[19148] in cryptography@c2.net mail archive
Re: X.509 / PKI, PGP, and IBE Secure Email Technologies
daemon@ATHENA.MIT.EDU (Anne & Lynn Wheeler)
Wed Dec 7 16:18:33 2005
X-Original-To: cryptography@metzdowd.com
X-Original-To: cryptography@metzdowd.com
Date: Wed, 07 Dec 2005 13:34:58 -0700
From: Anne & Lynn Wheeler <lynn@garlic.com>
To: Aram Perez <aramperez@mac.com>
Cc: cryptography <cryptography@metzdowd.com>
In-Reply-To: <90E13794-35DF-4978-948A-F26B7BDB90B5@mac.com>
Aram Perez wrote:
> I'm sorry James, but you can't expect a (several hundred dollar)
> rowboat to resist the same probable storm as a (million dollar) yacht.
> There is no such thing as "one-size encryption system fits all cases".
unfortunately there are more than a few counter-examples that are made
enormously complex (and extremely expensive) and it turns out that the
complexity itself introduces additional failure and threat
vulnerabilities which aren't found in KISS-solutions.
nearly ten years ago, i joked that i was going to take a $500 milspec
part, cost reduce it by two orders of magnitude and at the same time
improve its security (in part by eliminating unnecessary features that
contributed to security vulnerabilities).
---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com
