But we don't, and your statement is irrelevant because it demonstrates a lack of how encryption keys work. Just because something's "valid" for 20 years doesn't mean it'll work for 20 years. Encryption keys are rotated in and out all the time, making today's key invalid permanently going forward.
Here's what's relevant:
1. Have the encryption keys been CHANGED?
2. Who holds the new encrypted keys?
3. Are they a TRUSTED SOURCE?
4. Has a rotation schedule for encryption keys been defined?
5. Is the vault that holds the keys SECURE, requiring verified check-out of those keys which includes the precise identity of the individual checking out the keys? Further, does that vault require multi-factor authentication to confirm authenticity and authorization of the individual requesting the keys to do so?
6. Once a key is checked out and used, is it changed so that the key issued is no longer valid?
This ain't my first rodeo, I know how this shit works. Been there, done that. 40 years of broad and deep experience. People who hyperventilate that these 20 year keys are somehow valid and work for 20 years and cannot be rotated out / eliminated as being valid really don't do themselves and the conversation here on FR any service.
I've grown REALLY F'N TIRED of the know nothings here on FR.
B1 5G DE 04 21 C0 19 C4 93 3E 95 05 2B 79 2A B2
There lots of legacy systems.
But we will never know the answer
Thanks for the info.
We aren’t all retired CIA here.