Security Hype 7.7-RSA Key hack revisited, AACS in depth with Bob Relyea
Posted by: bill in general security, podcast
Security_Hype_7.7-RSA_Key_Compromise_and_AACS_key_management_details: Play Now | Play in Popup | Download (1400)Bob Relyea, a PKI and cryptographic engineer, joins Bill and Bob to discuss the recent RSA and AACS key compromises in depth.
In the news, we’ve been reading about how researchers have been able to factor a very large number which is 307 digits long. Bob Relyea helps us understand if these results help spell doom for 1024-bit RSA or if it’s a non-event. Are there implications for Diffie-Hellman and DSA as well?
We’ve also been reading about AACS, a new DVD content protection scheme aimed at preventing piracy of the new high-definition DVDs. One of the AACS keys was found and posted on the web, including on Digg. Digg management removed the key, triggering a user revolt at Digg. A summary posted on BoingBoing nicely describes the event and Digg’s decision to side with its users, risking legal action by the DVD industry.
Bob Relyea helps us understand what AACS really is, how it works, and how it attempts to address the security flaws the previous standard. Bob will help us understand whether or not a key compromise like the one highlighted on Digg represents a real problem for the motion picture industry.
If you like the show, please go to iTunes and add your reviews to our podcast. If you have suggestions for show topics or have comments on this episode please send your feedback to comments@SecurityHype.com
Thanks for listening!
Entries (RSS)
September 4th, 2007 at 6:09 am
Listening to Relyea’s explanation of how AACS does certificate revocation was interesting. Complicated, and I think I have to go back and listen to it again to make sure I understand it.
It put a different spin on a feature I had seen earlier in the day: a Toshiba HD-DVD player with an Ethernet interface. That baby could download CRL’s in real time… but it also needs firmware updates.
http://www.tacp.toshiba.com/tacpassets-images/notices/hddvdfirmware.asp