Re: [cryptography] RC4 is dangerous in ways not yet known - heads up on near injection WPA2 downgrade to TKIP RC4

2014-09-21 Thread nymble
is TKIP. Unclear that you know what you are saying …. nymble if you find one i'd like to know about it! if you ever see a device+router pair that used to speak AES-CCMP over WPA2 suddenly using TKIP you are under active attack. finally, i mention advanced attacker because utilizing

Re: [cryptography] Request - PKI/CA History Lesson

2014-04-29 Thread nymble
I suspect our current X.509 PKI was invented at Xerox … likely PARC. The first X.509 draft was a Xerox contribution in about 1984. I have it somewhere in my garage… Paul On Apr 29, 2014, at 1:45 PM, Greg g...@kinostudios.com wrote: On Apr 29, 2014, at 1:18 PM, ianG i...@iang.org

Re: [cryptography] Request - PKI/CA History Lesson

2014-04-29 Thread nymble
On Apr 29, 2014, at 12:28 PM, Thierry Moreau thierry.mor...@connotech.com wrote: On 2014-04-29 18:18, ianG wrote: On 29/04/2014 19:02 pm, Greg wrote: I'm looking for a date that I could point to and call the birth of modern HTTPS/PKI. There is the Loren M Kohnfelder thesis from May of

Re: [cryptography] ECC patent FUD revisited

2014-01-05 Thread nymble
On Jan 5, 2014, at 1:36 AM, D. J. Bernstein d...@cr.yp.to wrote: NSA's Kevin Igoe writes, on the semi-moderated c...@irtf.org list: Certicom has granted permission to the IETF to use the NIST curves, and at least two of these, P256 and P384, have p = 3 mod 4. Not being a patent lawyer, I