Re: Crypto'09 Rump session to be webcast

2009-08-18 Thread james hughes
This year's rump session will include A Live Trojan Message for MD5 A New Security Analysis of AES-128 In how many ways can you break Rijndael? Alice and Bob Go to Heaven The full agenda has been posted at http://rump2009.cr.yp.to/ On Aug 14, 2009, at 11:

Re: Client Certificate UI for Chrome?

2009-08-18 Thread Peter Gutmann
"James A. Donald" writes: >I cannot see how you could create a bank web page without a web application >framework (counting mod-php as a very primitive web application framework) >and scripting and a database, which scripting and database has to know who it >is is that logged in We really are ta

2 serving time in UK prisons for refusing to decrypt on demand

2009-08-18 Thread John Gilmore
[But we don't know who they are! --gnu] http://www.theregister.co.uk/2009/08/11/ripa_iii_figures/ Two convicted for refusal to decrypt data Up to five years in jail after landmark prosecutions By Chris Williams Posted in Policing, 11th August 2009 13:17 GMT Two people have been successfully

512 bit RSA key used for TI 83+ auth cracked

2009-08-18 Thread Jack Lloyd
It seems the TI-83+ operating system is protected using some form of code signing scheme using a 512 bit RSA key. That key has now been factored: http://www.unitedti.org/index.php?showtopic= Which apparently will allow custom operating systems to run on the device. While this certainly is n

So how do *you* manage your keys, then? Re: [tahoe-dev] cleversafe says: 3 Reasons Why Encryption isOverrated

2009-08-18 Thread Zooko Wilcox-O'Hearn
On Monday,2009-08-10, at 11:56 , Jason Resch wrote: You have stated how Cleversafe manages the key but not provided any details regarding how Tahoe-LAFS manages the decryption key? I think this is potentially Tahoe-LAFS's best contribution to the state of the art, so I hope many of the read

Re: Client Certificate UI for Chrome?

2009-08-18 Thread James A. Donald
"James A. Donald" writes: [Incredibly complicated description of web scripting plumbing deleted] Peter Gutmann wrote: We seem to be talking about competely different things here. For a typical application, say online banking, I connect to my bank at www.bank.com or whatever, the browser requ