Turning the crank on partitions

2005-03-28 Thread Paul Lambert
The recent breakthrough on the 'crank' is claimed to have implications on cryptography: http://www.math.wisc.edu/~ono/mahlburg.html Though the math itself quickly becomes a thorny tangle to the lay person, the broad outlines of Mahlburg's work can be understood and appreciated as well as

Re: Secure Science issues preview of their upcoming block cipher

2005-03-28 Thread Lance James
David Wagner wrote: Seecure Science Corporation writes: Secure Science is offering a preview of one of the 3 ciphers they will be publishing througout the year. [...] This cipher is [...] provably just as secure as AES-128. Adam Shostack writes: Really? How does one go about proving the

Re: NSA warned Bush it needed to monitor networks

2005-03-28 Thread dan
John Kelsey writes: | I think a bigger issue here is a sort of rational (to the bureaucrat) risk a | versity: if he declassifies something and it turns out he's leaked somethin | g valuable (in the eyes of his boss), he's in trouble. As long as there's | no cost to stamping secret or

Re: Secure Science issues preview of their upcoming block cipher

2005-03-28 Thread Dan Kaminsky
Have you looked at their scheme? http://www.securescience.net/ciphers/csc2/ The way to come up with a cipher provably as secure as AES-128 is to use AES-128 as part of your cipher -- but their scheme does not do anything like that. I am very skeptical about claims that they have a mathematical

Re: and constrained subordinate CA costs?

2005-03-28 Thread Matt Crawford
On Mar 25, 2005, at 11:55, Florian Weimer wrote: Does anyone have info on the cost of sub-ordinate CA cert with a name space constraint (limited to issue certs on domains which are sub-domains of a your choice... ie only valid to issue certs on sub-domains of foo.com). Is there a technical option

Re: and constrained subordinate CA costs?

2005-03-28 Thread Adam Back
On Fri, Mar 25, 2005 at 04:02:36PM -0600, Matt Crawford wrote: There's an X.509v3 NameConstraints extension (which the higher CA would include in the lower CA's cert) but I have the impression that ends system software does not widely support it. And of course if you don't flag it

Re: and constrained subordinate CA costs?

2005-03-28 Thread Matt Crawford
On Mar 25, 2005, at 16:06, Adam Back wrote: There's an X.509v3 NameConstraints extension (which the higher CA would include in the lower CA's cert) but I have the impression that ends system software does not widely support it. And of course if you don't flag it critical, it's not very

TSA Finds Data On Air Passengers Lacked Protection

2005-03-28 Thread R.A. Hettinga
http://online.wsj.com/article_print/0,,SB72077661889592,00.html The Wall Street Journal March 25, 2005 U.S. BUSINESS NEWS TSA Finds Data On Air Passengers Lacked Protection By AMY SCHATZ Staff Reporter of THE WALL STREET JOURNAL March 25, 2005; Page A4 A new government report says