full-disclosure - Re: ... endpoint security, strong encryption

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Thu, 17 Oct 2013 22:55:52 -0700
From: coderman <coderman@...il.com>
To: catsandd0gz.dinosaursandwh0res@...hmail.com, 
 Full Disclosure <full-disclosure@...ts.grok.org.uk>,
 cpunks <cypherpunks@...nks.org>
Subject: Re: ... endpoint security, strong encryption

On Thu, Oct 17, 2013 at 10:03 PM, coderman <coderman@...il.com> wrote:
>...
> 2. strong encryption ...

the practical uses are not just authenticity and privacy, but also
censorship avoidance and other availability improvements; c.f.:

"Lightweight Obfuscated Datagram Protocol (LODP)"
  https://lists.torproject.org/pipermail/tor-dev/2013-August/005334.html

"Elligator [...] introduces a new solution: an encoding for points on
a single curve as strings indistinguishable from uniform random
strings."
  http://elligator.cr.yp.to/

encryption for privacy of data at rest can almost be considered a
subset of the problem of encryption for privacy of communication as
above.

and all of the above hinge critically upon effective key management
and usability! which are the things you're most likely to screw up
inconspicuously and completely.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/