Free Republic
Browse · Search
General/Chat
Topics · Post Article

Skip to comments.

Microsoft throws crypto foes an untouchable elliptic curveball (open source encryption code!)
The Register ^ | Sep 15, 2015 | Richard Chirgwin

Posted on 09/14/2015 10:02:20 PM PDT by dayglored

While Washington mulls ways to make crypto less effective, the industry, thank heavens, continues to push in the other direction. Microsoft Research has just published an elliptic curve library it reckons is considerably faster than what's currently available.

Outlined in this International Association for Cryptologic Research (IACR) paper, the implementation, the FourQLib, comes from noted Redmondian researchers Craig Costello and Patrick Longa.

The aim with FourQ sis to update today's elliptic curve cryptography (ECC) – implementations like the National Institute of Science and Technology's (NIST's) P-256 and the non-NIST-influenced Curve25519 – since one inevitability of crypto tech is that it will become obsolete.

That be-prepared approach also means a new ECC library needs to be fast, so that crypto doesn't become too great a burden on the processors handling it. Here's what the authors say about FourQ's performance:

“On Intel’s Haswell, Ivy Bridge and Sandy Bridge architectures, our software computes a variable-base scalar multiplication in 59,000, 71,000 cycles and 74,000 cycles, respectively; and, on the same platforms, our software computes a Diffie-Hellman shared secret in 92,000, 110,000 cycles and 116,000 cycles, respectively."
...

And importantly, the code has been made public – it's available for download here – for others to audit.

(Excerpt) Read more at theregister.co.uk ...


TOPICS: Business/Economy; Computers/Internet; Hobbies
KEYWORDS: elliptic; encryption; microsoft; windowspinglist
Navigation: use the links below to view more comments.
first 1-2021-22 next last
This is great stuff. Microsoft is stepping up to the plate and making their research available so as to benefit the public as well as themselves. Kudos!!
1 posted on 09/14/2015 10:02:20 PM PDT by dayglored
[ Post Reply | Private Reply | View Replies]

To: dayglored; Abby4116; afraidfortherepublic; aft_lizard; AF_Blue; Alas Babylon!; amigatec; ...
Redmond research produces advanced, fast encryption and makes it available to all ... PING!

You can find all the Windows Ping list threads with FR search: just search on keyword "windowspinglist".

2 posted on 09/14/2015 10:03:19 PM PDT by dayglored ("Listen. Strange women lying in ponds distributing swords is no basis for a system of government.")
[ Post Reply | Private Reply | To 1 | View Replies]

To: for-q-clinton

And they named it for YOU!


3 posted on 09/14/2015 10:03:57 PM PDT by dayglored ("Listen. Strange women lying in ponds distributing swords is no basis for a system of government.")
[ Post Reply | Private Reply | To 2 | View Replies]

To: dayglored

Microsoft in the crypto game ... I would laugh if it wasn’t so sad. They can’t even keep their own publicly offered software safe,


4 posted on 09/14/2015 10:06:42 PM PDT by doc1019 (Out of my mind ... back in 5)
[ Post Reply | Private Reply | To 1 | View Replies]

To: dayglored

But, but I thought Microsoft was nothing more than a shill for the NSA.


5 posted on 09/14/2015 10:08:27 PM PDT by Lurkina.n.Learnin (It's a shame enobama truly doesn't care about any of this. Our country, our future, he doesn't care)
[ Post Reply | Private Reply | To 2 | View Replies]

To: dayglored
This is great stuff. Microsoft is stepping up to the plate and making their research available so as to benefit the public as well as themselves. Kudos!!

Agreed, though it hurts my brain to say it.

Implementations of ECC stuff is tough though, this is going to have to be closely looked at.

6 posted on 09/14/2015 10:23:29 PM PDT by zeugma (Zaphod Beeblebrox for president! Or Cruz if Zaphod is unavailable.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: dayglored

Can someone translate this into English?


