Crisis and Opportunity in Key Management: 2001 to 2031

Presented at ToorCon San Diego 13 (2011), Oct. 9, 2011, 3:30 p.m. (20 minutes)

Unlike other kinds of security, old cryptography can be attacked merely if any of old encrypted data exists. Destruction all data, even encrypted can be difficult, or even impossible. When cryptography is the only security control, data destruction cannot be guaranteed and may not even be possible. This presentation discusses these issues and proposes solutions.


  • Anthony J. Stieber
    Anthony J. Stieber has worked in academia, banks, retail, & insurance; designed enterprise security architectures, installed military & commercial firewalls; engineered medical diagnostic systems; reverse-engineered Internet stores; encrypted terabyte data warehouses; provided expertise for court cases; spoken at international cryptography conferences; and became an apprentice locksmith & a published writer.