Problems with the NHS Cryptography Strategy

Ross Anderson

Cambridge University Computer Laboratory

This document was the BMA's response to a report on The use of encryption and related services with NHSnet. It is also available as pdf.

• Executive Summary
• Threat Model
• Trust Structure
• Cost Estimates
• Key Escrow
• Order of introducing encryption and signature
• Strength of Encryption Mechanisms
  • Capability of attackers
  • Nature of attackers
  • Cover time
  • Cost of strong mechanisms
  • Confidence in mechanisms
• Protocol Problems
• Other Credibility Problems
  • Reasons for algorithm choice
  • Technical and other errors
• What is the IMG strategy for?
• Conclusion
• References
• About this document ...