[65619] in Cypherpunks
Re: Snake Oil FAQ 0.4 [comments appreciated]
daemon@ATHENA.MIT.EDU (The Deviant)
Mon Sep 16 23:39:48 1996
Date: Mon, 16 Sep 1996 22:06:37 -0400 (EDT)
From: The Deviant <deviant@pooh-corner.com>
To: "David K. Merriman" <merriman@amaonline.com>
Cc: cypherpunks@toad.com
In-Reply-To: <199609161705.KAA26825@toad.com>
On Mon, 16 Sep 1996, David K. Merriman wrote:
> Date: Mon, 16 Sep 1996 10:05:27 -0700 (PDT)
> From: "David K. Merriman" <merriman@amaonline.com>
> To: cypherpunks@toad.com
> Subject: Re: Snake Oil FAQ 0.4 [comments appreciated]
>
> To: cypherpunks@toad.com
> Date: Mon Sep 16 12:05:17 1996
[usefull stuff rm'd]
> >
> > The phrase easy-to-use should not appear in proximity to one
> > time pad, except in the context 'Easier key management than a one time
> > pad!"
> >
>
> I would also suggest that the generation of OTP 'pads' for users is
> *highly* questionable. Who else is getting a copy of them, assuming they're
> even valid?
>
Not to mention, the basic flaw of OTP.. if you have the only copy of the
key, and the key is non-repetitive, how do you send the key to another
person without being just as insecure as not encrypting it in the first
place... almost any OTP claims are gonna be snake oil.
--Deviant
"I understand by 'freedom of Spirit' something quite definite -
the unconditional will to say No, where it is dangerous to say
No.
Friedrich Nietzsche
