Re: [cryptography] Fwd: [gsc] Fwd: OpenBSD IPSEC backdoor(s)

2010-12-14 Thread Peter Gutmann
Marsh Ray writes: >Something about this doesn't add up and I don't think we're seeing the real >story emerge yet. The USG seems to be completely off its rocker right now >reacting to Wikileaks and I wonder if that has something to do with the >timing of this. This is one of those things where th

Re: [cryptography] Fwd: [gsc] Fwd: OpenBSD IPSEC backdoor(s)

2010-12-14 Thread Marsh Ray
On 12/14/2010 09:11 PM, Rayservers wrote: Moral: never depend on only one network security layer, and write and verify your own crypto. Recall Debian and OpenSSL. I think it's too early to draw conclusions from this. I spent a good bit of time going through a bunch of the OpenBSD CVS history

[cryptography] Fwd: [gsc] Fwd: OpenBSD IPSEC backdoor(s)

2010-12-14 Thread Rayservers
Apologies if you have already seen this. Original Message Subject: [gsc] Fwd: OpenBSD IPSEC backdoor(s) Date: Wed, 15 Dec 2010 02:21:11 + From: Rayservers Reply-To: gold-silver-cry...@rayservers.com Organization: Rayservers GmbH To: gold-silver-cry...@rayservers.com Moral:

Re: [cryptography] Modern replacement for ANSI X9.31 as far as RSA key generation goes?

2010-12-14 Thread Francois Grieu
On 02/12/2010 18:33, I asked I'm in search for a current public standard (not necessarily free) specifying algorithms for RSA key generation, as a replacement for ANSI X9.31:1998; something with the range of the modulus and primes, and (mostly harmless and pointless) requirements on p-1, p+1, |p-