Re: Real-time BBS Encryption??

> Re: encrypting modem links
> >I'm wondering if there is a way to do this with PCs?  
> Yes, with difficulty, and not transparently.
> 
> >Is there a way to encrypt a remote users entire connection with
> >the BBS, so that they would have to have a special term program to access
> >the system?  
> 
> For PC's, replacing the terminal software is really the best way.
> There is no effective abstraction of serial port hardware in the PC
> world.  The int 0x14 driver in the BIOS was rampantly defective, and
> MSDOS does not provide a standard interface.

Or, we could impliment an "external protocal" like zmodem.  This would simply
take keystrokes, buffer them, then encrypt/decrypt them.

Make the source portable, and obtainable.

-----BEGIN PGP SIGNED MESSAGE-----

> Or, we could impliment an "external protocal" like zmodem.  This would simply
> take keystrokes, buffer them, then encrypt/decrypt them.
> 
> Make the source portable, and obtainable.

I'm doing something like this for my Thesis (i.e., wait a couple of
weeks.. ;-) It's based upon Kerberos, but it will securely get you a
TGT on a server machine that is on the Internet from a client terminal
that is dialled up to it...

Moreover, you can extract the session key from the protocol, which
would allow for DES encryption of the session.  While I haven't yet
implemented the encryption of the session, I have been able to obtain
kerberos tickets securely....

More info on request, or you can wait to read my thesis when it's
done...

Enjoy!

- -derek

PGP 2 key available upon request on the key-server:
	pgp-public-keys@toxicwaste.mit.edu
- --
  Derek Atkins, MIT '93, Electrical Engineering and Computer Science
     Secretary, MIT Student Information Processing Board (SIPB)
           MIT Media Laboratory, Speech Research Group
           warlord@MIT.EDU       PP-ASEL        N1NWH

-----BEGIN PGP SIGNATURE-----
Version: 2.2

iQBuAgUBK8NMvzh0K1zBsGrxAQFQwwLECieud4DvqHhkxsjwmrHt4Unpq2eR9hlT
DKuKF2CqCfYVabks11r7TaZvrsSQ9Vs5zZFbXhfihaiQywTpdj2Bp8aSo0B+7paR
ukzbY3GT1RLcSRrK+6KjPGw=
=lzg8
-----END PGP SIGNATURE-----