Re: [liberationtech] One time pad Management system?

2014-11-12 Thread Scott Elcomb
On Fri, Jul 12, 2013 at 10:38 AM, Eugen Leitl wrote: > On Fri, Jul 12, 2013 at 07:23:17AM -0700, Bill Woodcock wrote: >> >> On Jul 12, 2013, at 7:15 AM, Eugen Leitl wrote: >> > I would be very interested in hardware recommendations for >> > an affordable, high-quality hardware RNG (ideally someth

Re: [liberationtech] One time pad Management system?

2013-07-19 Thread Sandy Harris
Paul Elliott wrote: > Given a secure communications channel for key exchange, > OTPs are absolutely unbreakable. Against some attacks, yes. However, unless authentication is used as well, they have absolutely no resistance to a rewrite attack: http://en.citizendium.org/wiki/Stream_cipher#Rewrit

Re: [liberationtech] One time pad Management system?

2013-07-12 Thread Paul Elliott
On Fri, Jul 12, 2013 at 04:15:22PM +0200, Eugen Leitl wrote: > On Thu, Jul 11, 2013 at 08:12:32PM -0500, Paul Elliott wrote: > > Are there any practical one time pad management systems out there, > > GPLed for GNU/Linux? > > The biggest problem of one-time pads is their generation. > You need a pr

Re: [liberationtech] One time pad Management system?

2013-07-12 Thread Eugen Leitl
On Fri, Jul 12, 2013 at 07:23:17AM -0700, Bill Woodcock wrote: > > On Jul 12, 2013, at 7:15 AM, Eugen Leitl wrote: > > I would be very interested in hardware recommendations for > > an affordable, high-quality hardware RNG (ideally something > > like VIA Padlock RNG). > > We use these: > > http

Re: [liberationtech] One time pad Management system?

2013-07-12 Thread Bill Woodcock
On Jul 12, 2013, at 7:15 AM, Eugen Leitl wrote: > I would be very interested in hardware recommendations for > an affordable, high-quality hardware RNG (ideally something > like VIA Padlock RNG). We use these: http://www.entropykey.co.uk Cheap in bulk. -Bill

Re: [liberationtech] One time pad Management system?

2013-07-12 Thread Eugen Leitl
On Thu, Jul 11, 2013 at 08:12:32PM -0500, Paul Elliott wrote: > Are there any practical one time pad management systems out there, > GPLed for GNU/Linux? The biggest problem of one-time pads is their generation. You need a properly whitened and reviewed hardware entropy source for that, which is

Re: [liberationtech] One time pad Management system?

2013-07-12 Thread Paul Elliott
On Thu, Jul 11, 2013 at 08:27:55PM -0700, h...@riseup.net wrote: > What is a "One Time Pad" management system? A text file? > > Also, why do you want to use a OTP? There are pretty good reasons not to > use one which a book on cryptography will be able to explain to you. > > Also, I don't think t

Re: [liberationtech] One time pad Management system?

2013-07-11 Thread Andy Isaacson
S/Key is a one time password system. onetime is a one-time-pad encryption implementation. Both interesting, but very different. -andy On Thu, Jul 11, 2013 at 11:20:33PM -0700, John Adams wrote: > Uh. S/key is a one time pad system that came out over 20 years ago and is > open source. > > Sen

Re: [liberationtech] One time pad Management system?

2013-07-11 Thread John Adams
Uh. S/key is a one time pad system that came out over 20 years ago and is open source. Sent from my iPhone On Jul 11, 2013, at 8:36 PM, Andy Isaacson wrote: > On Thu, Jul 11, 2013 at 08:12:32PM -0500, Paul Elliott wrote: >> Are there any practical one time pad management systems out there, >>

Re: [liberationtech] One time pad Management system?

2013-07-11 Thread Karl Fogel
Paul Elliott writes: >Are there any practical one time pad management systems out there, >GPLed for GNU/Linux? > >Is anyone working on one? > >If not, does anyone want to start? > >Thank You for considering this question. http://red-bean.com/onetime I'm actively working on v2 and hope to have

Re: [liberationtech] One time pad Management system?

2013-07-11 Thread hack
Hi Andy, Wow, so there is actually a use for this? What sort of things are OTP's used for? The only application I've heard of is on satellites when they need to do key rotation. I sort of hastily assumed whoever was asking the question didn't understand the practicality of OTPs and now I think i

Re: [liberationtech] One time pad Management system?

2013-07-11 Thread Andy Isaacson
On Thu, Jul 11, 2013 at 08:12:32PM -0500, Paul Elliott wrote: > Are there any practical one time pad management systems out there, > GPLed for GNU/Linux? I don't know of any but would be interested to learn of one. > Is anyone working on one? I started sketching some design ideas a few months ag

Re: [liberationtech] One time pad Management system?

2013-07-11 Thread hack
What is a "One Time Pad" management system? A text file? Also, why do you want to use a OTP? There are pretty good reasons not to use one which a book on cryptography will be able to explain to you. Also, I don't think this list is perhaps the best place to ask these questions. Perhaps try the Cr

Re: [liberationtech] One time pad Management system?

2013-07-11 Thread Brad Beckett
I am interested in a decent one time pad management system myself. On Thu, Jul 11, 2013 at 6:12 PM, Paul Elliott wrote: > Are there any practical one time pad management systems out there, > GPLed for GNU/Linux? > > Is anyone working on one? > > If not, does anyone want to start? > > Thank You f

[liberationtech] One time pad Management system?

2013-07-11 Thread Paul Elliott
Are there any practical one time pad management systems out there, GPLed for GNU/Linux? Is anyone working on one? If not, does anyone want to start? Thank You for considering this question. -- Too many emails? Unsubscribe, change to digest, or change password by emailing moderator at compa...@s