Re: Webcast of crypto rump session this year!

And for those who didn't catch this bit on the webcast (or in person): The Bletchley park trust wants to sell off the building that houses the Colossus rebuild and turn it in to housing. Another group, the Bletchley Park Heritage (run by, among others, the amazingly interesting Tony Sale) hopes

no visas for Chinese cryptologists

http://nytimes.com/2005/08/17/business/worldbusiness/17code.html Chinese Cryptologists Get Invitations to a U.S. Conference, but No Visas By JOHN MARKOFF Published: August 17, 2005 SAN FRANCISCO, Aug. 16 - Last year a Chinese mathematician, Xiaoyun Wang, shook up the insular world of code

How many wrongs do you need to make a right?

In the 1950s we had cheque blacklists, which were used in an attempt to manage bad cheques. They didn't work well, and were abandoned as soon as better mechanisms became available. In the 1960s and 70s we had credit card blacklists, which were used in an attempt to manage bad credit cards.

Re: no visas for Chinese cryptologists

* Udhay Shankar N.: http://nytimes.com/2005/08/17/business/worldbusiness/17code.html Chinese Cryptologists Get Invitations to a U.S. Conference, but No Visas Didn't something similar happen at the FIRST conference in Hawaii a couple of years ago? It's sad that it's going to happen again next

faster SHA-1 attacks?

I was unable to watch webcast of the rump session at the Crypto conference last night, but I have heard that a proxy announced that Wang has an order 2^63 attack on SHA-1. Can anyone confirm that, and give details? Perry - The

Re: faster SHA-1 attacks?

In message [EMAIL PROTECTED], Perry E. Metzger writes: I was unable to watch webcast of the rump session at the Crypto conference last night, but I have heard that a proxy announced that Wang has an order 2^63 attack on SHA-1. Can anyone confirm that, and give details? Shamir gave her rump

Re: How many wrongs do you need to make a right?

Florian Weimer wrote: Can't you strip the certificates which have expired from the CRL? (I know that with OpenPGP, you can't, but that's a different story.) Yes, you can. -- http://www.apache-ssl.org/ben.html http://www.thebunker.net/ There is no limit to what a man can do or how far

Re: How many wrongs do you need to make a right?

Not to defend PKI, but what about delta-CRLs? Maybe not available at time of the Navy deployment? But certainly meaning that people can download just changes since last update. Steven writes: [alternatives] such as simply publishing the hash of revoked certificates, Well presumably you mean

Re: How many wrongs do you need to make a right?

On Wed, 17 Aug 2005, Florian Weimer wrote: Can't you strip the certificates which have expired from the CRL? (I know that with OpenPGP, you can't, but that's a different story.) Probably, you want to save the signatures on the old lists, but I dont see why you can not download only delta of

Re: How many wrongs do you need to make a right?

Peter Gutmann wrote: In the 1950s we had cheque blacklists, which were used in an attempt to manage bad cheques. They didn't work well, and were abandoned as soon as better mechanisms became available. In the 1960s and 70s we had credit card blacklists, which were used in an attempt

Re: How many wrongs do you need to make a right?

In message [EMAIL PROTECTED], Florian Weimer writes: * Steven M. Bellovin: In message [EMAIL PROTECTED], Florian Weimer writes: Can't you strip the certificates which have expired from the CRL? (I know that with OpenPGP, you can't, but that's a different story.) OTOH, I wouldn't be concerned

Re: faster SHA-1 attacks?

Steven M. Bellovin wrote: Shamir gave her rump session talk (and first gave a humorous presentation on why she couldn't get a visa -- she admitted to attacking U.S. government systems, and used collisions). Isn't it strange that in the times when cryptography was considered a weapon it

Re: How many wrongs do you need to make a right?

as an aside, PKIs have attempted to moved into the no-value market segment. as internet and online have become more and more ubiquitous the original offline market segment for PKI has drastically dwindled ... i.e. a certification authority certifying information and freely distributing that

Re: no visas for Chinese cryptologists

On Aug 16, 2005, at 11:07 PM, Udhay Shankar N wrote: The visa snag angered organizers of the annual meeting of the International Cryptology Conference, who argued that restrictions originally created to prevent the transfer of advanced technologies from the United States are now having

Re: How many wrongs do you need to make a right?

Em Quarta 17 Agosto 2005 07:07, Peter Gutmann escreveu: Along the way, the military also has revoked 10 million certificates as personnel and network needs change. That huge certificate revocation list (CRL) - which has bloated to over 50M bytes in file size - is the crux of Don't these