RE: Security Lab To Certify Banking Applications

1999-07-28 Thread Salz, Rich
>Regarding this Security Lab to Certify Banking Applications: I think it'll >last until the seed capital runs out unless they establish a consortium of ?insurance companies and tie their evaluations to the availability of >liability insurance. They don't need to go outside their own organization.

RE: NSA key in MSFT Crypto API

1999-09-03 Thread Salz, Rich
>For more information and a program to remove the NSA's key from your copy of >Windows 95, 98, NT, 2000, see >http://www.cryptonym.com/hottopics/msft-nsa.html Perhaps more interestingly, the program lets you replace the key, too. It requires no special privileges -- just uses some undocumented AP

RE: draft regulations?

1999-11-24 Thread Salz, Rich
>Looks like they are reinventing the GPL, except to infect >other sources. I think they want to make sure that if some non-US package (openssl being the example most obvious to me) picks it up that it doesn't suddenly become "free." So it's not the GPL, really, but more like the old BSD license.

RE: starting up servers that need access to secrets

2000-01-06 Thread Salz, Rich
>From: Matthew Hamrick [mailto:[EMAIL PROTECTED]] [General crypto token intro deleted] >2) Configuring your web server to use the coprocessor It's not very hard -- start with apache and openssl (www.apache.org and www.openssl.org). In OpenSSL there's a struct containing function pointers for the R

RE: Unrestricted crypto software web posting

2000-01-20 Thread Salz, Rich
Wouldn't it be great if "we" could get put on the "[EMAIL PROTECTED]" mailing list? Failing that, perhaps eff.org, crypto.com, or similar could set up a "export-notice" mail alias that forward to the BXA, but also archives them for folks (e.g., JYA :) to keep. /R$ PS: Just for the heck

www.ntru.com

2000-04-11 Thread Salz, Rich
I forget -- has NTRU been discussed here? In light of the recent Fortune article, someone mentioned http://www.ntru.com to me. A new fast public key crypto system. Just got $11M in funding. :)

NTRU overview

2000-04-21 Thread Salz, Rich
>From the IEEE public-key crypto group: http://grouper.ieee.org/groups/1363/StudyGroup/NewFam.html#HPS NTRU: A Public Key Cryptosystem Jeffrey Hoffstein, Jill Pipher and Joseph H. Silverman, August 1999. Presented at the August 1999 and October 1999 meetings. This purpose of this paper is to

RE: SSLeay.Org Still A Trusted Source?

2000-05-01 Thread Salz, Rich
SSLeay is dead, long live OpenSSL. The domain is now owned by a squatter. C'est la vie. /r$