Re: [cryptography] PKI in practice: is there a list of (widely deployed) client-certs-issuing CAs?

2012-04-27 Thread Ryan Sleevi
A question for those who follow PKI usage trends. Is there a list of CAs that issue X.509 end-user certificates? Here is the rationale for the question: If an end-user has a certificate, he (more or less consciously) controls a private key. Suppose one deploys a web server that cares

[cryptography] An oldie but a goodie

2012-04-27 Thread Peter Gutmann
In the 1980s DEC gave us crypt16, reducing password-guessing from 25 DES operations to a suffix search requiring only 5 DES operations. In the 1990s MS gave us LMHASH, reducing it to a single DES operation. Now, in 2012, the WiFi Alliance is proud to present WPS' wps_reg, which splits a 7-digit

Re: [cryptography] PKI in practice: is there a list of (widely deployed) client-certs-issuing CAs?

2012-04-27 Thread Thierry Moreau
Follow-up on my own post below ... Thierry Moreau wrote: A question for those who follow PKI usage trends. Is there a list of CAs that issue X.509 end-user certificates? Here is the rationale for the question: If an end-user has a certificate, he (more or less consciously) controls a

Re: [cryptography] data integrity: secret key vs. non-secret verifier; and: are we winning?

2012-04-27 Thread Nico Williams
On Fri, Apr 27, 2012 at 9:15 AM, ianG i...@iang.org wrote: Easy.  Take the hash, then publish it.  The data can be secret, the hash need not be. That works for git. In particular what's nice about it is that you get copies of the hash stored all over. A similar approach can work for

Re: [cryptography] PKI in practice: is there a list of (widely deployed) client-certs-issuing CAs?

2012-04-27 Thread ianG
On 27/04/12 03:34 AM, Thierry Moreau wrote: A question for those who follow PKI usage trends. Is there a list of CAs that issue X.509 end-user certificates? Hmm client-certs as opposed to server-side certs. The answer is most but as it is a very low value faux-loss-leader business,