My gut is telling me pushing security model to hashes seems like a far far worse bet if you are worried about advances in maths.
Hashes are so simple. There's no place for these crazy math attacks, which rely on rethinking long-standing and otherwise reasonable assumptions, to hide.
Surely we can all agree that there's no way to reverse a modulus.
Currently that's a large brute force problem. But my gut is telling me is that finding a forward pass method of restraining private key generation such that we know what kind of public key hash to expect at the end, should be easier than cracking elliptic curves.
I guess depending on your outlook some might view that as "reversing" a hash, but it's not like you are getting the original input which is a impossible problem (unless there is a bunch of info you already know about the input).
holy heck, the planets have aligned, HN
;-)
I still hack every day (current project: pickipedia.xyz), but I'm not doing security anymore except for my own projects.
And yes, I was more making light of what seem to me to largely be political disagreements; of course I respect your work at the same time.
It seems clearer and clearer to me that nationa-states cannot possibly withstand the evolution of the internet in any dignified way, and I pray for peaceful, simple deprecation of them. It seems to me to be the sensible stance, both in terms of security and in terms of joy.
My repeated sense - right honed or wrongly - is that you defend these structures (nation-states generally, and intelligence operations / state secret brokers in particular) in ways that I find hard to reconcile, even upon extended reflection.
Aren't hashes far less reliant on math tricks?
My understanding is the problem with public-key crypto is it extremely reliant on a single math trick (e.g. the factoring problem), so if it turns out that trick was weaker than was assumed, the whole thing crumbles.