sci.crypt
  Home FAQ Contact Sign in
sci.crypt only
 
Advanced search
July 2008
motuwethfrsasuw
 123456 27
78910111213 28
14151617181920 29
21222324252627 30
28293031    31
2008
 Jan   Feb   Mar   Apr 
 May   Jun   Jul   Aug 
 Sep   Oct   Nov   Dec 
2008 2007 2006  
total
sci.crypt Profile…
RELATED GROUPS

POPULAR GROUPS

more...

 Up
  Ping: Greg Rose on eSTREAM, his NLS algorithm, and a general question about other streaming candidates, please.         


Author: fortune.bruce
Date: Jul 13, 2008 14:51

Greg,

I notice something that is very interesting to me, and maybe I need to
do some additional work on my own, but I'm going to try to sleaze past
that by asking you.

http://www.ecrypt.eu.org/stream/endofphase3.html

Sometime when Nessie streaming project became eSTREAM, it seems all
candidates have abandoned the function of authentication (MAC, HMAC,
etc).

Apparently, the task of including that is either insanely difficult,
or all of you are dropping that in the interest of performance. Am I
missing something?

Your comments and anyone else (Mr. Goldstein of Salsa20 particularly)
would be off the hook.
5 Comments
  Ping: David Scott "biject" regarding behavior of text in "Perfect Privacy", please.         


Author: fortune.bruce
Date: Jul 11, 2008 17:04

http://www.permanentprivacy.com/how-it-works.htm

Mr. Scott,

This looks like something to defer to a text expert like you.
Perhaps this is a product of bijective behavior?

They (PP) claim that they process the text/data prior to encrypting
with AES such that even if you have brute forced the key to give the
correct blob of plaintext/data, you will not be able to discern the
correct set of text/data and that one page of text, if brute forced
will produce among zillions of pages of garbage, also it will produce
every page of data ever written.

They got Peter Schweitzer of Harvard to check out their method
(possibly implementation, etc...) who, according to Mr. Robert
Silverman "Pubkeybreaker" is a Harvard undergrad who has cryptographic
expertise.

This product uses language that everyone, including myself, brands as
"snake oil".

I just wonder what your take is on their treatment of plaintext prior
to encryption.

Thank you.
19 Comments
  Security '08 Early Bird Registration Deadline: July 14         


Author: Lionel Garth Jones
Date: Jul 11, 2008 15:58

I'm writing to remind you that the Early Bird Registration Deadline for the
17th USENIX Security Symposium is Monday, July 14, 2008. Register today
to save.

http://www.usenix.org/sec08/progc

USENIX Security '08, taking place July 28-August 1, 2008, in San Jose,
CA, will
help you stay ahead of the game by offering cutting-edge research on
topics ranging from Web security through network defenses to
cryptographic keys and more.

* The USENIX Security '08 training program can help you learn the
latest on topics such as:

-- Botnets: Understanding and Defense

-- Computer Forensics

-- Understanding and Deploying Trusted Hardware

Experts such as Bruce Potter, Simson Garfinkel, Radu Sion, and Sean
Smith will give you the information, techniques, tools, and
strategies you need to practice effective security today--and
tomorrow.
Show full article (3.22Kb)
no comments
  Current status of RSA and RC4?         


Author: Russell Robinson
Date: Jul 10, 2008 23:38

Hi,

I just wanted to know the current cryptographic status of both RSA and RC4.

I note that they are still in use in SSL with browsers.

Firefox uses AES for the asymmteric encryption, but IE7 still uses RC4.

W.r.t RSA, I seem to remember some talk about a break through in factoring,
but I was hoping a current cryptographer around here could give a quick
summary.

Thanks!

--
regards,
Russell Robinson
3 Comments
  New Newsgroups         


Author: Mehran Basti
Date: Jul 10, 2008 21:20

Dear Newsgroup:

I have Basti Newsgroups listed on Google site.

