Re: Israeli coders, Arab testers

2004-04-01 Thread Barney Wolff
The fly in this ointment is that the testers (of whatever stripe) are being trusted to reveal all the flaws that they find. One way of assuring that is flaw injection, but it's imperfect, because you can never prove that failure to find the flaw was deliberate. The same problem applies to

Re: Verisign CRL single point of failure

2004-04-01 Thread Dirk-Willem van Gulik
On Jan 9, 2004, at 8:06 PM, Rich Salz wrote: dave kleiman wrote: Because the client has a Certificate Revocation Checking function turned on in a particular app (i.e. IE or NAV). I don't think you understood my question. Why is crl.verisign.com getting overloaded *now.* What does the

The 'Privacy' Jihad

2004-04-01 Thread R. A. Hettinga
http://online.wsj.com/article_print/0,,SB108079540145771406,00.html The Wall Street Journal April 1, 2004 COMMENTARY The 'Privacy' Jihad By HEATHER MAC DONALD April 1, 2004; Page A14 The 9/11 Commission hearings have focused public attention again on the intelligence failures

Testing cryptographic hash functions

2004-04-01 Thread Danko Ilik
Hello, I have put on-line an implementation of an Eric Filiol's Moebius Statistical Analysis of Symmetric Ciphers and Hash Functions, if anyone might need such a thing. It is a part of a package of utilities for testing cryptographic hash functions (Maurer's universal statistical test,

Using PDAs as Tokens or Smart Card Readers

2004-04-01 Thread R. A. Hettinga
http://www.cryptonomicon.net/modules.php?name=Newsfile=articlesid=602 Cryptonomicon.Net - Badges Using PDAs as Tokens or Smart Card Readers Posted on Monday, January 19 @ 08:00:00 EST by mhamrick Cryptographic smart card technology has been with us for a quite a while now, and

All Internet voting is insecure: report

2004-04-01 Thread Ian Grigg
http://www.theregister.co.uk/content/6/35078.html http://www.eetimes.com/at/news/OEG20040123S0036 = All Internet voting is insecure: report By electricnews.net Posted: 23/01/2004 at 11:37 GMT Get The Reg wherever you are, with The Mobile Register

Announcement: New mailing list for UK crypto

2004-04-01 Thread Ben Laurie
By popular demand, I've created a moderated alternative to the UKCrypto mailing list. See https://mailman.aldigital.co.uk/mailman/listinfo/ukcisnac for the charter and subscription information. This is intended to be complementary to the cryptography (because its about the UK) and ukcrypto