[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: Private key server
Gary Howland[SMTP:[email protected]] wrote:
[email protected] wrote:
>
> On Wed, 18 Sep 1996, Gary Howland wrote:
>
> > If you really want this functionality, a nicer solution is to use your
> > passphrase as a seed to the key generator - that way you never need
>
> So much for entropy. If you can actually remember your seed generator,
it
> can't be that random, can it?
I don't know about you, but I can certainly remember enough bits to be
secure. The fact that passphrases are so widely used goes to show that
I'm not the only one that can do this.
[Darth Vader voice:] "Don't overestimate the entropy of your passphrase"
Let's see, 128 bits (say) of info, mapped comfortably into the upper case
letters and digits (5 bits/char), means a string of about 26 *really
random* characters. An example might be "KQI8CH49SCK3PKWNA37AYV9QJ5". If
that just rolls off your toungue, you have my respect (and I have pi
memorized to 110 decimal places!) This assumes a full 5 bits of
entropy/character. If your passphrase is more coherent (i.e., less
entropy) than that, like "Strange kr0ws fly 1azily at MIDnight", it almost
certainly contains _far_ less entropy than that. 128 bits of truly
arbitrary (random) info is a fair amount of information to comfortably
remember.
Mind you, I think a properly constructed passphrase (like the one above) is
pretty darn resistant against any sort of reasonable dictionary or
quasi-brute force attack. But I don't think it's got anywhere near, say,
128 bits of entropy. Probably closer to half that.
Anyway, the point I was making that this method would be preferable to a
"secret key server". My proposal would offer the same security, would
it not?
(The secret key server is arguably less secure than generating keys from
passphrases, since key generation takes longer than IDEA decryption -
however, they are still of the same order).
Using a pass phrase to seed key generation (or more directly, using the
hash of a pass phrase as a key) does not increase the entropy, of course.
Not sure if this is relevant to your claim, as I've sort of lost track of
the original context!
Best regards,
Gary
Tunny
======================================================================
James A. Tunnicliffe | WWWeb: http://www.inference.com/~tunny
Inference Corporation | PGP Fingerprint: CA 23 E2 F3 AC 2D 0C 77
[email protected] | 36 07 D9 33 3D 32 53 9C
======================================================================
begin 600 WINMAIL.DAT
