Re: [cryptography] Re- Entropy key testing and remailers

2011-01-28 Thread Daniel Silverstone
On Fri, Jan 28, 2011 at 04:05:38PM +, Peter Gutmann wrote: [Disclaimer: I work for Simtec and worked on the Entropy Key] Does anyone know more about the hardware they're using to communicate via USB? If it's something like a standard PL2303 it shouldn't be too hard to talk to on systems

Re: [cryptography] True Random Source, Thoughts about a Global System Perspective

2011-01-28 Thread Marsh Ray
On 01/28/2011 05:43 AM, Daniel Silverstone wrote: On Thu, Jan 27, 2011 at 12:03:26PM +, Marsh Ray wrote: [Disclaimer: I work for Simtec and worked on the Entropy Key. We are honestly interested in frank and open discourse about the device and in that spirit, my comments follow.] Cool

Re: [cryptography] True Random Source, Thoughts about a Global System Perspective

2011-01-28 Thread Daniel Silverstone
On Fri, Jan 28, 2011 at 12:25:29PM -0600, Marsh Ray wrote: Well, I was thinking about what the min-privilege such a device would need. Even though most folks will probably just end up running this code as root, in theory the driver needs to be able to only do a few things: * talk to the USB

Re: [cryptography] Re- Entropy key testing and remailers

2011-01-28 Thread Rayservers
On 28/01/11 11:58, Daniel Silverstone wrote: On Thu, Jan 27, 2011 at 06:49:23PM +, Rayservers wrote: [Disclaimer: I work for Simtec and worked on the Entropy Key] I had posted about these on this list earlier. I have had 10 of them purchased. They are waiting for analysis. If anyone

Re: [cryptography] True Random Source, Thoughts about a Global System Perspective

2011-01-28 Thread Rayservers
On 27/01/11 19:19, Steven Bellovin wrote: On Jan 27, 2011, at 8:37 45AM, Len Sassaman wrote: On Wed, 26 Jan 2011, Thierry Moreau wrote: 2) a host plus some H/W for true random source Speaking of hardware entropy sources, has anyone analyzed the Simtek Electronics Entropy Key

Re: [cryptography] Re- Entropy key testing and remailers

2011-01-28 Thread Peter Gutmann
Daniel Silverstone dsilv...@digital-scurf.org writes: Note that, as the webpage explains, the device is a USB CDC device providing an asychronous serial port. Right, but you still need a driver on the host to provide the virtual serial port, e.g. FTDI's virtual COM port (VCP) or Prolific's