Anti-Tempest Fonts, Where?

2008-02-05 Thread George Orwell
man gpg

the above cmd mentions anti tempest fonts. what does this mean
exactly? where are the anti-tempest fonts? i've searched the
net for them and cannot find them. the only mention of soft
tempest fonts were within a .zip containing image files claimed
to be for example only.

do tempest resistant fonts exist?

Il mittente di questo messaggio|The sender address of this
non corrisponde ad un utente   |message is not related to a real
reale ma all'indirizzo fittizio|person but to a fake address of an
di un sistema anonimizzatore   |anonymous system
Per maggiori informazioni  |For more info
  https://www.mixmaster.it

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Anti-Tempest Fonts, Where?

2008-02-05 Thread Robert J. Hansen
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA256

George Orwell wrote:
 do tempest resistant fonts exist?

First, it's not tempest resistant.  TEMPEST is the name of the NSA's
standard on Van Eck-resistant hardware.  What you're talking about is
Van Eck surveillance.  I know, I know, PGP Corporation calls it Tempest
resistance.  They're wrong, too.

Anyway, taking off the pedantry hat...

I am unaware of any empirical evidence that suggests PGP's Van
Eck-resistant fonts really offer much, if any, security against Van Eck
surveillance.  If you're dealing with people who are willing to park a
van down the block and dedicate a crew of surveillance experts and a few
thousand bucks of directional antennas and custom-built FPGAs at you, my
best advice is to (a) run away and (b) build a Faraday cage.


-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.8 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iFYEAREIAAYFAkeooC4ACgkQf2XByo0Cu7M8WgDbBHkrkNUpHMFZfykVffOsaTFw
9E3JVJ1mXBHmPgDdEdXJcN3vftBtGKw3va7zIPmNgVS/GmVFShYAWYkBHAQBAQgA
BgUCR6igLgAKCRC3APSC/q+BCZ2ECACMdFOEH47rTF03Cm834FWFNnegnGs8UGXD
z/uBEtrO212nIBSKXqEfLxL0137dnx8Y9e6NmU4XfxS5DhbpWY2baqiuJcSGVx7S
VSQPHffe1QO31ehlWEChHysKQDZRC+TGpyg/d6JWx+QVn8iixq5qB4N9qIRUrLAK
SV1pV4kA8TCPVCh/V8VfR77wdTjE4y5/vIn1iXcVpIZyieZUF3/5yYxN9fLU4m8H
UJI7BZTd3KU5PnDmA0X/xPbQaf4fITq+BBc22omDsLu5UEdWpXxw/R92J+1+0op7
uoqxqh3Hq51GoIsItirFTGLvLElcYAKBZKHWeeauxktOcnrjwRrH
=3//e
-END PGP SIGNATURE-

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Anti-Tempest Fonts, Where?

2008-02-05 Thread David Shaw
On Sat, Feb 02, 2008 at 06:16:23AM +0100, George Orwell wrote:
 man gpg
 
 the above cmd mentions anti tempest fonts. what does this mean
 exactly? where are the anti-tempest fonts? i've searched the
 net for them and cannot find them. the only mention of soft
 tempest fonts were within a .zip containing image files claimed
 to be for example only.
 
 do tempest resistant fonts exist?

No.  Or at least, not any longer.  There was a font package available
a few years ago that was an offshoot of some work done by Markus Kuhn
and Ross Anderson at the University of Cambridge.  More recently, they
improved the attack enough that the fonts were no longer effective.

See
  http://www.cl.cam.ac.uk/~mgk25/emsec/softtempest-faq.html

I'll update the manual so it does not reference the fonts any longer.

David

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Anti-Tempest Fonts, Where?

2008-02-05 Thread Hideki Saito
Makes me curious, how relevant is it these days, especially with age
of (presumably) lower emission LCD screen?

On Feb 5, 2008 11:00 AM, David Shaw [EMAIL PROTECTED] wrote:
 On Sat, Feb 02, 2008 at 06:16:23AM +0100, George Orwell wrote:
  man gpg
 
  the above cmd mentions anti tempest fonts. what does this mean
  exactly? where are the anti-tempest fonts? i've searched the
  net for them and cannot find them. the only mention of soft
  tempest fonts were within a .zip containing image files claimed
  to be for example only.
 
  do tempest resistant fonts exist?

 No.  Or at least, not any longer.  There was a font package available
 a few years ago that was an offshoot of some work done by Markus Kuhn
 and Ross Anderson at the University of Cambridge.  More recently, they
 improved the attack enough that the fonts were no longer effective.

 See
   http://www.cl.cam.ac.uk/~mgk25/emsec/softtempest-faq.html

 I'll update the manual so it does not reference the fonts any longer.

 David


 ___
 Gnupg-users mailing list
 Gnupg-users@gnupg.org
 http://lists.gnupg.org/mailman/listinfo/gnupg-users




-- 
Hideki Saito

___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users


Re: Anti-Tempest Fonts, Where?

2008-02-05 Thread Robert J. Hansen

Hideki Saito wrote:

Makes me curious, how relevant is it these days, especially with age
of (presumably) lower emission LCD screen?


An unshielded monitor cable puts out a lot of RF, regardless of what 
kind of monitor it's plugged into.  LCDs can be Van Ecked, just as can CRTs.



___
Gnupg-users mailing list
Gnupg-users@gnupg.org
http://lists.gnupg.org/mailman/listinfo/gnupg-users