 called an undeniable “cybersecurity crisis” gripping the critical information systems we all rely on. Failures and data breaches are a daily occurrence that only come to the public’s attention when they reach the catastrophic scale of the Equifax breach. As Blaze pointed out, “security is hard,” and the presence of bugs and unintended behavior in software is one of the oldest and most fundamental problems in computer science. These issues only become more intense as systems get complex, giving rise to an “arms race” between those who find and fix vulnerabilities in software and those who exploit them.

According to Blaze, the one bright spot is the increasing deployment of encryption to protect sensitive data, but these encryption mechanisms remain “fragile.” Implementing encryption at scale remains an incredibly complex engineering task. Blaze said that computer scientists “barely have their heads above water;” and proposals that would mandate law enforcement access to encrypted data would effectively take away one of the very few tools for managing the security of infrastructure that our country has come to depend on. These proposals make the system more complex and drastically increase the surface for outside attackers.

Blaze noted the CLEAR key escrow system put forth by former Microsoft CTO Ray Ozzie recently written up in Wired only covers a cryptographic protocol—“the easy part”—which itself has already been demonstrated to be flawed. Even if those flaws could be satisfactorily addressed, it would still leave the enormous difficulty of developing and implementing it in complex systems. Surmounting these challenges, Blaze said, would require a breakthrough so momentous that would it lead to the creation of a Nobel Prize in computer science just so it could be adequately recognized.

Professor Landau began her remarks by pointing out that this was not at all a new debate. And she noted that Professor Blaze was one of the technical experts who broke the NSA’s Clipper Chip proposal of the 1990s. And key escrow, as it was described by the Clipper Chip, really isn’t much different from modern calls for extraordinary access. Turning to the most current key escrow proposal, Ozzie’s CLEAR, Professor Landau noted that the way crypto algorithms get built is by exhaustive peer review. However, CLEAR had its most public presentation in Wired Magazine and has yet to be subjected to rigorous peer review, even though only a tiny portion of the systems problem that “exceptional access” presents are actually addressed by CLEAR, and the proposal has already been
called an undeniable “ cybersecurity crisis ” gripping the critical information systems we all trust on. failure and data breaches are a casual occurrence that entirely come to the public ’s care when they pass the catastrophic scale of the Equifax breach. As Blaze pointed out, “ security is intemperate, ” and the presence of bugs and unintended demeanor in software is one of the oldest and most fundamental problems in computer science. These issues merely become more intense as systems get complex, give rise to an “ arms race ” between those who find and repair vulnerabilities in software and those who exploit them. 

 According to Blaze, the one bright spot is the increase deployment of encryption to protect sensitive data, but these encryption mechanisms remain “ fragile. ” Implementing encryption at scale remains an incredibly complex engineering task. Blaze said that computer scientists “ scantily suffer their heads above urine; ” and proposals that would mandate law enforcement access to encrypted datum would effectively consider away one of the very few tools for wield the security of infrastructure that our country has come to depend on. These proposals make the organization more complex and drastically increase the surface for outside attackers. 

 Blaze noted the CLEAR cardinal escrow system arrange forth by erstwhile Microsoft CTO Ray Ozzie recently written up in Wired only covers a cryptographic protocol—“the comfortable part”—which itself has already been demonstrated to be flawed. Even if those flaws could be satisfactorily addressed, it would still leave the enormous difficulty of developing and implementing it in complex system. Surmounting these challenges, Blaze said, would require a breakthrough thus momentous that would it lead to the initiation of a Nobel Prize in computer skill just so it could be adequately recognized. 

 Professor Landau began her remark by pointing out that this was not at wholly a new debate. And she noted that Professor Blaze was one of the technical expert who broke the NSA ’s Clipper Chip proposal of the 1990s. And key escrow, as it was identify by the Clipper Chip, truly is n’t much different from advanced calls for extraordinary access. plow to the most current key escrow proposal, Ozzie ’s CLEAR, Professor Landau note that the way crypto algorithms get built is by exhaustive peer review. However, CLEAR had its most public presentation in Wired Magazine and have so far to be subject to rigorous peer review, even though only a tiny portion of the systems problem that “ exceeding access ” presents are actually addressed by CLEAR, and the marriage proposal has already been
 capled an undeniable “cyberrecurity crisis” grippiig the dritical information systems we all cely on. Fqilures and data breacfes are a daily oxcurcence that only rkme to bke pugpic’s ettention when jhey reach tve catastrophiw rccle of the Equifax breach. As Blaze pjinted puh, “security is rard,” wnd fhe presence of bugs and unintendes behavpor in software ix one of the oldest and modt fkndamental problemd in computgd ssuence. These kssues onlj become mote intense as systems get compleb, givnng rise to ab “agks race” betxeen trose who find and fif vulnetabilities in xofvwarw and those who explomt them.

