Home > Security Tips > Guest Commentary > Math phobia
Security Tips:
EMAIL THIS
 TIPS & NEWSLETTERS TOPICS 

GUEST COMMENTARY

Math phobia


Edmund X. DeJesus, Contributing Writer
09.27.2004
Rating: --- (out of 5)


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   


Recent stories in the press about potential mathematics breakthroughs are frightening computer security officers. The gist of these stories is that "imminent" advances in mathematics would allegedly make it possible to crack encryption schemes based on the difficulty of factoring humongous numbers -- like RSA. This would destroy the primary methods of protecting passwords, virtual private networks and Internet-based secure transactions. It's the end of the world as we know it. Again.

However, there are good reasons for taking these stories with a grain of salt, due to the nature of mathematical research, the time involved and the difference between pure and applied mathematics.

P vs. NP and the Riemann zeta function problem are the two areas of mathematics mentioned most often in this regard. Real mathematicians will froth at the mouth as I describe these problems, because my descriptions lack mathematical rigor. So, real mathematicians, just do some deep breathing exercises for a moment.

The P versus NP problem involves the inherent difficulty of certain mathematical questions -- often those that have to do with optimization, such as the most efficient route for a delivery truck. No algorithm can solve such questions -- brute force guessing may eventually reveal a solution. Discovering the prime factors of huge numbers -- the basis of encryption schemes like RSA -- is a NP question. The news: NP problems really aren't as hard as we thought.

The Riemann zeta function is intimately related to the distribution of prime numbers, which are notorious for being whimsically distributed. Since the Riemann zeta function is related to the distribution of prime numbers, it can help narrow down the search for prime numbers, and thus speed up the search.

Still, keep in mind that mathematicians can consider a solution to be merely that an answer to a given question exists -- not what that answer might be or how to find it. A purely mathematical solution to these problems may be far from useful.

Also, consider that some of these problems have been known for centuries and, while progress has been made, they still haven't been solved. So, when mathematicians talk about a breakthrough, it does not mean a solution is looming. The solution might be found tomorrow -- or a century from now -- or never. There's no way to tell, so why worry about something that may be decades away?

Finally, the gulf between pure and applied mathematics is vast. Even if some genius announced tomorrow that an algorithm for finding factors of humongous numbers was possible, that wouldn't advance the search for that algorithm one nanometer. It's like an engineer announcing that it's possible to bridge a certain river: you wouldn't want to immediately drive up to the bank of the river and wait. Building that bridge will take time.

The bottom line is simple. Don't let announcements about possible mathematical breakthroughs throw you. They might take years to crack, their application to reality is iffy and any uses will take years to develop. Remember: Math is our friend.

About the author
Edmund X. DeJesus has degrees in mathematics and theoretical physics. He has worked on cryptographic solutions for Baltimore Technologies and has written extensively on encryption, mathematics and other technical topics.

Have an opinion on this article? E-mail your letters to Shawna McAlearney and include your name, title and organization. Letters may be edited for space and clarity.

Rate this Tip
To rate tips, you must be a member of SearchSecurity.com.
Register now to start rating these tips. Log in if you are already a member.




BROWSE BY TAG
Application and Platform Security,   Email Security Guidelines, Encryption and Appliances,   Email Protection,   Guest Commentary,   VIEW ALL TAGS

Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   



RELATED CONTENT
Email Security Guidelines, Encryption and Appliances
Information security book excerpts and reviews
How to confirm the receipt of an email with security protocols
Best Email Security Products
Can an IP spoofing tool be used to spam SPF servers?
WatchGuard acquires email and Web security vendor BorderWare
McAfee to acquire email SaaS vendor MX Logic
What does 'invoked by uid 78' mean?
How to configure firewall ports for webmail system implementation
Fierce competition prompted new Cisco email security options
Cisco brings email security appliances closer to SaaS

Guest Commentary
Google hacking exposes a world of security flaws
Eliminating the threat of spam email attacks
Outsourcing IT services: Is it worth the security risk?
How permanent is your storage solution?
Honeypots can strengthen reconnaissance and lower intrusion noise
Freedom of speech or lack of professional responsibility?
This year compliance, next year control
Senior security member explains his position on Abagnale
Computer Security Institute's leader responds to Abagnale flap
Spokesman or poster child?

RELATED GLOSSARY TERMS
Terms from Whatis.com − the technology online dictionary
asymmetric cryptography  (SearchSecurity.com)
challenge-response system  (SearchSecurity.com)
cryptographic checksum  (SearchSecurity.com)
data encryption/decryption IC  (SearchSecurity.com)
elliptical curve cryptography  (SearchSecurity.com)
Escrowed Encryption Standard  (SearchSecurity.com)
MPPE  (SearchSecurity.com)
Quiz: Cryptography  (SearchSecurity.com)
session key  (SearchSecurity.com)
Twofish  (SearchSecurity.com)

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary

DISCLAIMER: Our Tips Exchange is a forum for you to share technical advice and expertise with your peers and to learn from other enterprise IT professionals. TechTarget provides the infrastructure to facilitate this sharing of information. However, we cannot guarantee the accuracy or validity of the material submitted. You agree that your use of the Ask The Expert services and your reliance on any questions, answers, information or other materials received through this Web site is at your own risk.



Research Solutions for Network Security, Access Control and Security Threats
TechTarget Security Media
Information Security View this month\\'s issue and subscribe today.
Information Security Decisions Apply online for free conference admission.
SearchSecurity.com
HomeNewsMagazineMultimediaWhite PapersLearningAdviceTopicsEventsAbout Us

About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Site Map




All Rights Reserved, Copyright 2003 - 2010, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts