[103208] in Cypherpunks
Re: ArcotSign (was Re: Does security depend on hardware?)
daemon@ATHENA.MIT.EDU (Mok-Kong Shen)
Tue Sep 22 03:16:42 1998
Date: Tue, 22 Sep 1998 08:59:55 +0100
From: Mok-Kong Shen <mok-kong.shen@stud.uni-muenchen.de>
To: cryptography@c2.net
CC: cypherpunks@Algebra.COM, coderpunks@toad.com
Reply-To: Mok-Kong Shen <mok-kong.shen@stud.uni-muenchen.de>
bram wrote:
>
> On Mon, 21 Sep 1998, Bruce Schneier wrote:
>
> > Here's the basic idea: Strew a million passwords on your hard drive, and
> > make it impossible to verify which is the correct one offline. So, someone
> > who steals the password file off the client cannot run a cracking tool
> > against the file.
>
> Is this really patentable? It sounds a *lot* like the original public-key
> algorithm (the one involving lots of little 'puzzles')
A question : How does the legitimate user find his password?
(Sorry for not having followed this thread from the beginning.)
M. K. Shen
