Paul Robertson wrote:
>
> Mikael Olsson wrote:
> > Actually, I believe there _is_ some value in EAL 3 and better [...]
>
> I think this gets into worrying about the last 2%
> of the problem
Yeah, you're absolutely right; I should have emphasized "some" rather
than "is", but I did try to illustrate that with my last point.
I guess all I was saying was that, for me, EAL 3 and better actually
tell me something that I couldn't just go test/evaluate for myself
thankyouverymuch (EAL 5 and 4). Just not a lot.
> In a world where very smart, very well-known vendors with crypto
> products have initialization vector issues in shipping products,
That one did put a big dent in my view of the world. I mean, argh,
predictable IVs _by definition_ defeat the purpose of having an IV
in the first place.
--
Mikael Olsson, Clavister AB
Storgatan 12, Box 393, SE-891 28 �RNSK�LDSVIK, Sweden
Phone: +46 (0)660 29 92 00 Mobile: +46 (0)70 26 222 05
Fax: +46 (0)660 122 50 WWW: http://www.clavister.com
_______________________________________________
Firewalls mailing list
[EMAIL PROTECTED]
For Account Management (unsubscribe, get/change password, etc) Please go to:
http://lists.gnac.net/mailman/listinfo/firewalls
