Re: There's a hole in your crypto...

-----BEGIN PGP SIGNED MESSAGE-----

- -----BEGIN PGP SIGNED MESSAGE-----

Andrew Spring wrote:

<snip>

>>How do I know PGP IS secure? I don't. That doesn't mean I don't use it or
>
>Doesn't the NSA certify the security of cryptosystems?
>I wonder what they'd say about PGP?

Their consultant, Prof. Dorothy Demming(sp?), has been asked this very
question about PGP, and she deftly avoided comment on both PGP and IDEA.
[I believe this was on NPR, but I'm not certain.] The emergence of NSA
from absolutely secret agency to semi-public status (writing letters,
P.R. concerns, opening a museum, etc.) at the same time as the general 
availability of what's considered by many [including me] to be strong, 
free, cryptography "for the masses" is interpreted by many [including me]
as an implicit NSA comment on the availability of strong crypto in 
general, and on the availability of PGP in particular.
JMR

<snip sig.>


- -----BEGIN PGP SIGNATURE-----
Version: 2.6.2
Comment: Freedom isn't Freeh

iQCVAwUBMCEc4m1lp8bpvW01AQG/xQP/YJDZekZBS2S9behLbFEVKdGcMgxagji7
r54EZa7mzQOObtGbi8ucnKZFm0ut7puxcNfJgaGcMmboEaeyo/vlOYeICDBaouLY
I5/RJQwLjiBPcSWeDTSVDbiH4dvszaKrwYo/xC5WA8pv2kbZFEdou5HpHiiof0dV
cTCvF4j90oo=
=sNKQ
- -----END PGP SIGNATURE-----
Regards, Jim Ray

"The people will again respect the law when the law again respects
the will of the people." Jim Ray, Campaign '92
- ------------------------------------------------------------------------
PGP key Fingerprint  51 5D A2 C3 92 2C 56 BE  53 2D 9C A1 B3 50 C9 C8 
Key id. #  E9BD6D35
- ------------------------------------------------------------------------
Support the Phil Zimmermann (Author of PGP) Legal Defense Fund! 
email:  zldf@clark.net or visit http://www.netresponse.com/zldf
________________________________________________________________________

- ---
[This message has been signed by an auto-signing service.  A valid signature
means only that it has been received at the address corresponding to the
signature and forwarded.]

-----BEGIN PGP SIGNATURE-----
Version: 2.6.2
Comment: Gratis auto-signing service

iQBFAwUBMCEg2CoZzwIn1bdtAQH2IQF/e+BP6NnoaQxHgm8bsZQpOLqW5rb4xcMa
aHrUYlP3bYDwv49HYRlz+GQMDTCm2OII
=QYNV
-----END PGP SIGNATURE-----

On Thu, 3 Aug 1995, Jim Ray wrote:

> >Doesn't the NSA certify the security of cryptosystems?
> >I wonder what they'd say about PGP?
> 
> Their consultant, Prof. Dorothy Demming(sp?), has been asked this very
> question about PGP, and she deftly avoided comment on both PGP and IDEA.
> [I believe this was on NPR, but I'm not certain.] The emergence of NSA
> from absolutely secret agency to semi-public status (writing letters,
> P.R. concerns, opening a museum, etc.) at the same time as the general 
> availability of what's considered by many [including me] to be strong, 
> free, cryptography "for the masses" is interpreted by many [including me]
> as an implicit NSA comment on the availability of strong crypto in 
> general, and on the availability of PGP in particular.

I'm afraid I don't follow. Are you saying that the NSA is assuming a more 
public role because (apparently) stong crypto is now widely available to 
the public? I don't see the connection between A and B if this is what 
you are claiming.

Unless they're gearing up for a PR campaign... I wonder how the NSA has 
been portrayed in Hollywood in the past. I've just seen them mentioned in 
one movie I can think about ("Crimson Tide"). Anyone else know of references?

"Freedom is meaningless unless  | ic58@jove.acs.unt.edu - James Childers
 you can give to those with whom| No man's freedom is safe
 you disagree." - Jefferson     |    while Congress is in session
        EA 73 53 12 4E 08 27 6C   21 64 28 51 92 0E 7C F7