Key Management Quotes

Cryptography is the ultimate form of non-violent direct action.

If someone stole your keys to encrypt the data, it didn't matter how secure the algorithms were.

I used to lose my keys a lot.

Too many locks, not enough keys.

You don't mess with janitors, first of all, they have like 40 keys, and 1 is to a closet you don't want to be inside of.

Humans are incapable of securely storing high-quality cryptographic keys, and they have unacceptable speed and accuracy when performing cryptographic operations. (They are also large, expensive to maintain, difficult to manage, and they pollute the environment. It is astonishing that these devices continue to be manufactured and deployed. But they are sufficiently pervasive that we must design our protocols around their limitations.)

If you depend on a secret for your security, what do you do when the secret is discovered? If it is easy to change, like a cryptographic key, you do so. If it's hard to change, like a cryptographic system or an operating system, you're stuck. You will be vulnerable until you invest the time and money to design another system.

I think most organizations have an interest in key recovery, at least with respect to stored data.

I've got keys to crap I've never owned. You put all my keys together I could be a high school janitor tonight.

As life goes on, we accrue more and more loseable objects. Providence dictates that objects that are too large to lose, such as houses, always come with tiny little keys, specially designed to give you the slip.

I don't need to drive. I have no business driving. I would never be able to find my keys.

I haven't seen - I haven't heard the arguments that would make that case. And I haven't seen a proposal yet that satisfies the objections. The problem is, you create a key like this, and it can't - it's hard to say that it's going to be hidden. And then it becomes used both by our government in multiple cases, but also it could get out as far as hackers are concerned or other countries.

I favor strategies that encourage industry to include some sort of key recovery capability in their systems which would also address user requirements for access.

In a sense, communications networks can be defined entirely by who has cryptographic keys, and I think a lot of networks will work that way in the future.

I thought cryptography was a technique that did not require your trusting other people-that if you encrypted your files, you would have the control to make the choice as to whether you would surrender your files.

The world was full of locked doors, and he had to get his hand on every key.