Secure phones from VectroTel?

2006-05-23 Thread Perry E. Metzger
Following the links from a /. story about a secure(?) mobile phone VectroTel in Switzerland is selling, I came across the fact that this firm sells a full line of encrypted phones. http://www.vectrotel.ch/ The devices apparently use D-H key exchange to produce a 128 bit AES key which is then

Re: Secure phones from VectroTel?

2006-05-23 Thread Steven M. Bellovin
On Tue, 23 May 2006 11:19:38 -0400, Perry E. Metzger [EMAIL PROTECTED] wrote: Following the links from a /. story about a secure(?) mobile phone VectroTel in Switzerland is selling, I came across the fact that this firm sells a full line of encrypted phones. http://www.vectrotel.ch/

Re: Secure phones from VectroTel?

2006-05-23 Thread George Danezis
Hi all! The devices apparently use D-H key exchange to produce a 128 bit AES key which is then used as a stream cipher (presumably in OFB or a similar mode). Authentication appears to be via a 4 digit pin, certainly not the best of mechanisms. The 4-digit PIN should not automatically be

Re: Secure phones from VectroTel?

2006-05-23 Thread Alex Pankratov
Perry E. Metzger wrote: Following the links from a /. story about a secure(?) mobile phone VectroTel in Switzerland is selling, I came across the fact that this firm sells a full line of encrypted phones. http://www.vectrotel.ch/ The devices apparently use D-H key exchange to produce a 128

Re: Secure phones from VectroTel?

2006-05-23 Thread Jon Callas
On 23 May 2006, at 8:19 AM, Perry E. Metzger wrote: Following the links from a /. story about a secure(?) mobile phone VectroTel in Switzerland is selling, I came across the fact that this firm sells a full line of encrypted phones. http://www.vectrotel.ch/ The devices apparently use D-H

Is AES better than RC4

2006-05-23 Thread James A. Donald
-- AES is new, and people keep claiming progress towards breaking it, without however, so far producing any breaks. RC4 is old and has numerous known weaknesses, which are tricky to code around, and have caught many an implementor - notice for example Wifi. But these are known weaknesses,