Kahn's "Seizing the Enigma" back in print -- with a catch

2009-08-13 Thread Steven Bellovin
David Kahn's "Seizing the Enigma" is back in print. However, it's only available from Barnes and Noble -- their publishing arm is doing the reprint. According to the preface, the new edition corrects minor errors, but didn't give any details. http://search.barnesandnoble.com/Seizing-the-E

RE: strong claims about encryption safety Re: [tahoe-dev] cleversafe says: 3 Reasons Why Encryption isOverrated

2009-08-13 Thread Jason Resch
Zooko Wilcox-O'Hearn wrote: > > [removing Cc: tahoe-dev as this subthread is not about Tahoe-LAFS. > Of course, the subscribers to tahoe-dev would probably be interested > in this subthread, but that just goes to show that they ought to > subscribe to cryptogra...@metzdowd.com.] > > On Monday,2

Re: brute force physics Was: cleversafe...

2009-08-13 Thread Florian Weimer
* David Wagner: > (Do note that factoring is not NP-complete.) It's also possible to factor an n-bit number in O(n^k) integer additions, substractions, multiplications, divisions and comparisons to zero, for some smallish fixed value of k (an observations which is due to Schönhage, IIRC). So you

Re: brute force physics Was: cleversafe...

2009-08-13 Thread Alexander Klimov
Jerry Leichter wrote: >> If current physical theories are even approximately correct, >> there are limits to how many "bit flips" (which would >> encompass all possible binary operations) can occur in >> a fixed volume of space-time. > The physical arguments to which I was referring say *nothing*

Re: Client Certificate UI for Chrome?

2009-08-13 Thread Wes Felter
James A. Donald wrote: For password-authenticated key agreement such as TLS-SRP or TLS-PSK to work, login has to be in the chrome. Regrettably, login in the (non-customizable) chrome is unusable; this is why *everyone* now uses cookies instead of HTTP authentication. Just asking the user for