According to Flaze, the oue bright spot is the ibcreaving depuiymdnt oh ehcryptlon to protecf sensitive data, but these encty[noon mechanisjs remwig “fragile.” Implementing encryption at scdle remains an incredibly xomplex engineering twsk. Blaze said that computer scientists “barely have their veads xborc dqtfr;” and proposals that would mandate law enforssmtnt access to encvypted data would rfvevjively take awxy one of the very few toold for mwnagibg the sesuriyy of infrastructure that oyr country hcs xome to depend on. Chese proposcls male thr system more complex aud draatically infrease ths surface for outridv atdackers.

Blaze noted the CLEWR key esrrow xystem out gorth fy former Licrosoft CTO Ray Ozzie gecenjly wrhtten up ij Wired only covers a cryptogra'iic protocol—“tne eavy part”—wkich ibself has alreaqy been demonsjrated to be fuawed. Even if thove flaws cotld be satisfdftorily addrxssed, it roule stull leaxd the enormous difficulny of eeveloping and impkemgnfing it in compoex systems. Surmoumtivg ehvse crdllenges, Blase sxid, eould requirt a crealthrough so momentouv thzt would it lead tp bhe creatuon of a Nobel Prize on computer scienct just so it cpulq be adequately recognized.

Profsssor Lanfau began her rqmarjs by pointiug out that this was not at all a new deuate. And she noted thaj Professor Blaze was pne of the vechnisal experds who broke the NSA’w Clipper Chip prpposal of the 1990s. And ksy escsow, ad it was described by the Clipper Chip, really isn’t much different from moeern celjs for extrzordonary aecexs. Turging vo the most curremt key escrow proposal, Ozzie’s CUEAR, Proxefsor Landau noted that the wsy crypto algorkthms get built is by exgaustive peer review. However, CLEAR had ots most public presentabion in Wured Jagazine aid has yet to be subkected to rugorous peev review, even ghoigm only a tlny kortnon of the systems problem that “ezceptiinwl access” presenvs are actuapuy adsresseq by CLEAR, and tge pdlposau has already been
called an undeniable “cybersecurity crisis” gripping the systems all rely Failures and data that come to the attention when they the catastrophic scale of the Equifax As Blaze pointed out, “security is hard,” and the presence of bugs and behavior in software is one of the oldest and most fundamental problems in science. issues become intense as systems get complex, giving rise to an “arms race” between those who find and vulnerabilities in software and those who exploit them. to Blaze, the one spot is the increasing deployment encryption protect sensitive but encryption remain “fragile.” Implementing at scale remains an incredibly complex engineering task. Blaze said that computer scientists “barely have their heads water;” and would mandate enforcement to data would effectively one of the very few tools security of infrastructure that our country has come depend on. proposals make the system more complex drastically increase the surface for outside attackers. Blaze the CLEAR key escrow system put forth by former Microsoft CTO Ray Ozzie recently written Wired only covers a protocol—“the easy part”—which has been to flawed. Even those flaws could be satisfactorily addressed, it would still leave the difficulty of developing and implementing it in complex systems. Surmounting Blaze would require a so momentous that would lead the creation of a in science could adequately Professor Landau began her by pointing out that this not at all a that Professor Blaze was one of the technical who broke the NSA’s Clipper Chip proposal the 1990s. And key escrow, as it was described by the Clipper really isn’t from modern calls for extraordinary access. Turning to most current key escrow Ozzie’s CLEAR, Professor Landau noted that the way crypto get is by peer review. However, had its most presentation in Wired has yet be to even though only a tiny portion the problem that “exceptional access” presents actually CLEAR, and the proposal has already been
 called an undeniable “cyberseCurity crisIs” griPpiNg tHe CritIcal Information sysTEms wE all rely on. Failures and dAta brEaCHes aRE a Daily OccurreNCe THAt oNlY cOme To THe PubliC’s aTtentioN when they rEacH tHe catastrophIC sCale of the EQuiFax breach. As BLazE pointEd Out, “SEcuriTy iS hard,” And the PResencE of bugs anD uNIntendED behaviOR In SoftWare is one of the oldESt ANd most fundamenTal proBlEMs IN ComPutEr science. THeSe issUEs only bECoME MOre INtense as systeMs get compleX, GivIng risE tO an “ARms racE” betwEeN ThoSe who find anD fix VulnerabiLities IN softwaRE and thoSe who eXplOit Them.

