Re: [Cryptography] Snowden fabricated digital keys to get access to NSA servers?

2013-07-04 Thread Phillip Hallam-Baker
I think that fabricating a key here is more likely to mean fabricating an authentication 'key' rather than an encryption key. Alexander is talking to Congress and is deliberately being less than precise. So I would think in terms of application level vulnerabilities in Web based document servers.

Re: [Cryptography] Snowden fabricated digital keys to get access to NSA servers?

2013-07-04 Thread Russ Nelson
John Denker writes: It is against NSA policy to attach a thumb drive. I betcha some folks really want to know how he did that without getting caught. Take a mouse. Remove its own electronics. Substitute a Teensy 2 which emulates a mouse AND a thumb drive, but only after a certain combination

Re: [Cryptography] Snowden fabricated digital keys to get access to NSA servers?

2013-07-04 Thread Damien Miller
On Sat, 29 Jun 2013, Alec Muffett wrote: My own, personal guess is that it is obfuscation which translates as using passwords or accessing a portal over SSL plus we're too embarrassed to admit that it was that easy. Or simply: http://cms.intranet.boozallen.com/document?id=${N}

Re: [Cryptography] Snowden fabricated digital keys to get access to NSA servers?

2013-07-04 Thread StealthMonger
John Gilmore g...@toad.com writes: [John here. Let's try some speculation about what this phrase, fabricating digital keys, might mean.] John John's question is not the only one raised by this episode. Eli Lake: Glenn Greenwald, the Guardian journalist who Snowden first contacted

Re: [Cryptography] Snowden fabricated digital keys to get access to NSA servers?

2013-07-04 Thread Florian Weimer
* John Gilmore: [John here. Let's try some speculation about what this phrase, fabricating digital keys, might mean.] Most likely, as part of his job at the contractor, he had administrator access to a system which was used for key management, perhaps to apply security updates, manage backups

Re: [Cryptography] Snowden fabricated digital keys to get access to NSA servers?

2013-07-04 Thread Phillip Hallam-Baker
I read an article today that claims one and a half million people have a Top Secret clearance. That kind of demonstrates how little Top Secret now means. On Sun, Jun 30, 2013 at 2:16 PM, Florian Weimer f...@deneb.enyo.de wrote: * John Gilmore: [John here. Let's try some speculation about

Re: [Cryptography] Snowden fabricated digital keys to get access to NSA servers?

2013-07-04 Thread Richard Salz
How could it be arranged that if anything happens at all to Edward Snowden, he told me he has arranged for them to get access to the full archives? A lawyer or other (paid) confidant was given instructions that would disclose the key. Do this if something happens to me. It doesn't have to be

Re: [Cryptography] Snowden fabricated digital keys to get access to NSA servers?

2013-07-04 Thread Aaron Zauner
Wow. First appearance on this list. Somewhat lame though, just dropping of a link. On Thu, Jul 4, 2013 at 8:47 PM, Phillip Hallam-Baker hal...@gmail.comwrote: I read an article today that claims one and a half million people have a Top Secret clearance.

Re: [Cryptography] Snowden fabricated digital keys to get access to NSA servers?

2013-06-29 Thread John Denker
On 06/28/2013 04:00 PM, John Gilmore wrote: Let's try some speculation about what this phrase, fabricating digital keys, might mean. Here's one hypothesis to consider. a) The so-called digital key was not any sort of decryption key. b) The files were available on the NSA machines in the

Re: [Cryptography] Snowden fabricated digital keys to get access to NSA servers?

2013-06-29 Thread Ray Dillinger
On 06/28/2013 09:36 PM, Udhay Shankar N wrote: On Sat, Jun 29, 2013 at 4:30 AM, John Gilmoreg...@toad.com wrote: [John here. Let's try some speculation about what this phrase, fabricating digital keys, might mean.] Perhaps something conceptually similar to PGP's Additional Decryption Key

Re: [Cryptography] Snowden fabricated digital keys to get access to NSA servers?

2013-06-29 Thread Alec Muffett
[John here. Let's try some speculation about what this phrase, fabricating digital keys, might mean.] My own, personal guess is that it is obfuscation which translates as using passwords or accessing a portal over SSL plus we're too embarrassed to admit that it was that easy. --

[Cryptography] Snowden fabricated digital keys to get access to NSA servers?

2013-06-28 Thread John Gilmore
http://www.thedailybeast.com/articles/2013/06/25/greenwald-snowden-s-files-are-out-there-if-anything-happens-to-him.html The Daily Beast Greenwald: Snowden's Files Are Out There if 'Anything Happens' to Him by Eli Lake Jun 25, 2013 1:36 PM EDT Snowden has shared encoded copies of all the

Re: [Cryptography] Snowden fabricated digital keys to get access to NSA servers?

2013-06-28 Thread Udhay Shankar N
On Sat, Jun 29, 2013 at 4:30 AM, John Gilmore g...@toad.com wrote: [John here. Let's try some speculation about what this phrase, fabricating digital keys, might mean.] Perhaps something conceptually similar to PGP's Additional Decryption Key [1]? If the infrastructure is in place for this,