Re: NSA back doors in encryption products

[Jim Choate]

On Wed, 24 May 2000, Eugene Leitl wrote:

> Jim Choate writes:
> 
>  > Bull, the hardware companies aren't any more trustworthy.
> 
> True. You can always validate a few from a batch by plasma etching the
> device, and trace the structures on an electromicrograph (some EMs
> allow you to observe the device in operation).
> 
> Also, it is hard to insert a trapdoor into an FPGA. OpenSource hardware.

All of it using software.

Trying to avoid software compromises by using hardware is impossible since
you can't build the hardware without software.

You can't have your cake and eat it too.

As to inserting a trapdoor in an FPGA, I don't see any reason at all that
a trapdoor can't be inserted with the appropriate understanding of the
state space and chosing a rare state to trigger your bypass.

    ____________________________________________________________________

            The future is downloading. Can you hear the impact?

                                        O[rphan] D[rift>]
                                        Cyber Positive

       The Armadillo Group       ,::////;::-.          James Choate
       Austin, Tx               /:'///// ``::>/|/      [EMAIL PROTECTED]
       www.ssz.com            .',  ||||    `/( e\      512-451-7087
                           -====~~mm-'`-```-mm --'-
    --------------------------------------------------------------------