Re: [cryptography] not a Paypal phish using EV certificate

2013-08-14 Thread Krassimir Tzvetanov
To: James, just with the scope of large/small cookies. The problem is that if your cookie is a single number and you have multiple frontends able to process the request (and you are load balancing) you need to have those share state in which might not make sense (esp. if you have geo-distributed

Re: [cryptography] LeastAuthority.com announces PRISM-proof storage service

2013-08-14 Thread Eugen Leitl
On Wed, Aug 14, 2013 at 09:47:09AM +1000, James A. Donald wrote: On 2013-08-14 6:10 AM, Nico Williams wrote: - it's really not easy to defeat the PRISMs. the problem is *political* more than technological. For a human to read all communications would be an impossible burden. We're

[cryptography] Examples of Boneh/Silverberg Multilinear Forms

2013-08-14 Thread Scott Guthery
In Applications of Multilinear Forms to Cryptography, Boneh and Silverberg cite Weil and Tate pairings as examples. Are there others? Cheers, Scott ___ cryptography mailing list cryptography@randombit.net

Re: [cryptography] Examples of Boneh/Silverberg Multilinear Forms

2013-08-14 Thread Jonathan Katz
The Weil and Tate pairings give (cryptographically useful) *bilinear* maps. Cryptographically useful *multilinear* maps were unknown until recently: https://eprint.iacr.org/2012/610 https://eprint.iacr.org/2013/183 On Wed, Aug 14, 2013 at 11:27 AM, Scott Guthery s...@acw.com wrote: In

[cryptography] Introducing Bletchley

2013-08-14 Thread Timothy D. Morgan
I've made an initial release of Bletchley, which is a collection of cryptanalysis tools I've been working on for a while. The focus of the project is to make black-box detection and exploitation of common cryptography problems easier. Bletchley is still in the early stages of development and

Re: [cryptography] Introducing Bletchley

2013-08-14 Thread Timothy D. Morgan
Hi coderman, cool! the threading support is useful, however, no native optimizations yet - is this on the radar? how about workers with OpenCL / CUDA kernels? Well, the goal of multithreading with POA is to overcome network latency. Almost all of the attacks I implement are online attacks

Re: [cryptography] Introducing Bletchley

2013-08-14 Thread coderman
On Wed, Aug 14, 2013 at 9:15 PM, Timothy D. Morgan tmor...@vsecurity.com wrote: ... Well, the goal of multithreading with POA is to overcome network latency. Almost all of the attacks I implement are online attacks against web apps. POA doesn't require much CPU, it just requires sending