> i'll be honest, i don't know anyone who's ever used a one-time-pad 

ooh...terminology clarification:

OTP = one-time password
OTP = one-time pad

The former is a common tool used for safely logging in over an 
insecure channel (such as using S/Key when logging into my 
OpenBSD box over telnet).  They're usually 5 quads of letters 
such as "OVEN DOVE MATE SPIN FLAT" and some generation methods 
kindly use real words to make them easier to type (still leaving 
about 387 quadrillion combos for an attacker to guess based on 
4-letter words from my /usr/share/dict/words).  With a little 
preparation, I can travel with a notecard in my wallet containing 
my next 10 OTPs in case I need something non-confidential on my 
home box and only have access to telnet rather than SSH.

The latter is, as Derek notes, unbreakable without the key 
(assuming quality random data).  However key management becomes 
unweildy.

Which does the OP mean by "OTP"?

-tim







--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Django users" group.
To post to this group, send email to django-users@googlegroups.com
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/django-users?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to