[18767] in cryptography@c2.net mail archive

home help back first fref pref prev next nref lref last post

Re: [smb@cs.columbia.edu: Skype security evaluation]

daemon@ATHENA.MIT.EDU (Dirk-Willem van Gulik)
Wed Oct 26 11:28:31 2005

X-Original-To: cryptography@metzdowd.com
X-Original-To: cryptography@metzdowd.com
Date: Wed, 26 Oct 2005 07:47:22 -0700 (PDT)
From: Dirk-Willem van Gulik <dirkx@webweaving.org>
To: cyphrpunk <cyphrpunk@gmail.com>
Cc: "Travis H." <solinym@gmail.com>, cypherpunks@jfet.org,
	cryptography@metzdowd.com, berson@anagram.com
In-Reply-To: <792ce4370510241050m6e0cd60atc155ffac3054ca40@mail.gmail.com>



On Mon, 24 Oct 2005, cyphrpunk wrote:

> Is it possible that Skype doesn't use RSA encryption? Or if they do,
> do they do it without using any padding, and is that safe?

You may want to read the report itself:

	http://www.skype.com/security/files/2005-031%20security%20evaluation.pdf

and perhaps section 3.2.3 (about padding) and 3.2.2 (about how RSA is
used) may help with this (and what it is used for in section 2).

Dw.

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com

home help back first fref pref prev next nref lref last post