Re: [Full-disclosure] Skype chat encryption with OTR

2008-06-20 Thread Tonnerre Lombard
Salut, JM, On Thu, 19 Jun 2008 08:55:01 -0500, JM wrote: Actually, the shared keys are *published* once they're discarded to improve plausible deniability. That lets anyone forge an *old* message, but ensures you wont' accept a forged message during the course of the conversation. Oh, hm,

Re: [Full-disclosure] Skype chat encryption with OTR

2008-06-19 Thread Fabio Pietrosanti (naif)
Are you willing to trust skype encryption for your own confidential material? It obviously depend on the risk context and trust scenario. I would never send any confidential material over a skype chat but only over a channel where i have independent control over the information encryption.

Re: [Full-disclosure] Skype chat encryption with OTR

2008-06-19 Thread Tonnerre Lombard
Salut, rawket, On Thu, 19 Jun 2008 13:00:49 +1000, rawket wrote: /There is no denying that an OTR Conversation has been encrypted.. Its because the private keys change ultra-frequently, and the keys are short lived that it provides the 'plausible deniability' Not exactly. The plausible

Re: [Full-disclosure] Skype chat encryption with OTR

2008-06-19 Thread Eliah Kagan
On Thu, 19 Jun 2008 13:00:49 +1000, rawket wrote: /There is no denying that an OTR Conversation has been encrypted.. Its because the private keys change ultra-frequently, and the keys are short lived that it provides the 'plausible deniability' On Thu, Jun 19, 2008 at 2:28 AM, Tonnerre

Re: [Full-disclosure] Skype chat encryption with OTR

2008-06-19 Thread rawket
There are voice encryption protocols already Fabio, you should get a STU-III Phone then call the Whitehouse. tell them to go secure lol. Or try it from another phone and then listen to the line noise you will get Tonnerre: Hello :) - I have skimmed over the OTR Documents, Cryptology

Re: [Full-disclosure] Skype chat encryption with OTR

2008-06-19 Thread Fabio Pietrosanti (naif)
rawket wrote: There are voice encryption protocols already Fabio, you should get a STU-III Phone then call the Whitehouse. tell them to go secure lol. mmm yes but respect STU-III (http://en.wikipedia.org/wiki/STU-III) to talk to the Whitehouse would be better to use a SCIP compatible

Re: [Full-disclosure] Skype chat encryption with OTR

2008-06-19 Thread I)ruid
On Thu, 2008-06-19 at 10:20 +0200, Fabio Pietrosanti (naif) wrote: Or we could use some terrorist-oriented technology like steganography with RTP! http://druid.caughq.org/presentations/Real-time-Steganography-with-RTP.pdf Wow, and here I thought that caughq people are just kiddies that no one

[Full-disclosure] Skype chat encryption with OTR

2008-06-18 Thread Fabio Pietrosanti (naif)
For all you OS X guys that like skype because of it's usability but are concerned about the lacks of and end-to-end message encryption system (a plug-in for skype). Today i tried: #1 Get and install Adium (I suggest portable adium in a separated filevault volume)

Re: [Full-disclosure] Skype chat encryption with OTR

2008-06-18 Thread Ureleet
isnt skype encrypted anyway? On Wed, Jun 18, 2008 at 5:11 AM, Fabio Pietrosanti (naif) [EMAIL PROTECTED] wrote: For all you OS X guys that like skype because of it's usability but are concerned about the lacks of and end-to-end message encryption system (a plug-in for skype). Today i tried:

Re: [Full-disclosure] Skype chat encryption with OTR

2008-06-18 Thread rawket
Yeah its encrypted, Public AND Private keys are stored on Skype's server. Although this is great, and provides the user with an encrypted conversation (voice or text) wherever he/she is in the world - it means all the keys are stored in 1 location and can be intercepted by either Skype or the