7 posted on 09/14/2015 11:44:28 PM PDT by smokingfrog ( sleep with one eye open (<o> ---)
[ Post Reply | Private Reply | To 1 | View Replies]

To: Lurkina.n.Learnin
> But, but I thought Microsoft was nothing more than a shill for the NSA.

Maybe they decided that reputation was hurting them more than the shilling was worth, and they're comin' around?

8 posted on 09/14/2015 11:57:33 PM PDT by dayglored ("Listen. Strange women lying in ponds distributing swords is no basis for a system of government.")
[ Post Reply | Private Reply | To 5 | View Replies]

To: smokingfrog
> Can someone translate this into English?

I can't translate the crypto (I have only a vague understanding of what the elliptical stuff is about), so the best I can do is say, the guys in Redmond came up with some much-improved algorithms for encryption, faster and better than what presently exists, and they're making it available to the public for examination, critique, and use.

It's news not just because of the technology, but also because this is something Microsoft historically has not done often. They usually keep things for themselves, proprietarily, but if they did that with some new encryption scheme, nobody would trust it. So they sorta have to play open with it.

But I don't care what their internal motivation is -- I'm just pleased they're making it available.

9 posted on 09/15/2015 12:01:27 AM PDT by dayglored ("Listen. Strange women lying in ponds distributing swords is no basis for a system of government.")
[ Post Reply | Private Reply | To 7 | View Replies]

To: dayglored
I wondered what Bruce Schneier had to say about this.

Nothing yet.

10 posted on 09/15/2015 12:57:41 AM PDT by TChad
[ Post Reply | Private Reply | To 1 | View Replies]

To: dayglored

Yep in 55 more years my non disclosure with the govt will be up and I can say more.


11 posted on 09/15/2015 2:28:32 AM PDT by driftdiver (I could eat it raw, but why do that when I have a fire.)
[ Post Reply | Private Reply | To 9 | View Replies]

To: doc1019
Microsoft in the crypto game ... I would laugh if it wasn’t so sad.

There's no pleasing the anti-MS trolls, is there? Why bother even saying anything? The fact that you said this tells me that you don't understand what this means.

Elliptical Curve Cryptography (ECC) is a newer form of cryptographic trapdoor that, up to this point, is not able to be cracked. Due to the nature of the mathematics behind the generation of an elliptical curve, it has significant advantages over a random number generator or the use of multiple primes in a complex logarithmic equation. A computer works best when given a set of variables to apply to an equation with an endpoint. ECC provides those variables (a prime number, a curve equation, and a public number) across a complex equation that is, again at this point, impossible to reverse without knowing the exact values selected.

Since ECC is so much more secure than standard number generation, the values selected for the encryption variables can be much smaller than normal which means the computer has to spend significantly less time crunching numbers to reach a prime or a curve equation. If you consider that an average CPU today runs around 3.00 GHz and there are at least 2 of them on a processor die in most PCs, that's 3 billion operations per second (times 2). The article states:

“On Intel’s Haswell, Ivy Bridge and Sandy Bridge architectures, our software computes a variable-base scalar multiplication in 59,000, 71,000 cycles and 74,000 cycles, respectively; and, on the same platforms, our software computes a Diffie-Hellman shared secret in 92,000, 110,000 cycles and 116,000 cycles, respectively."

This means that on an average computer die, these keys can be generated in 1.967e-5 cycles or 50,000+ keys per second at a minimum; or one DH shared secret in 3.867e-5 cycles or 25862 DH shared secrets per second at a maximum.

The mathematics behind this are very complex and implementation in an operating environment has been slow to adopted. The fact that Microsoft has stepped up and done this tells me three things:

1. They want the public to have this power and they want the MS OS to lead the way with it
2. They are dedicated to encryption technologies against the advising of the US federal government
3. They want their operating environments to be as secure as possible

If you fail to see that and have nothing else to say other than something to bash Microsoft for their efforts, then you are no better than a fanboy having a conniption over a competitor's attempts to make the market stronger for the users overall.

