Re: [Cryptography] Can you backdoor a symmetric cipher (was Re: Opening Discussion: Speculation on "BULLRUN")

2013-09-06 Thread Jerry Leichter
>> >> It is probably very difficult, possibly impossible in practice, to >> backdoor a symmetric cipher. For evidence, I direct you to this old >> paper by Blaze, Feigenbaum and Leighton: >> >> http://www.crypto.com/papers/mkcs.pdf >> > > There is also a theorem somewhere (I am forgetting where

Re: [Cryptography] Can you backdoor a symmetric cipher (was Re: Opening Discussion: Speculation on "BULLRUN")

2013-09-05 Thread Jon Callas
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sep 5, 2013, at 9:33 PM, "Perry E. Metzger" wrote: > > It is probably very difficult, possibly impossible in practice, to > backdoor a symmetric cipher. For evidence, I direct you to this old > paper by Blaze, Feigenbaum and Leighton: > > http:/

[Cryptography] Can you backdoor a symmetric cipher (was Re: Opening Discussion: Speculation on "BULLRUN")

2013-09-05 Thread Perry E. Metzger
On Thu, 5 Sep 2013 23:24:54 -0400 Jerry Leichter wrote: > They want to buy COTS because it's much cheap, and COTS is based on > standards. So they have two contradictory constraints: They want > the stuff they buy secure, but they want to be able to break in to > exactly the same stuff when anyo