Re: MS DRMOS Palladium -- The Trojan Horse OS

2002-07-04 Thread Mark S. Miller
At 09:42 AM 7/3/2002 Wednesday, Marc Branchaud wrote: >By patenting the DRMOS, only M$ will be allowed to create such a beast (OK, >they could license the patent without restrictions -- pardon me while I pick >myself up off the floor). This means that the rest of the planet's OSes >will have n

Re: crypto/web impementation tradeoffs

2002-07-04 Thread bear
Without more knowledge of the parameters of the system (especially the threat model), it's hard to say -- however, this sounds like a case for the Diffie-Hellman key agreement protocol. Have the client and server each pick a random number, and then use those numbers to generate a key dynamicall

Re: crypto/web impementation tradeoffs

2002-07-04 Thread Mike Brodhead
> I'm passing some data through a web client [applet-like] and am planning > on using some crypto to help ensure the data's integrity when the applet > sends it back to me after it has been processed. Help us to understand your threat model. Do you trust the user and his/her machine, but are wo

Re: crypto/web impementation tradeoffs

2002-07-04 Thread Ben Laurie
John Saylor wrote: > Hi > > I'm passing some data through a web client [applet-like] and am planning > on using some crypto to help ensure the data's integrity when the applet > sends it back to me after it has been processed. > > The applet has the ability to encode data with several well known

Re: Montgomery Multiplication

2002-07-04 Thread Nomen Nescio
On Tue, 2 Jul 2002, Damien O'Rourke wrote: > I was just wondering if anyone knew where to get a good explanation of > Montgomery multiplication for the non-mathematician? I have a fair bit > of maths but not what is needed to understand his paper. Bear replied: > Montgomery Multiplication is e

RE: crypto/web impementation tradeoffs

2002-07-04 Thread Ian Brown
> Is it better to have the key encoded in the binary, or to pass it a > plain text key as one of the parameters to the applet? Have the applet downloaded over an SSL connection along with a random key as a parameter. Both will be protected using SSL, and then the applet can use the key to communi

Smart ID Cards Planned for Sailors to Spot Terrorists

2002-07-04 Thread R. A. Hettinga
http://quote.bloomberg.com/fgcgi.cgi?ptitle=Top%20World%20News&s1=blk&tp=ad_topright_topworld&T=markets_box.ht&s2=ad_right1_windex&bt=ad_position1_windex&box=ad_box_all&tag=worldnews&middle=ad_frame2_windex&s=APSMyZRY2U21hcnQg Bloomberg News Top World News 07/03 13:20 Smart ID Cards Planned for

Horseman Number 3: IRC and crypto and stego, oh, my...

2002-07-04 Thread R. A. Hettinga
http://news.bbc.co.uk/low/english/sci/tech/newsid_2082000/2082657.stm BBC News Online: Sci/Tech Tuesday, 2 July, 2002, 13:30 GMT 14:30 UK Accessing the secrets of the brotherhood Police using the internet to lure paedophiles As police break an internet paedophile ring known as the Shadowz Broth

wrong data model -- Re: MS DRMOS Palladium -- The Trojan Horse OS

2002-07-04 Thread Ed Gerck
Marc: There is no reason IMO to talk about economics when basic properties are being ignored. DRMOS will fail for pretty much the same basic reason that PKI is failing. We are still trying to create an absolute reference to measure "distance" in dataspace, when such reference cannot exist by def

crypto/web impementation tradeoffs

2002-07-04 Thread John Saylor
Hi I'm passing some data through a web client [applet-like] and am planning on using some crypto to help ensure the data's integrity when the applet sends it back to me after it has been processed. The applet has the ability to encode data with several well known symmetric ciphers. The problem