12 posted on 09/15/2015 4:59:24 AM PDT by rarestia (It's time to water the Tree of Liberty.)
[ Post Reply | Private Reply | To 4 | View Replies]

To: dayglored
😊 how do you know I want the one that named it ;-)
13 posted on 09/15/2015 5:56:03 AM PDT by for-q-clinton (If at first you don't succeed keep on sucking until you do succeed)
[ Post Reply | Private Reply | To 3 | View Replies]

To: for-q-clinton

Wasn’t (stupid Swype keyboard)


14 posted on 09/15/2015 6:01:14 AM PDT by for-q-clinton (If at first you don't succeed keep on sucking until you do succeed)
[ Post Reply | Private Reply | To 13 | View Replies]

To: rarestia
If you fail to see that and have nothing else to say other than something to bash Microsoft for their efforts,

Now you know what every Apple thread poster has to endlessly endure. I am sorry that you have to put up with it too.

15 posted on 09/15/2015 7:01:14 AM PDT by itsahoot (55 years a republican-Now Independent. Will write in Sarah Palin, no matter who runs. RIH-GOP)
[ Post Reply | Private Reply | To 12 | View Replies]

To: itsahoot
Now you know what every Apple thread poster has to endlessly endure. I am sorry that you have to put up with it too.

Maybe we can help by calling anyone who's critical of Microsoft a "hater".

16 posted on 09/15/2015 7:06:53 AM PDT by tacticalogic ("Oh bother!" said Pooh, as he chambered his last round.)
[ Post Reply | Private Reply | To 15 | View Replies]

To: tacticalogic
Maybe we can help by calling anyone who's critical of Microsoft a "hater".

I try to refrain from either but......Truth is hardware is not the deciding factor for me, it is the OS. I am a hobbyist now and am not likely to invest time in new skills at my age.

17 posted on 09/15/2015 12:08:04 PM PDT by itsahoot (55 years a republican-Now Independent. Will write in Sarah Palin, no matter who runs. RIH-GOP)
[ Post Reply | Private Reply | To 16 | View Replies]

To: driftdiver
Yep in 55 more years my non disclosure with the govt will be up and I can say more.

You will pardon us if we don't hold our breaths until then, I hope. GRIN!

18 posted on 09/15/2015 2:50:57 PM PDT by Swordmaker ( This tag line is a Microsoft insult free zone... but if the insults to Mac users continue...)
[ Post Reply | Private Reply | To 11 | View Replies]

To: dayglored; ~Kim4VRWC's~; 1234; Abundy; Action-America; acoulterfan; AFreeBird; Airwinger; Aliska; ..
Microsoft has just released a new, fast encryption technique into the open for others to examine to assure themselves of it's security and to allow all to use it. It is Elliptical Curve Cryptography that uses smaller seed numbers that make it easier calculate quickly using modern desktop level processors to both encrypt and decrypt data for transmission. Microsoft joins Apple and Google in not cooperating with the US Government in letting them have access to user data. — PING!


More Secure Computing by Encryption
Ping!

The Latest Apple/Mac/iOS Pings can be found by searching Keyword “ApplePingList” on Freerepublic’s Search.

If you want on or off the Mac Ping List, Freepmail me.

19 posted on 09/15/2015 3:06:59 PM PDT by Swordmaker ( This tag line is a Microsoft insult free zone... but if the insults to Mac users continue...)
[ Post Reply | Private Reply | To 1 | View Replies]

To: dayglored

When encryption is outlawed, woeiru sosdidkx.z.


20 posted on 09/15/2015 6:25:27 PM PDT by IncPen (Not one single patriot in Washington, DC.)
[ Post Reply | Private Reply | To 1 | View Replies]


Navigation: use the links below to view more comments.
first 1-2021-22 next last

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
General/Chat
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson