Re: Blue Spike and Digital Watermarking with Giovanni

2000-01-17 Thread Dan Geer


Working for Xerox I can assure you that all of our colour machines together
with all our competitors colour machines leave a "trace".

Pointer to how this trace is applied, recorded, accounted for,
and handled when components are swapped out?  

--dan




Re: BXA press release URL; and where to get the regs in HTML

2000-01-17 Thread Joe Francis

Given this:

"``Open cryptographic interface''. A mechanism which is designed to 
allow a customer or other party to insert cryptographic functionality 
without the intervention, help or assistance of the manufacturer or its 
agents, e.g., manufacturer's signing of cryptographic code or 
proprietary interfaces. If the cryptographic interface implements a 
fixed set of cryptographic algorithms, key lengths or key exchange 
management systems, that cannot be changed, it will not be considered 
an ``open'' cryptographic interface. All general application 
programming interfaces (e.g., those that accept either a cryptographic 
or non-cryptographic interface but do not themselves maintain any 
cryptographic functionality) will not be considered ``open'' 
cryptographic interfaces."

Does that render moot the Apache problems with having crypto hooks?  I'm
wondering if the hooks for that would qualify as a general programming
interface.  

-joe francis



Re: Blue Spike and Digital Watermarking with Giovanni

2000-01-17 Thread Paul Crowley

Eugene Leitl [EMAIL PROTECTED] writes:

 Well, the deformations must be smooth, so this just describes an
 attack against a certain type of watermarks.

Yes.  They found that there was one watermarking product on the market 
that was not defeated by their standard mechanism, and developed a new 
mechanism that defeated that one too.

Of course, the state of the art in watermarking may have moved on
since that paper was written, but if anyone knows of a watermarking
product for images that has not already been defeated I'd be
interested to know.
-- 
  __
\/ o\ [EMAIL PROTECTED] Got a Linux strategy? \ /
/\__/ Paul Crowley  http://www.hedonism.demon.co.uk/paul/ /~\



Re: BXA press release URL; and where to get the regs in HTML

2000-01-17 Thread Phil Karn

Apache 2.0 has general programming hooks that are sufficient for adding
crypto.

And so does the UNIX shell:

tar cf - . | ssh -C foo 'tar xvf -'

Dunno how far they tried to control this even under the old regs.

Phil