic than it should have been.<br></div></div></blockquote></blockquote><div><br></div><div>No: <a href="https://www.theguardian.com/world/2013/sep/05/nsa-how-to-remain-secure-surveillance">https://www.theguardian.com/world/2013/sep/05/nsa-how-to-remain-secure-surveillance</a> ... and many more Schnier articles. He puts out a monthly newsletter.<br></div><div><div><div><br></div></div><div>The NSA actually provided the elliptic curves for NIST's standards. And the Snowden docs now show that those curves are <u>related</u>.<br></div><div><br></div><div>(Unfortunately Schnier's own website doesn't take his advice for some reason -- he's busy)<br></div><div class="protonmail_signature_block protonmail_signature_block-empty"><div class="protonmail_signature_block-user protonmail_signature_block-empty"><div><br></div></div><div class="protonmail_signature_block-proton protonmail_signature_block-empty"><div><br></div></div></div><div><div><br></div></div></div><div>Also Apache is not actually enforcing server-ordering of ciphers BTW, but NginX does.<br></div><div><br></div><div>PS - does OpenSSL get funding from the DoD?<br></div>