These are experimental sites on Google and once we have sufficient
members we will transfer it to the private site and charge a fee.

Please inform me what particular site you like (with no fee), I will
open up the site (public or not).

Please see the following site for enrolment procedures:

http://groups.google.com/group/MBform

Dr.M.Basti
2 Comments
  Symposium "Image Processing and Data Visualization" within the SEECCM 2009, Greece - Announce & Call for Papers         


Author: tavares
Date: Jul 10, 2008 10:01

(Our apologies for cross-posting.
We appreciate if you kindly distribute this information by your co-
workers and colleagues.)

***************************************************************************

Symposium ā€œImage Processing and Data Visualizationā€
2nd South-East European Conference on Computational Mechanics (SEECCM
2009)
Island of Rhodes, Greece, 22-24 June 2009
http://www.seeccm2009.org
(A special interest conference of the European Community on
Computational
Methods in Applied Sciences (ECCOMAS) and of the International
Association
for Computational Mechanics (IACM))

***************************************************************************

Dear Colleague,
Show full article (3.11Kb)
no comments
  Re: Major DNS flaw found and addresed         


Author: Ari
Date: Jul 9, 2008 23:37

On Wed, 9 Jul 2008 21:16:05 -0700, Mike Easter wrote:
> Johnw wrote:
>
>> As Ari says, been around a long time, best way way to now to inform
>> yourself, is by googling.
>> DNS Cache Poisoning
>>
> http://www.google.com.au/search?hl=en&q=DNS+Cache+Poisoning&btnG=Search&me
> ta=
>
> The wiki has a good article on dns cache poisoning, but it needs to be
> updated with the recent fix, which this thread is about.
>
> As it is, one would have to hit the wiki twice
>
> http://en.wikipedia.org/wiki/Dns_cache_poisoning
> http://en.wikipedia.org/wiki/Dan_Kaminsky

Those that would like, you can check the veracity of your DNS server
using Dan's website
Show full article (1.04Kb)
1 Comment
  Notice how tha RIAA MPAA Shill ran away?         


Author: me
Date: Jul 9, 2008 03:02

RIAA and MPAA hire these pathetic shills to post to newsgroups and
blogs telling us that we can't make backups of our software DVDs,
that we can't rip a song off the music CD we just paid full price
for to play on our MP3 player while jogging, etc., etc. All bogus.
When you expose these slimeballs for what they are, they crawl back
under a rock and you never hear from them again. Morons.

"You say you want the power to time-shift and space-shift TV
and radio? You say you want tomorrow's innovators to invent
new TV and radio gizmos you haven't thought of yet, the same
way the pioneers behind the VCR, TiVo, and the iPod did?

"Well, that's not what the entertainment industry has in mind.
According to them, here's all tomorrow's innovators should
be allowed to offer you:

"customary historic use of broadcast content by consumers
to the extent such use is consistent with applicable law."

"Had that been the law in 1970, there would never have been a VCR.
Had it been the law in 1990, no TiVo. In 2000, no iPod.

http://www.eff.org/deeplinks/2006/01/new-senate-broadcast-flag-bill-would-freeze...
Show full article (2.61Kb)
no comments
  quizz         


Author: Mido
Date: Jul 8, 2008 12:56

Hi,
well it's a quizz that i had in some security course in uni but i
couldnt and no one could help solving it so far!!
and here is the quizz

Alice >> Bob:
65537,376781096648655171476075046480384036003069767135878367046892404899787642486409
Bob >> Alice:
282833517591435239342270053773279218579315796727277426826963893552262154129057
03846548...
Show full article (1.70Kb)
4 Comments
  simplest asymmetric algorithm         


Author: Slayer
Date: Jul 7, 2008 15:57

Hi, I was wondering what can be the simplest asymmetric algorithm
around, for "educational purposes", not meant to protect important data
but more on understanding all the steps involved. I would like then to
implement all of this in a FPGA-style hardware implementation, where the
resources are limited.

Thank you
13 Comments
1 2