1. From:           Peter Gutmann <pgut001-AT-cs.auckland.ac.nz>
2. To:             iang-AT-iang.org
3. Subject:                Re: best practices considered bad term
4. Date:           Mon, 02 Feb 2015 03:44:42 +1300
5. Message-ID:             <E1YHvlS-0007fQ-NU@login01.fos.auckland.ac.nz>
6. Cc:             for-gmane-AT-mutluit.com, cryptography-AT-metzdowd.com, kentborg-AT-borg.org
7. Archive-link:           Article, Thread
8. ianG <iang@iang.org> writes:
9.  
10. >As a wider philosophical question, is it even appropriate to promote or
11. >accept 'best practices' in the security world?  It's presence is almost a
12. >complete proof that we're not doing security, we're instead participating in
13. >a rain dance or voodoo for purposes of avoiding security.
14.  
15. This is particularly the case for the "cryptography" subset of "security", for
16. which "best practice" seems to be synonymous with, as Linus put it, "people
17. wanking around with their opinions".  In something like medicine we have
18. evidence-based best practice, "don't discontinue your antibiotics until you've
19. gone through the full course".  In agriculture we have "don't overuse one type
20. of fungicide or you'll end up with resistant strains".
21.  
22. In contrast in crypto it's "Use ECC!" / "No, use RSA with an 8K key!" / "No,
23. use AES-GCM!" / "No, use Poly1305-AES" / "No, use ECC but only with My Pet
24. Curve!" / "No, use Ed25519" / "Camellia! Gost! Twofish! SEED!  LIONs and
25. Tigers and BEARs, oh my!", ignoring the fact that an attacker won't care what
26. you do since they're exploiting a buffer overflow in some ancillary support
27. library that you don't even know exists.
28.  
29. In medicine and agriculture we know from real-world experience that if you
30. don't follow best practice (in the use of antibiotics, fungicides, whatever),
31. bad things will happen.  In the crypto world if you don't follow best practice
32. (pick someone's at random, it doesn't make much difference) chances are
33. nothing will happen, and even if you do follow best practice, you'll probably
34. get owned anyway because crypto won't stop anyone who wants to get in (see
35. Shamir's Law, what I mean here is that if there's a way in then it won't
36. involve breaking the crypto, an extended form of which is in this slightly
37. NSFW poster: https://www.kiwicon.org/site_media/poster_shit.pdf).
38.  
39. So it's certainly a rain dance, but I wouldn't say it's for avoiding security,
40. it's for avoiding liability, a la "no-one ever got fired for buying IBM".
41.  
42. Peter.