Book Review

Hi Folks, Does anyone have a review on the upcoming book Modern Cryptanalysis: Techniques for Advanced Code Breaking by Christopher Swenson? Thanks, Aram Perez - The Cryptography Mailing List Unsubscribe by sending unsubscribe

Re: Dutch Transport Card Broken

by the reader. Regards, Aram Perez - The Cryptography Mailing List Unsubscribe by sending unsubscribe cryptography to [EMAIL PROTECTED]

Re: OK, shall we savage another security solution?

Hi Jerry, On Tuesday, September 18, 2007, at 07:24PM, Leichter, Jerry [EMAIL PROTECTED] wrote: Anyone know anything about the Yoggie Pico (www.yoggie.com)? It claims to do much more than the Ironkey, though the language is a bit less marketing-speak. On the other hand, once I got through the

Re: flavors of reptile lubricant, was Another Snake Oil Candidate

extend Unbreakability (normally applied to software, but IronKey claims the epoxy prevents criminals from getting to the internal hardware components). Respectfully, Aram Perez - The Cryptography Mailing List Unsubscribe

Re: Another Snake Oil Candidate

Hi Jon, On Sep 11, 2007, at 5:35 PM, Jon Callas wrote: I'm a beta-tester for it, and while I can understand a small twitch when they talk about miltary and beyond military levels of security, it is very cool. It has hardware encryption and will erase itself if there are too many

Another Snake Oil Candidate

The world's most secure USB Flash Drive: https://www.ironkey.com/demo. - The Cryptography Mailing List Unsubscribe by sending unsubscribe cryptography to [EMAIL PROTECTED]

Quantum Cryptography

Hi Folks, On a legal mailing list I'm on there is a bunch of emails on the perceived effects of quantum cryptography. Is there any authoritative literature/links that can help clear the confusion? Thanks in advance, Aram Perez

The best riddle you wil hear today...

http://farm1.static.flickr.com/191/480556169_6d731d2416_o.jpg - The Cryptography Mailing List Unsubscribe by sending unsubscribe cryptography to [EMAIL PROTECTED]

Re: More info in my AES128-CBC question

Hi Nico, On Apr 23, 2007, at 8:11 AM, Nicolas Williams wrote: On Sun, Apr 22, 2007 at 05:59:54PM -0700, Aram Perez wrote: No, there will be message integrity. For those of you asking, here's a high level overview of the protocol is as follows: [...] 3) Data needing confidentiality

Change of Heart WRT to a Fixed IV of 0's

Hi Folks, The latest version the document, where the use of a fixed IV of zeros was originally proposed, now has a regular random IV. Thanks for all the support, Aram Perez - The Cryptography Mailing List Unsubscribe

More info in my AES128-CBC question

. As I mentioned, the response to my question of why would we standardize this was that's how SD cards do it. I'll look at the references and hopefully convince enough people that it's a bad idea. Thanks again, Aram Perez

Interesting paper on PKI and TRUSTe

results for the same search terms. See http://www.benedelman.org/publications/advsel-trust-draft.pdf Enjoy, Aram Perez - The Cryptography Mailing List Unsubscribe by sending unsubscribe cryptography to [EMAIL PROTECTED]

Re: EMC is buying RSA

version of the story: http:// news.moneycentral.msn.com/ticker/article.asp?Feed=BWDate=20060629ID =5836046Symbol=US:RSAS Regards, Aram Perez - The Cryptography Mailing List Unsubscribe by sending unsubscribe cryptography

Re: Chinese WAPI protocol?

Hi Richard, I have not looked at WAPI, but they have been trying to get it approved for a number of years, check out http://en.wikipedia.org/wiki/WAPI (has link to algorithm) and http://www.foxnews.com/story/0,2933,199082,00.html. Regards, Aram Perez On Monday, June 12, 2006, at 03:25PM

Re: Chinese WAPI protocol?

Hi Folks, My apologies on stating that the Wiki page had a link to the algorithm. I saw the link but didn't click on it to see if in fact there was a description of the actual algorithm. Regards, Aram Perez On Monday, June 12, 2006, at 06:45PM, David Wagner [EMAIL PROTECTED] wrote: [snip

Why phishing works

I don't recall seeing this here, but a friend sent me the following link: http://people.deas.harvard.edu/~rachna/papers/ why_phishing_works.pdf Enjoy, Aram Perez - The Cryptography Mailing List Unsubscribe by sending

Re: passphrases with more than 160 bits of entropy

- 255 have maximum entropy but have no randomness (although there is finite probability that a RNG will produce the sequence). Regards, Aram Perez - The Cryptography Mailing List Unsubscribe by sending unsubscribe cryptography

Re: passphrases with more than 160 bits of entropy

On Mar 22, 2006, at 9:04 AM, Perry E. Metzger wrote: Aram Perez [EMAIL PROTECTED] writes: Entropy is a highly discussed unit of measure. And very often confused. Apparently. While you do want maximum entropy, maximum entropy is not sufficient. The sequence of the consecutive numbers 0

