- Sept 11: Original disclosure
- Sept 11: Community skepticism
- Sept 12: Claim retracted: [announcement] [press]
“All sectors can still sleep quietly tonight,” said CEO Mike Wallace. “Preliminary results in this cryptanalytic research led us to believe we were successful, but this flaw finally proved otherwise.”
The new claim makes no sense at all—a retraction of an earlier claim about a discovery by a crack team of research scientists (pun intended). The clues offered in the original claim, which was issued just one day earlier, cast suspicion on the retraction. Something fishy is going on here. Who pressured DuPont into making the retraction—and for what purpose? Something smells rotten in Denmark!
- A wall street, financial services firm proudly announces the solution to a de facto contest in math and logic
- They succeeded in this achievement a year ago, but kept it secret until this week
- One day later (with no challenge by outsiders),* they announce a flaw in the year-old solution
Waitacottenpickensec, Mr. DuPont!! The flaw (an ‘equipment issue’) was discovered a year after this equipment was configured and used—but only one day after you finally decide to disclose the discovery? Poppycock!
I am not given to conspiracy theories (a faked moon landing, suppressing perpetual motion technology, autism & vaccinations, etc)—But I recognize government pressure when I see it! Someone with guns and persuasion convinced DuPont to rescind the claim and point to a silly experimental error.
Consider the fallout, if SHA-256 were to suddenly lose public confidence…
- A broken SHA-256 would wreak havoc on an entrenched market. SHA-256 is a foundational element in the encryption used by consumers & business
- But for government, disclosing a crack to a ubiquitous standard that they previously discovered (or designed) would destroy a covert surveillance mechanism—because the market would move quickly to replace the compromised methodology.