Re: History and definition of the term 'principal'?

2006-04-29 Thread Florian Weimer
* Hadmut Danisch: The only precise definition I found is in a law dictionary where it is defined as a legal term. The OED might also be helpful: B. [...] 2. a. A chief actor or doer; the chief person engaged in some transaction or function, esp. in relation to one employed by or acting

Re: History and definition of the term 'principal'?

2006-04-27 Thread dan
I was manager of development for Project Athena beginning in 1985. Amongst our projects was Kerberos, and, as you know, it was a direct implementation of Needham-Schroeder. Schroeder had been Jerome Saltzer's Ph.D. student and Saltzer was the MIT faculty member in charge of the technical side

Re: History and definition of the term 'principal'?

2006-04-27 Thread Ed Gerck
tmcghan quoted: SDSI's active agents (principals) are keys: specifically, the private keys that sign statements. We identify a principal with the corresponding verification (public) key... Calling a key a principal (and saying that a key speaks) is just a poetic language used in SDSI/SPKI.

Re: History and definition of the term 'principal'?

2006-04-26 Thread Sean W. Smith
I like the definition in Kaufman-Perlman-Speciner: A completely generic term used by the security community to include both people and computer systems. Coined because it is more dignified than 'thingy' and because 'object' and 'entity' (which also means thingy) were already overused.

Re: History and definition of the term 'principal'?

2006-04-26 Thread Hadmut Danisch
Hi, On Wed, Apr 26, 2006 at 03:18:40PM -0400, Sean W. Smith wrote: I like the definition in Kaufman-Perlman-Speciner: A completely generic term used by the security community to include both people and computer systems. Coined because it is more dignified than 'thingy' and because

Re: History and definition of the term 'principal'?

2006-04-26 Thread Victor Duchovni
On Wed, Apr 26, 2006 at 06:33:43PM +0200, Hadmut Danisch wrote: Some say a principal is someone who participates in a cryptographical protocol. The way I see it, the common English sense is direct participant, not a third party. During TGS requests the Kerberos KDC is a *principal* in the TGS

RE: History and definition of the term 'principal'?

2006-04-26 Thread tmcghan
from: http://theory.lcs.mit.edu/~rivest/publications.html Perspectives on Financial Cryptography (Revisited) by Ronald L. Rivest. Financial Cryptography '06 Conference Keynote. (Update of talk given for Financial Cryptography '97) PowerPoint presentation excerpt follows: SDSI's active agents

Re: History and definition of the term 'principal'?

2006-04-26 Thread Anne Lynn Wheeler
Victor Duchovni wrote: So with Kerberos the word hasW its narrower named security entity technical meaning. With X.509 one tends to talk of subjects, issuers, registration authorities, certification authorities, ... and the word principal is less common. part of this has been that x.509 has

Re: History and definition of the term 'principal'?

2006-04-26 Thread Steven M. Bellovin
On Wed, 26 Apr 2006 18:33:43 +0200, Hadmut Danisch [EMAIL PROTECTED] wrote: I need to solve a dispute. Someone claims, that 'principal' is an established 'concept' introduced by Roger Needhams, but could not give any citation. Someone else confirms this and claims, that 'principal' is

Re: History and definition of the term 'principal'?

2006-04-26 Thread Sean W. Smith
Are there different editions of Kaufman-Perlman-Speciner ? I got that definition from the glossary in the 2nd edition. I'm pretty sure it was in the glossary in the first edition as well, but I can't seem to find my copy anymore!