David Honig (honig@sprynet.com)
Tue, 25 Aug 1998 17:36:33 -0700
At 09:38 AM 8/25/98 +0100, Andy Brown wrote:
>The "strength" of a CAPI application seems to rest entirely upon the security
>of the particular Cryptographic Service Provider (CSP) that you choose to
use.
Also includes the security of CAPI and the rest of the OS, unfortunately.
>All you lucky people inside the USA
Your humor is dry and subtle like a fine wine.
> have a choice of many, including Fortezza
Rolling on the floor, as they say..
>and even a biometric fingerprint version.
We in the Great State of Calif. have the privledge of letting
the DMV store our thumbprints for us.
> Problem is, outside the USA we are
>stuck with only the default MS provider which gets you 40 bit RC4/RC2, 512
bit
>RSA and your private keys stored in the registry. Unpleasant.
"We are stuck with" ---you crack me up.
If you advise your clients to use 40-bits of search space to secure
anything you are guilty of fraud and worse ---your client will act as
if she has real security, when she has none!
In home construction, its a crime to build with known insufficient materials.
How about security consultion/programming?
>Thanks for all the advice, I'm more interested than ever in finding out the
>security of multiple applications of a stream cipher now just as a matter of
>curiosity.
>
>
>- Andy
Math is fun, Andy. Reality is not an option. Microsoft sucks, now work
around it. I am not really this ascerbic. Any questions?
There is a secret message embedded in the phosphor of this period.
The following archive was created by hippie-mail 7.98617-22 on Sat Apr 10 1999 - 01:11:01