Re: AES-128 keys unique for fixed plaintext/ciphertext pair?

2003-02-20 Thread Anton Stiglic
> The statement was for a plaintext/ciphertext pair, not for a random-bit/ > random-bit pair. Thus, if we model it terms of a bijection on random-bit > pairs, we confuse the different statistics for plaintext, ciphertext, keys and > we include non-AES bijections. While your reformulation of the p

[mnet-devel] [Fwd: Re: Lucrative update]

2003-02-20 Thread R. A. Hettinga
--- begin forwarded text Status: RO From: icepick <[EMAIL PROTECTED]> To: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]> Organization: Subject: [mnet-devel] [Fwd: Re: Lucrative update] Sender: [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] Date: 18 Feb 2003 21:07:13 -0500 -Forwarded Message-

Re: AES-128 keys unique for fixed plaintext/ciphertext pair?

2003-02-20 Thread Ed Gerck
Anton Stiglic wrote: > > The statement was for a plaintext/ciphertext pair, not for a random-bit/ > > random-bit pair. Thus, if we model it terms of a bijection on random-bit > > pairs, we confuse the different statistics for plaintext, ciphertext, keys > and > > we include non-AES bijections. >

Peppercoin gets some press

2003-02-20 Thread R. A. Hettinga
http://www.boston.com/dailyglobe2/048/business/Solving_the_problem_of_micropaymentsP.shtml I *stIll* think they should sell it to PayPal... Strong identity to catch the check-bouncers, and all that. Cheers, RAH --- Boston Globe Online UPGRADE Solving the problem of micropayments By Hiaw

[Bodo Moeller ] OpenSSL Security Advisory: Timing-based attacks on SSL/TLS with CBC encryption

2003-02-20 Thread Perry E. Metzger
FYI --- Begin Message --- OpenSSL Security Advisory [19 February 2003] Timing-based attacks on SSL/TLS with CBC encryption === CONTENTS - Vulnerability - Source code patch [*] - Acknowledgement - References [*] OpenSSL 0.9.6i and OpenSSL 0.

[Robert Moskowitz ] Of potential interest -- Citibank tries to gag crypto bug disclosure

2003-02-20 Thread Perry E. Metzger
Forwarded from the SAAG list, where it was posted by Bob Moskowitz. >To: [EMAIL PROTECTED] >Subject: Citibank tries to gag crypto bug disclosure >Date: Thu, 20 Feb 2003 09:57:34 + >From: Ross Anderson <[EMAIL PROTECTED]> > > >Citibank is trying to get an order in the High Court today g

Re: [Bodo Moeller ] OpenSSL Security Advisory: Timing-based attacks on SSL/TLS with CBC encryption

2003-02-20 Thread Eric Rescorla
Here's a fairly detailed description of how the attack works. You can also find a writeup by the authors at: http://lasecwww.epfl.ch/memo_ssl.shtml EXECUTIVE SUMMARY This is a potentially serious attack for automated systems that rely on passwords. Effectively, it potentially allows the attacker

Re: Swiss Researchers Find A Hole In SSL

2003-02-20 Thread Vin McLellan
Slashdot has posted an update and an informative note from Paul Kocher. _Vin -- Posted by timothy on Thursday February 20, @03:13PM from the there's-holes-in-everything-over-there dept. in4mation writes "The fo

Swiss Researchers Find A Hole In SSL

2003-02-20 Thread Steve Schear
http://slashdot.org/articles/03/02/20/1956229.shtml?tid=93&tid=172 - The Cryptography Mailing List Unsubscribe by sending "unsubscribe cryptography" to [EMAIL PROTECTED]