M>)\^(BH6`0:0" `$```````!``$``0>0!@`(````Y 0```````#H``$(@ <`
M& ```$E032Y-:6-R;W-O9G0@36%I;"Y.;W1E`#$(`06 `P`.````S <)`!,`
M#P`"`"<`! `K`0$@@ ,`#@```,P'"0`3``\``@`H``0`+ $!"8 !`"$```!#
M14-"1C@T1#)$,3)$,#$Q.3,P-C P04$P,$$U1C8P1 `L!P$-@ 0``@````(`
M`@`!!( !`!<```!213H@4')I=F%T92!K97D@<V5R=F5R`.P'`0.0!@#D"@``
M&@````,`)@```````P`V```````>`' ``0```!,```!0<FEV871E(&ME>2!S
M97)V97(```(!<0`!````&P````&[ID2E\4WXRWL2+1'0DP8`J@"E]@T``$$D
MNP`#`"X```````,`!A"7!9D@`P`'$-D'```>``@0`0```&4```!'05)92$]7
M3$%.1%--5% Z1T%264!365-414U)0U-#3TU74D]413I&15-414U!0$%,0T]2
M0T].0T]21$E!0T%74D]413I/3E=%1"PQ.%-%4#$Y.38L1T%264A/5TQ!3D17
M4D]4``````,`$! ``````P`1$ `````"`0D0`0```-0'``#0!P``GPT``$Q:
M1G7 ,,# _P`*`0\"%0*D`^0%ZP*#`% 3`U0"`&-H"L!S973N,@8`!L,"@S(#
MQ@<3`H/&,P/%`@!P<G$2(!.(]C0/?Q"'-10_!T 'L K E0-@=P*#-A,/9C<$
M1KD4HS$@"%4'L@*#.!=\H0:P<W1E;0*#.036P12E0G)U<V@&``4$O$U4$,0/
M9A2E%DU]"H"+",\)V3LC/S(U-0* IPJ!#;$+8&YG(' S%"!!"P-L:3$T- +1
M:7XM)R,,T"<C"U44(@P!8ZL`013 ;QVP8P5 1PK &'D@2!CP)B%D6U.1( !0
M.F<J$4!S'9.0:6-S+@6@;5TH7^D;<"!W*9(Z+%\I: J+>2<`,S8H1QEB# $I
MAF;F7P>0';%A0 = !:$L`=IN!:%D!S L`&$MA0J%5CXOEC3 3P.@5PF +"@@
M,3@&47 UX#DY/C8UT"H*,^\X!C3 26:T('D(8" C0 = ;"HP9G<`< 5 =&@$
M`#(@=1DS0'1I`B '0&ET>5<UT#/0`P!C&^%S!O!U13KR(#J!=&\@'U!E'3E2
M<CB)"K $$'!H<O\^4#TP/E [D1'P"8 \TCI@:3TP:V4J,&<)\ 208?L\X 7
M+3I10) Z`2HP.6+]0&!V&^% 8 F -_\&`#SPO&UU$; R( 6Q"?!T`V!X<'DN
M.28SP .@`-!T_G4YPR- !X &T!OA/5(_--] 1S70.U!"=T51)P5 1G!_0/0^
MH"J@`W UT$52.U _,PJ%"H5)($G 2-)K;K\8\#N0!N \4#E2-=!B3&'_2V!%
M4COA`9 +@$7Z"? (8/IG'W!B.U \PT9P"H41\$IC"'!E1, @5#_19G]%D4#T
M/D@_`2- /!$M@&GO#; YX3T11S%O!Y$\X1]@YTP!00)*]B=M.[ IH#^S?P(@
M.>$"($DE15))P#I3+I\*CPN1$O(M%5=U6T0*P!$Z8"!6802!('9O03O1.ET@
M(D1+DV__0?$R40=P0)!)(CTP1%55P%<Y0P7 /D@B2HQ,$@`G-P0@/T$UT3(V
M`$\C*'-]06 I71(+@ (0-= `P'#^<#]A+!%$$0&1.>$+@#^5WG5A@07 ,\ ]
M(6P2`!VPKQ'@.Y W83. 9V S-4\3^B\1LBEA03FP!C$_(41P#0N 9UT23#0R
M-B J^SFE290J14 1P4619!%0D<)!`Z!E>&%M"U ], <KP$[P2/,B2U%). !#
M2#0Y4T-+,P!02U=.03,W08!95CE12C4B4)&[.3%!`VH?4$EQ!O!L!"#O72!=
[email protected]!G"E UT#EBOQ' 0?!#L$8"/G IPB@W4G-+8&\S<&EEX01@!1!Z_3]D
M,2!P2W %D%P!`R +47D[X',A8+!0L3J!/E%U[P>",] ZL#G0(&4471)$5?]E
M<VCC;'1=73RB<4$], 6@QS_0(T Z,2AI+E" -=#_8] $$4158+!!`0.@00)Y
M`79I0 !;$%-$<"8Q/^%RC#!W.I$YX3%A>@,08RHP02%-240#`&I!(OM'XCN0
M; 1@;4%-B#,A3;+E!"!?40!R7WD;>?A0D=]?YUTA1'!T4'R!<D\A/J#]*B$H
M291@L&$"/*)T(0MPWP7 :<!N<5MQ8.1R7!$\<M\\X6':1B979E=U30N -W#G
M3)-+8#IA;FL[D2F!8T&_?I1F<4/0'; W<#Y)*'JS_U64/M$&X$'P@W$$(!3
M8^']*C!D"L #H%O!! `!D#HQ[F$K('\1?9%N*C \( `@_UT2.:$\(#L@`F ]
M,#. .N2;*B$%L7%%P "0+6(?0)]<,401.^!\D0&08VM0D?Y"3/-+A(D$.U!?
