Humans are always are always the weak link in any security scheme :-) --Tony
Stephen Beller wrote: > Hi Tony, > > Interestingly, the most recent eWeek publication has a brief article > titled "Crypto Manners," in which the Electronic Frontier Foundation > is calling the current limits to crypto exports unconstitutional. > > I'm not a cryptologist, but, from what I've read, there's a risk of > having an encryption key stolen and used to unencrypt data, and if > the encryption algorithm is based on a password, it is possible to > hack the key by breaking the password. A multi-key encryption > solution, in which each key is different and all the keys are > required to unencrypt a file, may be more secure (which is what we > have with our Multicryption prototype). > > FWIW, > Steve > > --- In openhealth@yahoogroups.com, Tony McCormick <[EMAIL PROTECTED]> wrote: > >> Hi all, >> This is a fascinating conversation. more useful than most I've >> > seen > >> on this and other venues. I am a bit confused by the >> > email/encryption > >> discussion. Is it still "illegal" to use greater than 48bit >> > inscription > >> across international borders? Because higher levels of encryption, >> > even > >> without Steve's extra indirection, are, for all practical purposes, >> unbreakable and meet HIPAA regs just fine. I have a similar >> application for in home health care data collection that uses 1024 >> > bit > >> PGP encryption with email as the primary (but not sole) delivery >> > system > >> into the OpenEMR system. I can't see how that's a problem. >> >> I think that much of Lopo's suggestions are great alternatives as >> > well, > >> be email is tried and true and dirt simple to implement. It may >> > have > >> higher band width, compared to socket-to-socket or similar >> > protocols, > >> but no so much as it would be an issue, in my opinion. >> >> Tony McCormick >> Medical Information Integration, LLC >> www.mi-squared.com >> >> >> >> >> [Non-text portions of this message have been removed] >> >> > > > > ------------------------------------ > > Yahoo! Groups Links > > > > > -- Tony McCormick -------------------------------- http://www.notebene.net & http://www.backporchrevival.com
