QotD

2004-11-30 Thread Udhay Shankar N
found at http://webpages.charter.net/allanms/2004/07/instant-immortality.html Amateurs study cryptography; professionals study economics. (Bob Hettinga, this is your cue. :) Udhay -- ((Udhay Shankar N)) ((udhay @ pobox.com)) ((www.digeratus.com))

Hacking tool 'draws FBI subpoenas'

2004-11-30 Thread R.A. Hettinga
http://www.theregister.co.uk/2004/11/25/nmap_draws_fbi_subpoenas/print.html The Register Biting the hand that feeds IT The Register » Security » Network Security » Original URL: http://www.theregister.co.uk/2004/11/25/nmap_draws_fbi_subpoenas/ Hacking tool 'draws FBI subpoenas' By Kevin

Proving the correctness of a network encryption system test system

2004-11-30 Thread Fredrik Henbjork
Alice has: 1. A system which does processing of encrypted network streams. Alice wants the following from Bob: 2. A test system for the processing system in 1. This system is going to be used to decide if the processing system in 1 is working (processing) as it should. 3. A test system for the

MyKad too hi-tech to forge

2004-11-30 Thread R.A. Hettinga
http://thestar.com.my/news/story.asp?file=/2004/11/27/nation/9513530sec=nation The Star Online News Saturday November 27, 2004 MyKad too hi-tech to forge BY JANE RITIKOS KUALA LUMPUR: The National Registration Department has detected about 10 cases of forged MyKad issued to illegal

I'm sorry, I haven't a clue

2004-11-30 Thread R.A. Hettinga
http://www.guardian.co.uk/print/0,3858,5072953-103390,00.html Guardian | Comment I'm sorry, I haven't a clue However cracked they may be, our fascination for codes remains Mark Lawson Saturday November 27, 2004 The Guardian The discovery of a code at Shugborough Hall, in Staffordshire -

ACLU concerned that microchip passports won't be encrypted

2004-11-30 Thread R.A. Hettinga
http://www.indystar.com/articles/5/197851-1715-P.html The Indianapolis Star ACLU concerned that microchip passports won't be encrypted Associated Press November 27, 2004 WASHINGTON -- The Bush administration opposes security measures for new microchip-equipped passports that privacy

RSA Implementation in C language

2004-11-30 Thread Sandeep N
Hi, Can anybody tell me where I can get an implementation of RSA algorithm in C language? I searched for it, but could not locate one. I would be grateful to you if you could give me the location of the source code. Thanks and Regards, Sandeep

Some Secret: Open House, Open Bar

2004-11-30 Thread R.A. Hettinga
Must have passed some kinda big supplemental. Cheers, RAH --- http://www.washingtonpost.com/ac2/wp-dyn/A8583-2004Nov23?language=printer The Washington Post washingtonpost.com Round-Trip or One-Way Tickets? By Al Kamen Wednesday, November 24, 2004; Page A19 Some Secret: Open House,

SSL/TLS passive sniffing

2004-11-30 Thread Ben Nagy
Hi all, I'm a bumbling crypto enthusiast as a sideline to my other, real, areas of security expertise. Recently a discussion came up on firewall-wizards about passively sniffing SSL traffic by a third party, using a copy of the server cert (for, eg, IDS purposes). There was some question about

Re: RSA Implementation in C language

2004-11-30 Thread Adam Shostack
http://www.homeport.org/~adam/crypto/ On Mon, Nov 29, 2004 at 01:47:05PM +0530, Sandeep N wrote: | Hi, | | Can anybody tell me where I can get an implementation of RSA | algorithm in C language? I searched for it, but could not locate one. | I would be grateful to you if you could give me the

Re: SSL/TLS passive sniffing

2004-11-30 Thread Ian Grigg
Ben raises an interesting thought: There was some question about whether this is possible for connections that use client-certs, since it looks to me from the spec that those connections should be using one of the Diffie Hellman cipher suites, which is obviously not vulnerable to a passive

RE: RSA Implementation in C language

2004-11-30 Thread Trei, Peter
Admittedly somewhat old and creaky, but try Googling RSAREF. I don't know where that stands for IP rights (presumably we still have copyright), bout for research it's a startin point. Peter -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Sandeep N

SSL/TLS passive sniffing

2004-11-30 Thread David Wagner
Ian Grigg writes: I note that disctinction well! Certificate based systems are totally vulnerable to a passive sniffing attack if the attacker can get the key. Whereas Diffie Hellman is not, on the face of it. Very curious... No, that is not accurate. Diffie-Hellman is also insecure if the

Re: SSL/TLS passive sniffing

2004-11-30 Thread Ian Grigg
Ian Grigg writes: I note that disctinction well! Certificate based systems are totally vulnerable to a passive sniffing attack if the attacker can get the key. Whereas Diffie Hellman is not, on the face of it. Very curious... No, that is not accurate. Diffie-Hellman is also insecure if the