Re: Quoting Anne Coulter is like...

2003-06-20 Thread Patrick Chkoreff
From: Tim May <[EMAIL PROTECTED]> ... Another CNN guy, Aaron Brown, is actually refreshing in his laidback, Charles Kuralt-style slow examination of an issue...I ought to Tivo his show.) Yesterday I caught Keith Olberman's show on MSNBC when he was announcing that Fox News will be hiring Dennis M

Re: COWed news networks not showing Baghdad market dead

2003-03-29 Thread Patrick Chkoreff
Status: RO Date: Fri, 28 Mar 2003 11:42:41 -0800 Subject: COWed news networks not showing Baghdad market dead From: Tim May <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Sender: [EMAIL PROTECTED] I'm scanning all four COWed networks--CNN, Fox, MSNBC, CNBC--for images from the downtown Baghdad market an

Washing sensitive data

2003-02-28 Thread Patrick Chkoreff
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Friday, February 28, 2003, at 01:03 AM, Jeroen C. van Gelderen wrote: > Incidentally, the correct and portable (modulo compiler bugs) approach > at the language level is to mark the array volatile. This means that > stores to the array cannot be

Wash the key, don't clear it

2003-02-27 Thread Patrick Chkoreff
On Friday, February 28, 2003, at 01:03 AM, Jeroen C. van Gelderen wrote: On Friday, Feb 28, 2003, at 00:50 US/Eastern, Jeroen C. van Gelderen wrote: You are going trough a lot of trouble. What is your threat model? Incidentally, the correct and portable (modulo compiler bugs) approach at the lan

Fwd: [dgc.chat] Yes, I really did zeroize that key

2003-02-27 Thread Patrick Chkoreff
, Feb 27, 2003, at 23:18 US/Eastern, Patrick Chkoreff wrote: void clear_bytes(char magic, char p[], int n) { int i; p[0] &= magic; for (i = 0; i < n-1; i++) { p[i+1] &= p[i]; for (i = 0; i < n; i++) if (p[i] != magic) exit(magic); } Wel

Yes, I really did zeroize that key (good sig this time I think)

2003-02-27 Thread Patrick Chkoreff
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 (My PGP client botched the signature last time when I used the clipboard method. This time I'm using the plugin button and it should work. Stupid GUI crap.) I have devised what I believe to be a foolproof and completely portable way of setting an

Yes, I really did zeroize that key

2003-02-27 Thread Patrick Chkoreff
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I have devised what I believe to be a foolproof and completely portable way of setting an array of bytes to all zeroes, a common security operation in cryptography programs. void clear_bytes(char magic, char p[], int n) { int i; p[0] &= magic;

Re: Degenerate Political Pressure (was RE: The Wimps of War)

2003-02-14 Thread Patrick Chkoreff
On Thursday, February 13, 2003, at 05:45 PM, R. A. Hettinga wrote: Heck, go read some Patrick O'Brien Jack Aubrey Books. The Royal Navy earned its own keep with prizes, etc., until long after the Napoleonic wars... Come to think of it, the rise of book-entry settlement cooincides nicely with the

Re: Did you *really* zeroize that key?

2002-11-08 Thread Patrick Chkoreff
At 02:22 PM 11/8/2002 +, Vincent Penquerc'h wrote: while (!is_all_memory_zero(ptr)) zero_memory(ptr); Right, unfortunately the compiler might be insightful enough just to optimize that whole thing to skip() -- Dijkstra's null statement. Even Welschenbach calls "ispurged" immediately afte

Re: Did you *really* zeroize that key?

2002-11-08 Thread Patrick Chkoreff
At 02:22 PM 11/8/2002 +, Vincent Penquerc'h wrote: On Fri, Nov 08, 2002 at 08:35:06AM -0500, Patrick Chkoreff wrote: > That's an interesting idea. You'd take the pointer returned by alloca and > pass it to memset. How could the optimizer possibly know that the poin

Re: Did you *really* zeroize that key?

2002-11-08 Thread Patrick Chkoreff
At 10:20 AM 11/8/2002 +, Vincent Penquerc'h wrote: On Thu, Nov 07, 2002 at 07:36:41PM -0500, Patrick Chkoreff wrote: > Everybody probably also knows about the gnupg trick, where they define a > recursive routine called "burn_stack": [...] > Then there's the

Re: Did you *really* zeroize that key?

2002-11-07 Thread Patrick Chkoreff
From: "Trei, Peter" <[EMAIL PROTECTED]> [Moderator's note: FYI: no "pragma" is needed. This is what C's "volatile" keyword is for. Unfortunately, not everyone writing in C knows the language. --Perry] Thanks for the reminder about "volatile." It is an ancient and valuable feature of C and I su

Re: Did you *really* zeroize that key?

2002-11-07 Thread Patrick Chkoreff
From: "Trei, Peter" <[EMAIL PROTECTED]> [Moderator's note: FYI: no "pragma" is needed. This is what C's "volatile" keyword is for. Unfortunately, not everyone writing in C knows the language. --Perry] Thanks for the reminder about "volatile." It is an ancient and valuable feature of C and I su