Are the recent corporate data breaches an indication of the weakness of encryption algorithms or poor practice?

With many organisations recently suffering from data breaches of its email lists, and the likes of Sony, ACS:Law and most recently Square Enix losing much more sensitive data, it raises the question as to how this has happened.

Is it a problem with the security common algorithms (eg RC4 with 128 bit keys) compared to modern computers? Should a higher minimum key strength be employed?

Have some hackers (whether criminal or more benign) have the upperhand in finding non-obvious weaknesses in common algorithms?

Or, is it simply a case of lazyness/incompetence on the corporate side, using cheaper, less secure methods?

James

Posted 2011-05-14T12:58:10.793

Reputation: 1 171

1This is really a too broad question to answer. Every company has their own security guidelines and every implementation is different. The problem is probably not security algorithms but very specific exploits depending on the system attacked. – slhck – 2011-05-14T13:25:27.417

@slhck Hmm, thought it might be. Was mainly wondering about whether or not it is a problem of encryption strength, but tried to frame in a rounded way. Edit, delete or CW? – James – 2011-05-14T13:28:20.063

Are the recent corporate data breaches an indication of the weakness of encryption algorithms or poor practice?

Answers