Re: chip-level randomness?

2001-09-18 Thread Pawel Krawczyk

On Mon, Sep 17, 2001 at 01:44:57PM -0700, Bram Cohen wrote:

  What is important, it *doesn't* feed the built-in Linux kernel PRNG
  available in /dev/urandom and /dev/random, so you have either to only
  use the hardware generator or feed /dev/urandom yourself.
 That's so ... stupid. Why go through all the work of making the thing run
 and then leave it unplugged?

It's not that stupid, as feeding the PRNG from i810_rng at the kernel
level would be resource intensive, not necessary in general case and
would require to invent some defaults without any reasonable arguments
to rely on. Like how often to feed the PRNG, with how much data etc.

On the other hand, the authors provide a `rngd' daemon, running in
userland, that reads the i810_rng device and feeds the data into kernel
PRNG. It seems to be reasonably written, with all the possible caveats
in mind, and you can control the feeding interval, block size and other
parameters.

URI: http://sourceforge.net/project/showfiles.php?group_id=3242release_id=28349

-- 
Pawe Krawczyk *** home: http://ceti.pl/~kravietz/
security: http://ipsec.pl/  *** fidonet: 2:486/23



-
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to [EMAIL PROTECTED]



Re: Which internet services were used?

2001-09-18 Thread Michael Shields

In article [EMAIL PROTECTED],
Perry E. Metzger [EMAIL PROTECTED] wrote:
 These same people ignore the fact that the US economy, and indeed the
 world economy, could no longer function without encryption.

I am not sure that it is accurate to say that the world economy will
grind to a halt without encryption.  It would suffer massive truly
fraud losses, just as credit cards currently experience massive fraud
due to their use of a single fixed account number.  But given the
current mood in the US, the public might even be prepared to accept
huge economic losses -- if it made them feel safer.

An effective argument against crypto restrictions must be on the
grounds that new laws would not help fight terrorism.  It is very
difficult to convince people with a cost-side argument, because the
effects of a successful terrorist attack can be viewed as nearly
infinite.  The public will only be strongly opposed to new measures if
they feel that they are ineffective.
-- 
Shields.



-
The Cryptography Mailing List
Unsubscribe by sending unsubscribe cryptography to [EMAIL PROTECTED]



[FYI] FITUG urges political leaders to defend citizens' freedoms

2001-09-18 Thread Axel H Horns

http://www.fitug.de/news/pes/fitug-010918.en.html

--- CUT -

FITUG e.V.  

Förderverein Informationstechnik und Gesellschaft  

FITUG urges political leaders to defend citizens' freedoms  

Tuesday's terrorist attacks were not only targeting human lives, but 
also the basic values of open societies. In these dark hours of grief 
and wrath, political leaders are called upon to protect both: 
Citizens' lives and citizens' freedom.  

Terrorists' attack on open societies cannot be completed but with 
help from ourselves, and from our political leaders. This must not 
happen.  

In the ongoing debate on how terrorism is best fought, one option 
proposed by certain circles comprieses strenghtening signal 
intelligence capabilities. According to these circles, the 
eavesdropping capabilities available to law enforcement and the 
intelligence community are insufficient for uncovering and monitoring 
communication of today's distributed and highly organized groups of 
terrorists and criminals.  

Availability of virtually unbreakable encryption products to the 
general public is perceived as a major obstacle in the current battle 
against terrorism.  

This perception is highly misleading. Any legislative activity based 
on it will inevitably fail to reach its goal. Instead, such activity 
would undermine basic values of free and open societies, such as 
citizens' right to privacy and private communication.  

Such legislative activity would ignore the ample evidence that the 
problem of today's intelligence is not a lack of signal intelligence, 
but a lack and neglection of human intelligence and intelligent 
interpretation of the material collected.  

Even the most sophisticated signal interception technology available 
will hardly be able to thwart stone age style secure channels used by 
terrorists, such as human couriers and confidential face-to-face 
meetings.  

Cryptography is a key enabling technology for a safe information 
society. Obstructing the use of practically unbreakable encryption as 
a means of securing electronic communications will make our modern, 
information-based economies and societies even more susceptible to 
cyber criminals' and terrorists' attacks.  

Stopping the spread of strong cryptography would amount to blasting 
holes into the civilized world's already-thin defense shield against 
digital harm.  

We therefore urge political leaders and policy-makers not to restrict 
citizens' and businesses' freedom to communicate privately, using the 
best technology available.  

Our societies and economies need this technology and its widespread 
use in order to defend against tomorrow's digital attacks.  

About FITUG  

FITUG creates connections to the virtual world of new media and data 
networks. From our statues: The association's purpose is the 
fostering of the integration of new media with society, public 
education about technologies, risks, and dangers of these media, and 
the fostering of human rights and consumer interests with respect to 
computer networks. FITUG is a member of the Global Internet Liberty 
Campaign (GILC).  

--- CUT -




-
The Cryptography Mailing List
Unsubscribe by sending unsubscribe cryptography to [EMAIL PROTECTED]



Re: FC: Majority of Americans want anti-encryption laws, poll says

2001-09-18 Thread Declan McCullagh

On Tue, Sep 18, 2001 at 01:02:47PM -0700, John W Noerenberg II wrote:
 Does Princeton Survey Research Associates have a particular political 
 agenda - or did they just blow it with this survey?

I understand the survey may have been commissioned by Newsweek, but I
hesitate to state this as fact without checking. Alas, the magazine's
website is offline, and I don't have time to call them or PSRA (which
does not appear to list it on their website):

http://www.msnbc.com/news/NW-front_Front.asp
File not found
Our Web servers cannot find the page or file you asked for:

-Declan



-
The Cryptography Mailing List
Unsubscribe by sending unsubscribe cryptography to [EMAIL PROTECTED]



Re: FC: Majority of Americans want anti-encryption laws, poll says

2001-09-18 Thread Declan McCullagh

The survey was commissioned by Newsweek. An explanation from Princeton
Survey Research Associates and the exact wording of the question asked
(which did cover privacy and business impact) is here:

http://www.politechbot.com/p-02530.html

-Declan


On Tue, Sep 18, 2001 at 04:34:45PM -0400, Declan McCullagh wrote:
 On Tue, Sep 18, 2001 at 01:02:47PM -0700, John W Noerenberg II wrote:
  Does Princeton Survey Research Associates have a particular political 
  agenda - or did they just blow it with this survey?
 
 I understand the survey may have been commissioned by Newsweek, but I
 hesitate to state this as fact without checking. Alas, the magazine's
 website is offline, and I don't have time to call them or PSRA (which
 does not appear to list it on their website):
 
 http://www.msnbc.com/news/NW-front_Front.asp
 File not found
 Our Web servers cannot find the page or file you asked for:
 
 -Declan
 
 
 
 -
 The Cryptography Mailing List
 Unsubscribe by sending unsubscribe cryptography to [EMAIL PROTECTED]



-
The Cryptography Mailing List
Unsubscribe by sending unsubscribe cryptography to [EMAIL PROTECTED]