NSA and IETF, Part 2
3 days ago
- #Encryption
- #NSA
- #IETF
- NSA and GCHQ are pushing for weakened encryption standards, focusing solely on post-quantum (PQ) cryptography.
- A critical deadline for objections to the NSA-driven TLS document is approaching on 2025-11-26.
- The TLS working group chairs falsely claimed consensus for adopting the document despite significant opposition.
- IESG instructed the area director to address the consensus issue after months of stonewalling.
- The 'last call' for objections is criticized for ignoring previous objections and allowing proponents to flood with support votes.
- Employees from NSA, GCHQ, and other conflicted organizations have voiced support for the document.
- Standards organizations like ANSI and ASME have rules to ensure balance of interests, which IETF lacks.
- IETF's process is vulnerable to manipulation by well-funded participants, leading to biased decisions.
- The rationale for the NSA-driven document is questioned, with no clear engineering justification provided.
- The push for non-hybrid PQ standards is seen as a move by NSA to create exploitable systems.