[2461] in Privacy_Forum
[ PRIVACY Forum ] Flaw found in Public Key Crypto implementations
daemon@ATHENA.MIT.EDU (PRIVACY Forum mailing list)
Tue Feb 14 18:00:45 2012
Date: Tue, 14 Feb 2012 14:39:01 -0800
To: privacy-list@vortex.com
Message-ID: <20120214223901.GD26879@vortex.com>
MIME-Version: 1.0
Content-Disposition: inline
From: PRIVACY Forum mailing list <privacy@vortex.com>
Reply-To: PRIVACY Forum mailing list <privacy@vortex.com>
Content-Type: text/plain; charset="iso-8859-1"
Errors-To: privacy-bounces+privacy-forum=mit.edu@vortex.com
Content-Transfer-Encoding: 8bit
Flaw found in Public Key Crypto implementations
http://j.mp/zVfXVU (New York Times)
"The researchers described their work in a paper that will be presented
at a cryptography conference to be held in Santa Barbara, Calif., in
August, but made their findings public on Tuesday because they believe
the issue is of immediate concern to the operators of Web servers that
rely on the public key cryptography system. "This comes as an
unwelcome warning that underscores the difficulty of key generation in
the real world," said James P. Hughes, an independent Silicon Valley
cryptanalyst who worked with a group of researchers led by Arjen K.
Lenstra, a widely respected Dutch mathematician who is a professor at
the cole Polytechnique Fdrale de Lausanne in Switzerland. "Some people
may say that 99.8 percent security is fine," he added. That still
means that approximately as many as two out of every thousand keys
would not be secure."
- - -
Throughout the history of cryptography, the problems of key generation and management
continue to be the twin Achilles' heels of many implemented systems.
--Lauren--
Lauren Weinstein (lauren@vortex.com): http://www.vortex.com/lauren
Co-Founder: People For Internet Responsibility: http://www.pfir.org
Founder:
- Data Wisdom Explorers League: http://www.dwel.org
- Network Neutrality Squad: http://www.nnsquad.org
- Global Coalition for Transparent Internet Performance: http://www.gctip.org
- PRIVACY Forum: http://www.vortex.com
Member: ACM Committee on Computers and Public Policy
Lauren's Blog: http://lauren.vortex.com
Google+: http://vortex.com/g+lauren / Twitter: http://vortex.com/t-lauren
Tel: +1 (818) 225-2800 / Skype: vortex.com
_______________________________________________
privacy mailing list
http://lists.vortex.com/mailman/listinfo/privacy