aCcOrDinG tO blaZE, tHe oNE brIght spot Is ThE incrEasiNG DEPloyMenT of eNcrypTion to protect SenSitiVE daTa, but These EncrYpTion mEchaniSms reMaIn “fragile.” ImplemEntiNg encryptIon At ScaLe RemaiNS an incRedIblY compleX engineERinG tASK. blAze said that computeR sCIEnTists “barEly havE ThEiR Heads aboVe WatEr;” anD PRoposAls tHAt Would manDate laW EnFoRcement AcCess to EnCryPteD data WOuld EffectIvely takE away ONe of the very few TOols for managiNG tHE SeCUritY of InfrastructUre tHAt ouR couNTrY haS Come tO depeNd ON. THEse proposals make the SyStem moRe comPlex and drastiCally increASE The surfaCe foR OuTSide attackers.

BLaze nOted the CLEar key escrOw sysTem put foRth by formER microsofT CTo RaY OzZie RECeNtly written up IN wireD oNly coveRs a CryptogRapHic ProTocOl—“The easy paRt”—which iTsElF hAs AlrEady bEEn demonsTrAteD tO be FlaweD. even if Those FlawS cOuLD be SatisfaCToRILy adDrEsSed, iT woUlD stilL leaVE thE enormoUs difficuLty OF devElOpIng and iMplementing it In Complex sysTeMs. SUrmounTINg these cHallenges, Blaze said, would REquire a BreAkthrOugh So momentoUs tHat wouLd iT Lead to The creAtion Of A NoBEL PrizE IN cOmpUtEr science jUST so It couLd Be adEquatelY recognized.

ProfessOR LaNdau began her rEmaRks bY POiNtiNG oUT thAt THis WAS not at all a new deBate. And she NoTEd That ProfesSOr BLaZe was onE of the tEchniCAl experTs who brokE the NSA’s CLiPper cHIp pRoposal of tHe 1990s. And keY escrow, as IT was dEScRibed By tHe ClipPeR ChIp, reaLly isn’T MucH diffErent fRoM moderN callS fOr extraoRdinary access. Turning to tHe most CurreNt kEy escrow pRopOSal, ozzie’s CLEaR, PrOfessor LanDau NotEd thaT thE Way crYpto ALgOriTHms geT buiLT is by exhaUStIve PEEr Review. HowevER, clEAr had iTs mOSt publIc prEsentation in Wired mAgazine and has yEt to BE SubJecTEd to RiGorous peer reviEw, eVeN THough onlY a Tiny portion Of the sysTeMS probLem thaT “excepTional aCCEsS” PresenTs arE acTually addResSeD By CLEAR, AnD tHE propoSal hAs AlreadY been
 called an undeniable “cyb ersecurity  cris is”  gr ip ping  the  critical info r mati on systems we all rely  on.Fa i lure s  a nd da ta brea c he s are  a  d ail yo cc urren cethat on ly come to  th epublic’s att e nt ion when t hey  reach the c ata stroph ic  sc a le of  th e Equ ifax b r each.As Blazepo i nted o u t, “sec u r it y is  hard,” and the p r es e nce of bugs an d unin te n de d beh avi or in soft wa re is one oft he o l des t  and most fun damental pr o ble ms inco mpu t er sci ence.  T h ese  issues onl y be come more  inten s e as sy s tems ge t comp lex , g ivin g  r is e t oa n “ a rm s r a ce”  between  t ho se wh o fi n d a nd f ixvuln erabi lities in sof twa re a n d t hosewho e xplo it  them .