M85.0CL/^=WA"0<$*P#708(%?R74(U5"14 -@8F)#8R+0$?#[;D)O(6QLM%=L
M,'\QB5=U[VEPE+"5DC_"<%JP.C%+8/,Z$'>Q86MFHD$#.F,'@.\Z8 1P+8 (
M8&PW<$D1C0&N9D!QD!(\X6%7=2)0,=^-$3_SE_%!\6QB32HPB8+_?> 8@9\$
M;=&8`C_18( '@']0)#M3GP-7=7V!55%*?2CW4,*A#X/3<FZ@8D-Y(U T_WGT
M0$5FHD !.I$#85=U4:G_E6$+@)(A0 F%HYV0!Y$BT,][4:.R`Y%\X$5!<B(J
M(/L%,#QR+5=U5"%!XIQC@D)_4H$Z\'1A@=*CYC-A!) I]U=O6'^SDU6LT6;
MB6$^4=\^,#Z44^(_4JT]* 6Q=]/_,X C0"G0.> UT!]0G;0],/\1P!]A9N*V
M2S[S0 %@L$G _P>155*LX8^B7$LUT%TA!:#W"' 1\%"13E5A<\!2<0:0[SI4
M.H$C0&/0=CHC//!&L_^7P MP2>$^\540;U&/)I?1_SI!:-&)0+)%<5%DL#LA
M?K.Y::!T(4J,F7^:CT(R4?LYD2LA9*R@2HPJ`K-_M(_]RA)4.L".\,GO"Y$:
MD3%Z7CW.S\_?T._1_SW,E2#^2J0A$V%$P,Q"*] G`*.!&2UP('PUD-4P96(Z
M@V\@`D!P.B\O=]80GBYA`7A2.^ L`B]^1;#OS&@Y(-9F&X%RG,"MM=4!X%!'
M4"!&9J$$D!3 %V*1U8 M<$.O<#(S($I%$B!&VQ!!0V=@1&0@,-N@-S?3)M=#
M0/_8%RP"U.'5`=Y/+7#&4-O@L#<@1#G?<-L0,]O0RC,2(#7;$#E#S)72'[_B
M;^-_Y(_3!\R5(F$`YN! `#D`\#\O1G:FNP$#`/$_"00```(!1P`!````,@``
M`&,]55,[[email protected] ]26YF97)E;F-E.VP]3$%.1%)5+3DV,#DQ.3(R,#(S.5HM
M,34U,C8````"`?D_`0```$H`````````W*= R,!"$!JTN0@`*R_A@@$`````
M````+T\]24Y&15)%3D-%+T]5/4Y/5D%43R]#3CU214-)4$E%3E13+T-./515
M3DY9````'@#X/P$````5````2F%M97,@02X@5'5N;FEC;&EF9F4``````@'[
M/P$```!*`````````-RG0,C 0A :M+D(`"LOX8(!`````````"]//4E.1D52
M14Y#12]/53U.3U9!5$\O0TX]4D5#25!)14Y44R]#3CU454Y.60```!X`^C\!
M````%0```$IA;65S($$N(%1U;FYI8VQI9F9E`````$ `!S!@L\PQ1J:[`4 `
M"## A(]&=J:[`0,`#33]/P```@$4- $````0````5)2AP"E_$!NEAP@`*RHE
M%QX`/0`!````!0```%)%.B `````"P`I```````+`",```````(!?P`!````
M40```#QC/553)6$]7R5P/4EN9F5R96YC925L/4Q!3D1252TY-C Y,3DR,C R
M,SE:+3$U-3(V0&QA;F1R=2YN;W9A=&\N:6YF97)E;F-E,BYC;VT^``````>;
`
end