Re: Private Key Generation from Passwords/phrases

2007-01-18 Thread Allen
Joseph, The whole issue of entropy is a bit vague for me - I don't normally work at that end of things - so could you point to a good tutorial on the subject, or barring having a reference handy, could you give an overview? Thanks, Allen Joseph Ashwood wrote: - Original Message -

Re: It's a Presidential Mandate, Feds use it. How come you are not using FDE?

2007-01-18 Thread Allen
Saqib Ali wrote: Since when did AES-128 become snake-oil crypto? How come I missed that? Compusec uses AES-128 . And as far as I know AES is NOT snake-oil crypto Saqib, I believe you are correct as to the algorithm, but the snake-oil is in the implementation, As I have often said, A

Re: Private Key Generation from Passwords/phrases

2007-01-18 Thread Perry E. Metzger
John Denker [EMAIL PROTECTED] writes: There is only one technical definition of entropy, Oh? So you're saying Chaitin-Kolmogrov information and other ways of studying entropy are wrong? I think that's a bit unreasonable, don't you? There are different definitions that are useful at different

Real-world password guessing

2007-01-18 Thread Steve Schear
http://dilbert.com/comics/dilbert/archive/dilbert-20070117.html http://dilbert.com/comics/dilbert/archive/dilbert-20070118.html - The Cryptography Mailing List Unsubscribe by sending unsubscribe cryptography to [EMAIL PROTECTED]

Re: It's a Presidential Mandate, Feds use it. How come you are not using FDE?

2007-01-18 Thread Saqib Ali
Algorithms can be perfect and implementation sloppy. If you can review the code you might find the problem, but with proprietary code, fergetit. I think you guys are missing the point. The term Snake-Oil Crypto refers to the algorithm and NOT the actual implementation. This is a important