Re: Password hashing

2007-10-13 Thread Jun-ichiro itojun Hagino
> A proposal for a new password hashing based on SHA-256 or SHA-512 has > been proposed by RedHat but to my knowledge has not had any rigorous > analysis. The motivation for this is to replace MD-5 based password > hashing at banks where MD-5 is on the list of "do not use" algorithms. > I w

Re: improving ssh

2007-07-19 Thread Jun-ichiro itojun Hagino
i'm an OpenBSD developer, so i have some knowlege but could be biased. > SSH (OpenSSH) is routinely used in secure access for remote server > maintenance. However, as I see it, SSH has a number of security issues > that have not been addressed (as far I know), which create unnecessary > vu

How the Chinese internet is tapped.

2007-07-16 Thread Jun-ichiro itojun Hagino
on a similar topic as Greek. i was in Shinsen and DongAng, mainland china (right next to HongKong). i was able to experience GSM/GPRS Internet as well as hotel wired Internet (both are IPv4, sigh). in both cases, TCP port 80 (http) was sucked into transpare

Re: SSL accel cards

2004-05-26 Thread Jun-ichiro itojun Hagino
> Does anyone know of an SSL acceleration card that actually works under > Linux/*BSD? I've been looking at vendor web pages (AEP, Rainbow, etc), and > while they all claim to support Linux, Googling around all I find are people > saying "Where can I get drivers? The ones shipped only work on RedH