[14658] in Cypherpunks
Re: Black Eye for NSA, NIST, and Denning
daemon@ATHENA.MIT.EDU (Perry E. Metzger)
Fri Jun 3 08:07:24 1994
To: cypherpunks@toad.com
In-Reply-To: Your message of "Thu, 02 Jun 1994 19:14:26 EDT."
<9406022314.AA00217@squeamish-ossifrage.mit.edu>
Reply-To: perry@imsi.com
Date: Fri, 03 Jun 1994 08:01:52 -0400
From: "Perry E. Metzger" <perry@imsi.com>
Derek Atkins says:
> > brute force search for one quite practical -- especially since it only
> > need be done once.
>
> actually, it needs to be done once per session key (i.e., when you
> change the session key, you need to re-issue a LEAF)
However, it can be done in advance, and you can conceivably reuse
forged LEAFs.
I've come up with what I believe to be a pretty good algorithm to
prevent this problem. I would like to patent it so that I can then
charge exhorbitant sums of manufacturers should the technique be
incorporated in a future EES design. Anyone know where I can find a
cheap patent attorney?
Perry
