full-disclosure - Re: [Full-Dev-Server] Time Expiry Alogorithm??

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: Michael.Simpson at inveresk.com (Michael Simpson)
Subject: Re: [Full-Dev-Server] Time Expiry Alogorithm??

interesting question
presumably there would have to be a time stamp as part of the sig which if 
it was too old then the message would get discarded
you would have to hash the time as otherwise it would be open to spoofing
think kerberos has this facitlity but it tends to be **MUCH** tighter 
(matter of mins by default to allow for slew) and is used to stop replay 
attacks

full-disclosure-admin@...ts.netsys.com wrote on 19/11/2004 07:39:19:

> Hi List,
> 
> I was just wondering is there any encrytpion alogortim which expires 
with time. 
> For example an email message maybe decrypted withing 48 hours of its
> delivery otherwise it become usless or cant be decrypted with the
> orignal key
> 
> Gautam
> 
> -- 
> Gautam R. Singh
> http://gautam.techwhack.com
> 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html