[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: A Snake-Oil FAQ



-----BEGIN PGP SIGNED MESSAGE-----

On Sun, 21 Jul 1996, Simon Spero wrote:

> Date: Sun, 21 Jul 1996 16:05:59 -0400 (EDT)
> From: Simon Spero <[email protected]>
> To: David Sternlight <[email protected]>
> Cc: The Deviant <[email protected]>,
>     Deranged Mutant <[email protected]>, [email protected]
> Subject: Re: A Snake-Oil FAQ
> 
> [sorry Perry]
> 
> On Sun, 21 Jul 1996, David Sternlight wrote:
> 
> > So is your comment. What was broken was not public key, but a particular
> > key length (and by implication shorter ones). You can do that with just
> > about any system, even a one-time pad, by brute force, but it won't buy you
> 
> Really? The only way I know of forcing a one-time pad is to use a hardware
> QM-based random number generator to generate every possible decrypt, thus
> creating a number of universes equal to the number of possible keys. Since
> you can't tell if you're universe is the right one, one should always
> verify the information obtained against a second source. IANAL, so I can't
> say if such a decrypt would count as probably cause. 
> 
> Simon
> 

Yes, but this is even more un-revealing than the OTP'd message, cause now
you have a list of messages that say

Nuke Siam.
Nuke Ohio.
Nuke Hell.
Nuke Shit.

and so on and so forth, and any of them could be right.
Its better just to rely on other techniques (physical key compromise, etc)
than to have the _complete_ list of possibilities on OTP...

> ---
> Cause maybe  (maybe)		      | In my mind I'm going to Carolina
> you're gonna be the one that saves me | - back in Chapel Hill May 16th.
> And after all			      | Email address remains unchanged
> You're my firewall -    	      | ........First in Usenet.........
					^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
					Umm... that would be Duke, next
					door in Durham...

					Of course, I'm an NCSU fan anyway,
					but...

 --Deviant


-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQEVAwUBMfKYgjAJap8fyDMVAQEHugf/QWCkRVsP4TYEUIp6ImA4NyDtnOCoI3qe
pGWvcEC/4qbuwXnYJR9yO+OSQ3Kh0zYOzhLxKCPwVHtm8uwjaELxSUD7qGJOVRU5
4rw/envcubQ+hYxzxIkPZnq7tosJpDp9mNZOLcwhmE+g4oAMv6dKMJautqB737CE
5AWQU2+Nb2/HQ7ZUSNae/CCDjZRVnTSbuKapCCz5YaYk7QwIOK2komVKmA1fI8xi
zLhdBagoS5Gtnt5nxnlHM+Gv57wxXZABJ4+woDbgr5/4grHkYW5Or3lqyNqV271A
gvGkxYE6eO9IJH50Ryf8eTXLU4J81iGxDLglM3KlgF4hdWi8RnRvUw==
=/egV
-----END PGP SIGNATURE-----