On 12/10/02 08:39 +0530, Saswata Banerjee & Associates wrote: > And for those of you who have been harping on crypto tools, please remember > that the govt of usa is given a key for every crypto system that is > developed and sold in usa and abroad by US companies. So, the can very Proof? The really good tools provide you with your own source. Of course, you need to then trust the compiler, and the hardware. Decide on what is acceptable to you.
> easily read even your so called encrypted emails. Futher, the strongest > crypto available is a 128 bit key, which given the amount of computing power > available with US Govt agencies, cracking the code even by brute force > methods is not difficult. Ummm, I'll wait for this. Symmetric crypto is strong, and I'll believe someone with a reputation in the cryptographic field rather than you. if you are referring to asymmetric crypto (as in https), then the 128 bit refers to the strength of the session key. Earlier this used to be 56 bits, but is now allowed to be 128 bits. How long this will take to crack, even with quantum computers is pretty much a FAQ. Yes, carnivore like technologies exist, and are deployed in India as well. The government requires that all international access be tapped. If you don't like this, use strong crypto. Setup TLS on your SMTP systems and use GPG/PGP for backup security. Run ipsec all over the place. This is expensive on the CPU, but modern processors should be able to handle it. Devdas Bhagat _______________________________________________ http://mm.ilug-bom.org.in/mailman/listinfo/linuxers