Entropy Definition (was Re: passphrases with more than 160 bits of entropy)

requested passphrases with more than 160 bits of entropy, what was he requesting? * Does processing an 8 character password with a process similar to PKCS#5 increase the entropy of the password? * Can you add or increase entropy? Thanks in advance, Aram Perez

Re: CD shredders, was Re: thoughts on one time pads

On Feb 1, 2006, at 3:50 AM, Travis H. wrote: On 1/28/06, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: In our office, we have a shredder that happily takes CDs and is designed to do so. It is noisy and cost $500. Here's one for $40, although it doesn't appear to shred them so much as make them

Re: X.509 / PKI, PGP, and IBE Secure Email Technologies

as a (million dollar) yacht. There is no such thing as one-size encryption system fits all cases. Regards, Aram Perez - The Cryptography Mailing List Unsubscribe by sending unsubscribe cryptography to [EMAIL PROTECTED]

Web Browser Developers Work Together on Security

Core KDE developer George Staikos recently hosted a meeting of the security developers from the leading web browsers. The aim was to come up with future plans to combat the security risks posed by phishing, ageing encryption ciphers and inconsistent SSL Certificate practise. Read on for

Another Skype Study

Don't recall seeing this on the list: http://www.ossir.org/windows/ supports/2005/2005-11-07/EADS-CCR_Fabrice_Skype.pdf Enjoy, Aram Perez - The Cryptography Mailing List Unsubscribe by sending unsubscribe cryptography

High-risk flaws in Skype

http://searchsecurity.techtarget.com/originalContent/ 0,289142,sid14_gci1136763,00.html?track=NL-102ad=530772 - The Cryptography Mailing List Unsubscribe by sending unsubscribe cryptography to [EMAIL PROTECTED]

Re: Motorist wins case after maths whizzes break speed camera code

, Aram Perez - The Cryptography Mailing List Unsubscribe by sending unsubscribe cryptography to [EMAIL PROTECTED]

Re: the limits of crypto and authentication

. The client-merchant protocol supported clients without certs. Respectfully, Aram Perez - The Cryptography Mailing List Unsubscribe by sending unsubscribe cryptography to [EMAIL PROTECTED]

Re: ID theft -- so what?

support./RANT-PET_PEEVE Respectfully, Aram Perez On Jul 14, 2005, at 6:19 AM, Perry E. Metzger wrote: Ian Grigg [EMAIL PROTECTED] writes: It's 2005, PKI doesn't work, the horse is dead. He's not proposing PKI, but nymous accounts. The account is the asset, the key is the owner; Actually, I

Re: the limits of crypto and authentication

installed on their PCs before selling a product? Or were you going to sell to anyone who used a web browser that supported SSL? It was very simple economics, even if you had to pay VeriSign $400 for your SSL certificate and pay Visa/MasterCard a higher fee. Respectfully, Aram Perez

Blowsearch Secured Messanger

sarcasmBSM must be very secure!/sarcasm Quote from the web site: Blowsearch Secured Messenger utilizes the OpenSSL library to provide encryption routines for your Instant Messages. We use a combination of randomly selected schemes and bit lengths, ranging up to 4096 bits, with additional

Re: Al Qaeda crypto reportedly fails the test

Hi Chris, Steven M. Bellovin writes: http://www.petitcolas.net/fabien/kerckhoffs/index.html for the actual articles.) Does there exist an English translation (I'd be surprised if not)? If not, I'd be happy to provide one if there were sufficient interest. I'd be interested in an English

Re: should you trust CAs? (Re: dual-use digital signature vulnerability)

Hi Adam, From: Adam Back [EMAIL PROTECTED] Date: Fri, 30 Jul 2004 17:54:56 -0400 To: Aram Perez [EMAIL PROTECTED] Cc: [EMAIL PROTECTED], Cryptography [EMAIL PROTECTED], Adam Back [EMAIL PROTECTED] Subject: Re: should you trust CAs? (Re: dual-use digital signature vulnerability) On Wed

Re: should you trust CAs? (Re: dual-use digital signature vulnerability)

. I can repeat this until I'm bankrupt and Verisign will gladly accept my money. I agree with Michael H. If you trust the CA to issue a cert, it's not that much more to trust them with generating the key pair. Respectfully, Aram Perez

Re: New Attack on Secure Browsing

go to there site, see http://www.yahoo.com or http://www.google.com. Maybe Jon can answer the question. Respectfully, Aram Perez - The Cryptography Mailing List Unsubscribe by sending unsubscribe cryptography to [EMAIL PROTECTED]

Re: identification + Re: authentication and authorization

by CitiBank. With high regards, Aram Perez [snip] - The Cryptography Mailing List Unsubscribe by sending unsubscribe cryptography to [EMAIL PROTECTED]