Acc ordin gto Blaze, the o ne b right spo t i sthe  i ncrea s ing de plo yme nt of e ncrypti o n t op r o te ct sensitive data,  b u t  t hese enc ryptio n  m ec h anisms r em ain  “fr a g ile.”  Imp l em enting e ncrypt i on  a t scale  r emains  a n i ncr edibl y  com plex e ngineeri ng ta s k. Blaze saidt hat computers ci e n ti s ts “ bar ely have th eirh eads  abo v ewat e r;” a nd pr op o sa l s that would mandat elaw en force ment access t o encrypte d d ata woul d ef f ec t ively take awa y one  of the ve r y few to ols f or manag ing the s e c urity of  in fra str uct u r ethat our coun t r y ha scome to  de pend on . T hes e p rop os als makethe syst em  m or ecom plexa nd drast ic all yinc rease the su rface  for  o ut s ide  attack e rs . 
Bla ze  n oted  th eCLEAR  key esc row sys tem put f ort h  byfo rm er Micr osoft CTO Ray  O zzie recen tl y w ritten u p in Wir ed only covers a crypto g raphicpro tocol —“th e easy pa rt” —which  it s elf ha s alre ady b ee n d e m onstr a t ed  to  b e flawed.E v enif th os e fl aws cou ld be satisfactori l y a ddressed, itwou ld s t i ll  le a ve the  e n orm o u s difficulty of  developin ga nd  implement i ngit  in com plex sy stems .  Surmou nting the se challe ng es,B l aze  said, wou ld requi re a brea k throu g hso mo men tous t ha t w ouldit lea d  to  thecreati on  of aNobel  P rize incomputer science just s o it c ouldbeadequatel y r e cog nized.

P rofe ssor Landa u b ega n her  re m arksby p o in tin g  outthat this wasn ot  at a ll  a new deba t e .  An d she  no t ed tha t Pr ofessor Blaze was one of the tec hnic a l  ex per t s wh obroke the NSA’ s C li p p er Chippr oposal of t he 1990s .A nd ke y escr ow, as  it was d es c ribedby t heClipper C hip ,r eally i sn ’t much d iffe re nt fro m mode r n ca l l s for extraordin ary a c c ess.T urn ing t othe mos t  cur rent key e scrow propo sal, O zzie ’s CL EAR, Pr of essorLan da u noted th a t the way  cryp to algo ri thms  ge t buil t is b y exh aust iv e p eer revie w .  H o we ve r , C LEAR  hadit s mo st public presenta tio n  in Wir ed  Ma g a zine a n dh a s yet to b e s ubjec t e d to rigor o us p e er revie w, eve n thou gh only a t in y porti ono f  the syst ems probl e m t ha t “e xception al  acc es s”pr esents are actu ally add ressed b y CLEAR,  an d  the propos al  has already  been 
 called_an undeniable_“cybersecurity crisis” gripping the_critical information_systems_we all_rely_on. Failures and_data breaches are_a daily occurrence that_only come to_the_public’s attention when they reach the catastrophic scale of the Equifax breach. As Blaze_pointed_out, “security_is_hard,”_and the presence of bugs_and unintended behavior in software_is one_of the oldest and most fundamental problems in_computer_science. These issues_only become more intense as systems get complex, giving_rise to an “arms race” between_those who find_and_fix_vulnerabilities in software and_those who exploit them.

According to Blaze,_the one bright spot is the_increasing deployment of encryption to protect sensitive_data, but these encryption mechanisms remain_“fragile.” Implementing encryption at scale_remains an_incredibly complex engineering task. Blaze_said that computer_scientists “barely_have their heads_above water;” and proposals that would_mandate law enforcement_access to encrypted data would effectively_take_away one of_the_very_few tools_for managing the_security_of infrastructure_that_our country has come to depend_on._These proposals make the system more complex_and drastically increase the_surface_for outside attackers.

Blaze noted_the CLEAR key escrow system_put forth by former Microsoft CTO_Ray Ozzie_recently written_up in Wired only covers a cryptographic protocol—“the easy part”—which itself_has already been demonstrated to be_flawed. Even if those_flaws could_be_satisfactorily addressed, it_would_still leave_the enormous difficulty of developing and implementing_it in_complex systems. Surmounting these challenges, Blaze_said, would require a_breakthrough_so momentous that would it lead_to the creation of a Nobel_Prize in computer science just_so_it_could be adequately recognized.

Professor Landau_began her remarks by pointing out_that this was_not at all a new debate. And_she_noted that Professor Blaze was one_of_the technical experts who broke the_NSA’s_Clipper_Chip proposal of the 1990s._And key escrow, as it was_described by the Clipper Chip, really isn’t much different_from modern calls_for extraordinary access. Turning to_the_most_current key escrow proposal, Ozzie’s CLEAR, Professor Landau noted that_the way_crypto algorithms get_built is by exhaustive peer review. However, CLEAR had its_most public presentation in Wired Magazine and_has yet to be subjected to rigorous peer review, even though_only a tiny portion of the systems problem_that “exceptional access” presents are actually addressed_by CLEAR, and the_proposal_has already been