Re: [cryptography] Keyspace: client-side encryption for key/value stores

2013-03-22 Thread Peter Gutmann
Thierry Moreau thierry.mor...@connotech.com writes: Client-side storage of long-term secrets can only be secured by dedicated client-side hardware. Your mileage may vary. In a perfect world, yes. However having an OS-provided, standardised mechanism that gets things mostly right (Apple Keyring)

[cryptography] NSA Cryptologs Now Searchable

2013-03-22 Thread John Young
A person notes that NSA has replaced the imaged non-searchable PDF Cryptologs with searchable PDF versions. Much more useful. Still lacking a comprehensive index but that can now be compiled from the new PDFs. Same URL: http://www.nsa.gov/public_info/declass/cryptologs.shtml

[cryptography] Apple Keychain (was Keyspace: client-side encryption for key/value stores)

2013-03-22 Thread Paul Walker
Hi Peter, In a perfect world, yes. However having an OS-provided, standardised mechanism that gets things mostly right (Apple Keyring) is far, far better than forcing every developer to invent their own one (Unix and to a lesser extent Windows), which 90% will get wrong. I'm curious which

Re: [cryptography] Mirror of NSA Cryptologs

2013-03-22 Thread Jeffrey Goldberg
On 2013-03-20, at 8:04 PM, John Young j...@pipeline.com wrote: NSA website seems overloaded. Mirror and index of declassified NSA Cryptologs 1974-1997: http://cryptome.org/2013/03/cryptologs/00-cryptolog-index.htm I just want to thank you and others for mirroring, OCRing, and indexing