NODE 50f182c3Re: LEAF, SS7
smb@research.att.comTue, 15 Feb 94 10:16:01 PST
The LEAF has many very interesting attributes. As I mentioned earlier,
in response to Mike's original question -- yes, there are tremendous
advantages to the LEAF for a traffic analyst.
But the LEAF itself is encrypted, including the session key, so
enemies can't do traffic analysis based on the LEAF.
The structure of the LEAF is also a dead giveaway that Clipper is
being used -- it's easy to envision a box that has the family key,
and tries every LEAF-sized field to see if it decrypts to something
that looks right, and in particular has the right checksum. It
detects Clipper -- and coupled with a random sequence detector, it
detects encrypted, non-Clipper traffic...
NODE 3883121bRe: LEAF, SS7
Mike Godwin <mnemonic@eff.org>Tue, 15 Feb 94 12:01:42 PST
> But the LEAF itself is encrypted, including the session key, so
> enemies can't do traffic analysis based on the LEAF.
But the police can. They can decrypt the LEAF even without an escrow key.
You use a family key to do that.
--Mike