Re: Formal notice given of rearrangement of deck chairs on RMS PKItanic

2010-10-07 Thread Peter Gutmann
Victor Duchovni victor.ducho...@morganstanley.com writes: What are EE certs, did you mean EV? End-entity certs, i.e. non-CA certs. This means that potentially after the end of this year and definitely after 2013 it will not be possible to use any key shorted than 2048 bits with Firefox.

Re: What if you had a very good entropy source, but only practical at crypto engine installation time?

2010-10-07 Thread Peter Gutmann
Thierry Moreau thierry.mor...@connotech.com writes: The PUDEC (Practical Use of Dice for Entropy Collection) scheme has been advanced. The new web page is at http://pudec.connotech.com Plus the PUDEC dice sets are now offered for sale. Hmm, they're somewhat expensive... a cheaper alternative,

Re: Formal notice given of rearrangement of deck chairs on RMS PKItanic

2010-10-07 Thread Peter Gutmann
Matt Crawford craw...@fnal.gov writes: EE = End Entity, but I don't read the first sentence the way Peter did. As I mentioned in my previous followup, it's badly worded, but the intent is to ban any keys 2K bits of any kind (currently with evolving weasel-words about letting CAs certify them

Re: English 19-year-old jailed for refusal to disclose decryption key

2010-10-07 Thread Christoph Gruber
Am 06.10.2010 um 22:57 schrieb Marsh Ray: On 10/06/2010 01:57 PM, Ray Dillinger wrote: a 19-year-old just got a 16-month jail sentence for his refusal to disclose the password that would have allowed investigators to see what was on his hard drive. I am thankful to not be an English

Re: Computer health certificate plan: Charney of DoJ/MS

2010-10-07 Thread John Gilmore
http://www.bbc.co.uk/news/technology-11483008 BBC reports that Microsoft's idea seems to be that if your computer doesn't present a valid health certificate to your ISP, then your ISP wouldn't let it be on the net, or would throttle it down to a tiny bandwidth. The Health Certificate would, of

Re: Computer health certificate plan indistinguishable from Denial Of Service attack.

2010-10-07 Thread Michael P. Soulier
On 06/10/10 Ray Dillinger said: It is hard to count the number of untestable and/or flat out wrong assumptions built into this idea, and harder still to enumerate all the ways it could go wrong. My wife runs Clamwin AV on her windows XP box and it's always complaining that she doesn't have

Re: Computer health certificate plan indistinguishable from Denial Of Service attack.

2010-10-07 Thread Kent Yoder
I'd love to know how they plan to validate my Linux boxes. OpenPTS [1] + TrouSerS [2] + Grub-IMA [3] + IMA [4] ;-) Kent [1] http://openpts.sourceforge.jp/ [2] http://trousers.sourceforge.net/ [3] http://sourceforge.jp/projects/openpts/wiki/GRUB-IMA [4] http://linux-ima.sourceforge.net/

Re: English 19-year-old jailed for refusal to disclose decryption key

2010-10-07 Thread Jerry Leichter
On Oct 7, 2010, at 4:14 AM, Christoph Gruber gr...@guru.at wrote: a 19-year-old just got a 16-month jail sentence for his refusal to disclose the password that would have allowed investigators to see what was on his hard drive. What about

Re: English 19-year-old jailed for refusal to disclose decryption key

2010-10-07 Thread Bernie Cosell
On 7 Oct 2010 at 12:05, Jerry Leichter wrote: On Oct 7, 2010, at 4:14 AM, Christoph Gruber gr...@guru.at wrote: a 19-year-old just got a 16-month jail sentence for his refusal to disclose the password that would have allowed investigators to see what was on his hard drive. What about

Re: Anyone know anything about the new ATT encrypted voice service?

2010-10-07 Thread Adam Shostack
On Wed, Oct 06, 2010 at 08:19:29PM -0400, Steven Bellovin wrote: | | On Oct 6, 2010, at 6:19 01PM, Perry E. Metzger wrote: | | ATT debuts a new encrypted voice service. Anyone know anything about | it? | | http://news.cnet.com/8301-13506_3-20018761-17.html | | (Hat tip to Jacob

Re: English 19-year-old jailed for refusal to disclose decryption key

2010-10-07 Thread Nicolas Williams
On Thu, Oct 07, 2010 at 01:10:12PM -0400, Bernie Cosell wrote: I think you're not getting the trick here: with truecrypt's plausible deniability hack you *CAN* give them the password and they *CAN* decrypt the file [or filesystem]. BUT: it is a double encryption setup. If you use one

Re: English 19-year-old jailed for refusal to disclose decryption key

2010-10-07 Thread Marsh Ray
On 10/07/2010 12:10 PM, Bernie Cosell wrote: There's no way to tell if you used the first password that you didn't decrypt everything. Is there a way to prove that you did? If yes, your jailers may say We know you have more self-incriminating evidence there. Your imprisonment will continue

Re: Computer health certificate plan: Charney of DoJ/MS

2010-10-07 Thread Marshall Clow
At 3:16 AM -0700 10/7/10, John Gilmore wrote: http://www.bbc.co.uk/news/technology-11483008 BBC reports that Microsoft's idea seems to be that if your computer doesn't present a valid health certificate to your ISP, then your ISP wouldn't let it be on the net, or would throttle it down to a