Re: [cryptography] Passwords13 Bergen

2013-10-08 Thread Jeffrey Goldberg
On 2013-10-08, at 3:46 PM, Krisztián Pintér wrote: > any chance to have a looksie on what happened in vegas [at PasswordsCon]? > slides or talks online? Szervusz Krisztián! All of the presentations have been posted to YouTube. Here is the YouTube Playlist http://www.youtube.com/playlist?li

Re: [cryptography] Allergy for client certificates

2013-10-08 Thread Tony Arcieri
On Mon, Sep 30, 2013 at 9:55 AM, Guido Witmond wrote: > On 09/30/13 17:43, Adam Back wrote: > > Anyway and all that because we are seemingly alergic to using client side > > keys which kill the password problem dead. > > > Hi Adam, > > I wondered about that 'allergy' myself. I have some ideas abo

Re: [cryptography] Allergy for client certificates

2013-10-08 Thread Thierry Moreau
Guido Witmond wrote: On 09/30/13 19:31, Thierry Moreau wrote: Perspective: I'm still working towards a working prototype based on (A) the client PPKP usage paradigm (Public-Private Key Pair) (B) the first party certification paradigm (get rid of requesting any client PKI certificate from any CA

Re: [cryptography] Passwords13 Bergen

2013-10-08 Thread Krisztián Pintér
hi, any chance to have a looksie on what happened in vegas? slides or talks online? > this is to advertize an event associated to the Password Hashing > Competition (PHC, https://password-hashing.net/): Passwords13 > Bergen, the latest conference in the Passwords^ series, > http://passwordsc

Re: [cryptography] Curve25519 OID

2013-10-08 Thread Billy Brumley
> I would appreciate expansion on all these horror scenarios. > > Most of the desirable characteristics of curve25519 are things that make it > different from NIST curves, for example montgomery coordinates protect you > against point compression patents, since you don't calculate y, therefore >