Re: Bid on a SnakeOil Crypto Algorithm Patent

2007-10-05 Thread Dave Howe
Saqib Ali wrote: http://www.freepatentauction.com/patent.php?nb=950 googlepatent gives me: http://www.google.com/patents?id=HaN6EBAJdq=7,088,821 - The Cryptography Mailing List Unsubscribe by sending unsubscribe

Re: Seagate announces hardware FDE for laptop and desktop machines

2007-10-05 Thread Ivan Krstić
On Oct 3, 2007, at 4:39 AM, Florian Weimer wrote: But this exhibits an issue with disk-based encryption: you can't really know what they are doing, and if they are doing it right. (Given countless examples of badly-deployed cryptography, this isn't just paranoia, but a real concern.)

ECC vs. D/H or RSA

2007-10-05 Thread travis+ml-cryptography
Does anyone have information on: 1) The ECAES weakness that led to ECIES 2) Any known weaknesses of ECIES 3) Relative performance figures between ECC routines like ECIES and D/H (or possibly RSA, though IES is based on EC-DH) I can generate the last if these figures are not available. BTW, I

Retailers try to push data responsibilities back to banks

2007-10-05 Thread Leichter, Jerry
Retail group takes a swipe at PCI, puts card companies 'on notice' Jaikumar Vijayan October 04, 2007 (Computerworld) Simmering discontent within the retail industry over the payment card industry (PCI) data security standards erupted into the open this week with the National Retail Federation

Re: Seagate announces hardware FDE for laptop and desktop machines

2007-10-05 Thread Florian Weimer
* Ivan Krstić: On Oct 3, 2007, at 4:39 AM, Florian Weimer wrote: But this exhibits an issue with disk-based encryption: you can't really know what they are doing, and if they are doing it right. (Given countless examples of badly-deployed cryptography, this isn't just paranoia, but a real

Re: Bid on a SnakeOil Crypto Algorithm Patent

2007-10-05 Thread [EMAIL PROTECTED]
On 10/4/07, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: On 10/3/07, Saqib Ali [EMAIL PROTECTED] wrote: [SNIP] or both private keys but that never seems to get mentioned I take it back, there is only one private key but math makes multiple temporary public keys out of it. -Michael

Undocumented Bypass in PGP Whole Disk Encryption

2007-10-05 Thread travis+ml-cryptography
http://it.slashdot.org/article.pl?sid=07/10/04/1639224from=rss Interesting quote: Jon Callas, CTO and CSO of PGP Corp., responded that this [previously undocumented] feature was required by unnamed customers and that competing products have similar functionality. --

Re: Seagate announces hardware FDE for laptop and desktop machines

2007-10-05 Thread Ali, Saqib
I think the really interesting question is what happens when you lose a FDE-ed hard drive. Do you still need to publish the incident and contact potentially affected individuals? If the answer is no, I'm sure this technology will be quickly adopted, independently of its actual

Re: Retailers try to push data responsibilities back to banks

2007-10-05 Thread Jack Lloyd
On Thu, Oct 04, 2007 at 06:48:49PM -0400, Leichter, Jerry wrote: Prat Moghe, founder and CTO of Tizor Systems Inc., a Maynard, Mass.-based security firm, called the NRF's demand political posturing and said it would do little to improve retail security anytime soon. I think a lot of this is