NODE c8bf9487As I delurk, a question... (Clipper)
roy@sendai.cybrspc.mn.org (Roy M. Silvernail)Mon, 13 Jun 94 20:18:54 PDT
-----BEGIN PGP SIGNED MESSAGE-----
The thought occurs... the NSA doesn't seem particularly distressed that
Clipper's LEAF can be spoofed and rendered unusable. Could this
indicate that the LEAF isn't really necessary to retrieve the session
key after all?
- --
Roy M. Silvernail -- roy@sendai.cybrspc.mn.org will do just fine, thanks.
"Does that not fit in with your plans?"
-- Mr Wiggen, of Ironside and Malone (Monty Python)
PGP 2.3a public key available upon request (send yours)
-----BEGIN PGP SIGNATURE-----
Version: 2.3c
iQCVAgUBLf0dkRvikii9febJAQFEGQP+JUs/Z67WyE2Xgd6dwwcarHrGUqN7Gl5l
IlypdV2dX1McvuREj4WT6w13ljwe8kstLanyZxc2vHxiiEx+49D/wXG985pVNKRr
ylJVWYremrtPz4/p4Ibcdy/9Cvh7V0GYtIIVCDzTCsaF8LVXzWQeqlcEiwG5G57D
sC/4Ylwhp/U=
=b7h/
-----END PGP SIGNATURE-----
NODE 3c6981a8Re: As I delurk, a question... (Clipper)
"Perry E. Metzger" <perry@imsi.com>Tue, 14 Jun 94 07:56:02 PDT
Roy M. Silvernail says:
> The thought occurs... the NSA doesn't seem particularly distressed that
> Clipper's LEAF can be spoofed and rendered unusable. Could this
> indicate that the LEAF isn't really necessary to retrieve the session
> key after all?
Anything is possible. I'd say that it is more likely that this
indicates that the NSA is embarrassed by the entire episode, and that
they are planning on releasing a fix to the EES. Each of these,
seperately or together, is sufficient explanation.
I don't think they'd deliberately weaken the system. Doing so would be
too politically damaging to them in the long run. I believe they have
honestly built the best system they can. That does not mean it is
acceptable. Their honesty does not make the plan something that free
people should allow to be imposed upon them. However, I believe that
they are being reasonably honest. Even assuming honesty, the whole
thing reeks.
Perry