Re: [cryptography] cryptography Digest, Vol 17, Issue 13

2011-07-09 Thread Peter Gutmann
"Matthijs R. Koot" writes: >A low-complexity alternative to SSH seems useful and might perhaps allow >validation by formal methods... Funny you should mention that, I suggested this to someone recently because it's something that's never been formally analysed and is likely an easy target for

Re: [cryptography] cryptography Digest, Vol 17, Issue 13

2011-07-09 Thread Matthijs R. Koot
Hi Peter, > I think there's a dual of this for people who've worked with security > protocols. For example I've got a draft for a cut-down SSH that's probably > about one tenth the complexity of the existing protocol while satisfying the > majority of users (secure telnet/secure file transfer) th

Re: [cryptography] preventing protocol failings

2011-07-09 Thread Peter Gutmann
"Zooko O'Whielacronx" writes: >Hm, digging around in my keepsakes cabinet, I unfortunately do not find the >original state transition diagram that I mentioned above, but I do find an >artifact that I wrote a few months later=E2=80=94a sketch of a protocol that >I called "ZRTP lite" which was ZRTP