Re: NSA back doors in encryption products

[Rick Smith]

At 09:12 AM 05/25/2000 -0700, David Honig wrote:

>Your data still goes through an operating system, etc., so the
>real issue is a closed system: encrypt on a PDA which is under your
>close personal control and does not download new executables.  Let your 
>untrustworthy networked-PC be merely its gateway.

Of course, nothing's perfect. PDAs have their hot sync, which put copies of
your sensitive files (and wrapped/encrypted keys or passwords, no doubt) on
your PC. And the hot sync will also download software onto your PDA,
providing a channel (albeit narrow) for subversion.

It's lots safer than a PC, but a well funded adversary can find a way.

Rick.
[EMAIL PROTECTED]