Excerpts from "The Design and Verification of a Cryptographic Security Architecture" available

2000-11-27 Thread Peter Gutmann
In August I finally submitted my PhD thesis, coming close to wrapping up my long career as a tenured graduate student. Although the work hasn't been accepted yet, there has been some interest expressed in portions of it so I've put a few chapters online. Note that these chapters represent a draf

Re: FBI copyright sting

2000-08-10 Thread Peter Gutmann
Harmon Seaver <[EMAIL PROTECTED]> writes: >>And TV is a big, big part of it. Greatest brain-washing tool ever >>invented. The scan line effect makes it absolutely hypnotic. >An article by a neurologist that I read years ago said that the human brain >essentially runs out of RAM when it's trying

Updated crypto RNG paper available

2000-06-13 Thread Peter Gutmann
I have released an updated version of my 1998 Usenix Security Symposium paper "Software Generation of Practically Strong Random Numbers", this version is more than twice as long as the original and includes a lot more information than there was room for originally. You can get it from http://www.

QNX crypt() broken

2000-04-15 Thread Peter Gutmann
I haven't seen this mentioned here before, but it looks like the people playing with the iOpener (effectively a $99 PC once you bypass a few hurdles set up by the manufacturer) have managed to reverse the QNX version of crypt(), which is a homebrew (and insecure) algorithm rather than a real c

Computers and Security special issue on KRAP

2000-04-11 Thread Peter Gutmann
For those wondering whether KRAP is still alive or not, the latest issue of Computers and Security (Vol.19, No.1, 2000) is a special issue on this topic, including coverage of functional models, common formats for interoperable KRAP and global KRAP interop mechanisms, KRAPifying the PKI (with ment

Re: X.BlaBla in PGP??? BWAHAHAHAHAHA!!!!

2000-03-06 Thread Peter Gutmann
"Phillip Hallam-Baker" <[EMAIL PROTECTED]> writes: >>FYI, according to outlook express you a mail message was signed but after >>clicking the security icon I am told that "You have turned off revocation >>checking." with no way of turning it on. As far as I'm concerned, the >>message is cryptogr