Re: Field slide attacks and how to avoid them.

2001-09-09 Thread Ben Laurie
John Kelsey wrote: -BEGIN PGP SIGNED MESSAGE- [ To: Perry's Crypto List ## Date: 09/08/01 07:35 pm ## Subject: Field slide attacks and how to avoid them. ] Guys, I've been noticing a lot of ways you can mess up a cryptographic protocol due to the sliding around of fields

Re: Compression side channel

2001-09-09 Thread Hadmut Danisch
On Sat, Sep 08, 2001 at 10:45:14PM -0400, John Kelsey wrote: where the encryption preserves length (e.g., RC4 encryption). Suppose someone is sending a secret S in these messages, and the attacker gets to choose some prefix or suffix to send, e.g. X[0] = S+suffix[0] X[1] = S+suffix[1]

Re: Sen. Hollings plans to introduce DMCA sequel: The SSSCA

2001-09-09 Thread Jay Sulzberger
On Sun, 9 Sep 2001, Carsten Kuckuk wrote: Am I right in that this bill would effectively outlaw all free open-source operating systems like Linux, OpenBSD, FreeBSD, etc.? Carsten Kuckuk Yes. All interactive digital systems that directly connect to the net will have to licensed. Most

SSSCA = Digital Rectal Thermometer Security Act ?

2001-09-09 Thread Ronald L. Rivest
Hi all -- I just sat down and read the proposed text of the Holling's SSSCA bill. http://cryptome.org/sssca.htm Boy is this bill breathtaking in its breadth! I have tried to understand its language. It says in Section 101: It is unlawful to manufacture, import, offer to the

Re: Sen. Hollings plans to introduce DMCA sequel: The SSSCA

2001-09-09 Thread jamesd
-- On 10 Sep 2001, at 0:26, Jay Sulzberger wrote: All interactive digital systems that directly connect to the net will have to licensed. Most that do not connect directly will also have to be licensed. License costs will be high enough so that only a few large companies can afford

Re: Compression side channel

2001-09-09 Thread Ben Laurie
Peter Wayner wrote: b. I'm hoping to find out if anyone else has seen similar work anywhere. I've not been able to find any references to this kind of attack, though once you've had the idea to try it, it's really pretty straightforward. (And I know there are a couple of occasional