full-disclosure - RE: [ISN] DARPA pulls OpenBSD funding

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <JAEGIICLHAJHLINAEHLBAENPCNAA.erc@pobox.com>
From: erc at pobox.com (Ed Carp)
Subject: RE: [ISN] DARPA pulls OpenBSD funding

> So, what does he use for UNIX password encryption; MD5 (Ron Rivest, USA)
> or Blowfish (Bruce Schneier, USA)?  For PGP hashes?

MD5 isn't strictly encryption, it's cryptographic hashing.

> It's a little difficult to completely avoid US products in the
> encryption field.  And if your response is along the lines of "Open
> Source, can't hide anything", I'll save time and summarize my rebuttal
> now; DES, Differential Cryptanalysis, NSA, 20 years.

There's a ton of crypto software that's been developed overseas.  I guess
you missed my previous post, but think IDEA.