sci.crypt
  Home FAQ Contact Sign in
sci.crypt only
 
Advanced search
November 2006
motuwethfrsasuw
  12345 44
6789101112 45
13141516171819 46
20212223242526 47
27282930    48
2006
 Jan   Feb   Mar   Apr 
 May   Jun   Jul   Aug 
 Sep   Oct   Nov   Dec 
2008 2007 2006  
total
sci.crypt Profile…
RELATED GROUPS

POPULAR GROUPS

 Up
  Re: New RSA attack         


Author: Stratocaster
Date: Nov 20, 2006 20:48

antispam@att.net wrote:
> Stratocaster wrote:
>
>> Tom St Denis wrote:
>>
>>>Stratocaster wrote:
>>>
>>>>Sure Tom.Was the topic running your own code on someone elses machine
>>>>in order to spill out the naughty bits? 8^) I fail to see where my post
>>>>is off topic.
>>>>Perhaps I am just dumb.Carry on, I'll just make popcorn and watch.
>>>
>>>You mentioned the CIA and locking up secrets in safes. That has
>>>nothing to do with breaking RSA or even the typical usage of RSA.
>>
>>
>> In context with running your code on other peoples machines.In the
>> clases I attended, this was in a national security context.
>>
>>>RSA is used to sign things and share keys. If you want to keep a ...
Show full article (1.74Kb)
no comments
  Re: New RSA attack         


Author: Stratocaster
Date: Nov 20, 2006 20:27

Tom St Denis wrote:
> Stratocaster wrote:
>> Sure Tom.Was the topic running your own code on someone elses machine
>> in order to spill out the naughty bits? 8^) I fail to see where my post
>> is off topic.
>> Perhaps I am just dumb.Carry on, I'll just make popcorn and watch.
>
> You mentioned the CIA and locking up secrets in safes. That has
> nothing to do with breaking RSA or even the typical usage of RSA.

In context with running your code on other peoples machines.In the
clases I attended, this was in a national security context.
>
> RSA is used to sign things and share keys. If you want to keep a
> secret to yourself then a CONVENTIONAL SYMMETRIC CIPHER is the more
> appropriate cryptographic tool.
>
> I'm sorry if un-swordfishing the thread is offending you, but nobody is
> served by paranoid off-topic rantings.
>
Show full article (1.07Kb)
1 Comment
  Re: New RSA attack         


Author: Tom St Denis
Date: Nov 20, 2006 19:53

Stratocaster wrote:
> Sure Tom.Was the topic running your own code on someone elses machine
> in order to spill out the naughty bits? 8^) I fail to see where my post
> is off topic.
> Perhaps I am just dumb.Carry on, I'll just make popcorn and watch.

You mentioned the CIA and locking up secrets in safes. That has
nothing to do with breaking RSA or even the typical usage of RSA.

RSA is used to sign things and share keys. If you want to keep a
secret to yourself then a CONVENTIONAL SYMMETRIC CIPHER is the more
appropriate cryptographic tool.

I'm sorry if un-swordfishing the thread is offending you, but nobody is
served by paranoid off-topic rantings.

Tom
no comments
  Re: New RSA attack         


Author: Stratocaster
Date: Nov 20, 2006 19:50

Tom St Denis wrote:
> Stratocaster wrote:
>>> That sounds all l33t and all, except how do I order stuff off amazon
>>> with a credit card in a safe?
>>
>> I am not talking about such transactions.I realize I am not teaching
>> anything, but the point is that ever-more-complex networks are fine for
>> stuff like shopping.Perhaps you expect someone to go through intense
>> effort to take over someones machine in person for their credit card?I
>> would just put a gun to you and make you hand it over.
>
> Ok, well know this, the majority of practical users for crypto are NOT
> government users.
>
> When we talk about breaking RSA, it's usually in the context of how SSL
> is used. Hint: the paper mentions OpenSSL. So to say the solution to
> this RSA attack is to lock up your secrets...
Show full article (1.10Kb)
no comments
  Re: New RSA attack         


Author: Tom St Denis
Date: Nov 20, 2006 19:45

Stratocaster wrote:
>> That sounds all l33t and all, except how do I order stuff off amazon
>> with a credit card in a safe?
>
> I am not talking about such transactions.I realize I am not teaching
> anything, but the point is that ever-more-complex networks are fine for
> stuff like shopping.Perhaps you expect someone to go through intense
> effort to take over someones machine in person for their credit card?I
> would just put a gun to you and make you hand it over.

Ok, well know this, the majority of practical users for crypto are NOT
government users.

When we talk about breaking RSA, it's usually in the context of how SSL
is used. Hint: the paper mentions OpenSSL. So to say the solution to
this RSA attack is to lock up your secrets is off-topic and moot.

So how about we stay on topic?

Tom
no comments
  Fried Spam au Gratin         


Author: Twittering One
Date: Nov 20, 2006 19:42

"Point of View

Thanksgiving dinner's sad and thankless
Christmas dinner's dark and blue
When you stop and try to see it
>From the turkey's point of view.

Sunday dinner isn't sunny
Easter feasts are just bad luck
When you see it from the viewpoint
Of a chicken or a duck.

Oh how I once loved tuna salad
Pork and lobsters, lamb chops too
'Til I stopped and looked at dinner
>From the dinner's point of view."
~ Shel Silverstein
2 Comments
  Re: New RSA attack         


Author: Stratocaster
Date: Nov 20, 2006 19:40

Tom St Denis wrote:
> Stratocaster wrote:
>> Absolutely.Another issue that is relevant is spending millions for your
>> security and allowing your information that is sensitive to be accessed
>> from any point other than a direct pipe.Happens all the time.Stupid.I
>> recommend to clients that if you have sensitive information, boil it
>> down to absolutes, and keep it on paper in a safe, and make people
>> initial it when signing it out-like the CIA does.Too much work?Then you
>> arent serious about security, or your spending is out of line with the
>> secrets you want to keep.
>
> That sounds all l33t and all, except how do I order stuff off amazon
> with a credit card in a safe?

I am not talking about such transactions.I realize I am not teaching
anything, but the point is that ever-more-complex networks are fine for
stuff like shopping.Perhaps you expect someone to go through intense
effort to take over someones machine in person for their credit card?I
would just put a gun to you and make you hand it over.
Show full article (1.19Kb)
no comments
  Re: Irregular review procedures for IACR sponsored conferences         


Author: David Wagner
Date: Nov 20, 2006 19:21

no comments
  Re: New RSA attack         


Author: Tom St Denis
Date: Nov 20, 2006 19:19

Stratocaster wrote:
> Absolutely.Another issue that is relevant is spending millions for your
> security and allowing your information that is sensitive to be accessed
> from any point other than a direct pipe.Happens all the time.Stupid.I
> recommend to clients that if you have sensitive information, boil it
> down to absolutes, and keep it on paper in a safe, and make people
> initial it when signing it out-like the CIA does.Too much work?Then you
> arent serious about security, or your spending is out of line with the
> secrets you want to keep.

That sounds all l33t and all, except how do I order stuff off amazon
with a credit card in a safe?

...

I, for one, do NOT want to subscribe to your newsletter.

Tom
1 Comment
  Re: Irregular review procedures for IACR sponsored conferences         


Author: Scott Contini
Date: Nov 20, 2006 19:00

David Wagner wrote:
> Scott Contini wrote:
>>Wow, this is good stuff!
>
> I assume all of the quotes are made-up and false. Pretty cute, though.

I'm sure you're right...

But anyway this has been written up here:
http://ieeexplore.ieee.org/iel5/2/33102/01556500.pdf?arnumber=1556500
no comments
1 2 3 4