Re: It's a Presidential Mandate, Feds use it. How come you are not using FDE?

2007-01-20 Thread Peter Gutmann
Victor Duchovni [EMAIL PROTECTED] writes: It took reading the code to determine the following: - ASN.1 Strings extracted from X.509v3 certs are not validated for conformance with the declared character syntax. Strings of type PrintableString or IA5String may hold non-printable or

Re: It's a Presidential Mandate, Feds use it. How come you are not using FDE?

2007-01-20 Thread Jonathan Thornburg
On Fri, 19 Jan 2007, Bill Stewart wrote: Obviously if you're trying to protect against KGB-skilled attacks on stolen/confiscated hardware, you'd like to have the swap partition encrypted as well as any user data partitions, though you may not care whether your read-only utility software was

Re: It's a Presidential Mandate, Feds use it. How come you are not using FDE?

2007-01-20 Thread Victor Duchovni
On Sat, Jan 20, 2007 at 10:10:47PM +1300, Peter Gutmann wrote: Victor Duchovni [EMAIL PROTECTED] writes: It took reading the code to determine the following: - ASN.1 Strings extracted from X.509v3 certs are not validated for conformance with the declared character syntax. Strings

Re: Private Key Generation from Passwords/phrases

2007-01-20 Thread Travis H.
On Fri, Jan 19, 2007 at 12:11:40AM -0800, Bill Stewart wrote: One of the roots of the problem is that for many applications, i is a well-defined event and P(i) is a fixed value (for i) , but for many other applications, i might not be a well-defined event, and/or P(i) is really a conditional

MS responds to Gutmann's Vista paper

2007-01-20 Thread Ivan Krstić
Aside from admitting to increased CPU utilization, which seemed pretty incontestable anyway, they're disputing [0] many of the points made in the original paper [1]. Ignoring the hand-wavy arguments, I find most interesting their claims that a) there will be no move away from unified drivers, b)

MS responds to Gutmann's Vista paper

2007-01-20 Thread Ivan Krstić
[Perry -- had a clause in there that made no sense; I shouldn't send mail minutes after waking up. Please discard previous mail and send along this one.] [Moderator's note: Too late, sorry. --Perry] Aside from admitting to increased CPU utilization, which seemed pretty incontestable anyway,