NODE e28fc515d-day
nobody@neva.org (Neva Remailer)Fri, 25 Jul 1997 02:29:26 +0800
What do you think about celebrating the expiration of the Diffie-Hellman
patent by getting all the PGP users in the world to switch to DSS/DH keys
all at once?
It would take a massive education effort, but imagine the effect... we
could even celebrate it annually, since there'd inevitably be significant
lagging.
NODE eef5f6d2Re: d-day
Dave K-P <dkp@iname.com>Fri, 25 Jul 1997 04:17:41 +0800
Neva Remailer wrote:
> What do you think about celebrating the expiration of the Diffie-Hellman
> patent by getting all the PGP users in the world to switch to DSS/DH keys
> all at once?
From www.rsa.com on DSS ...
DSA has been criticized by the computer industry since its announcement.
Criticism has focused on a few main issues: it lacks key exchange
capability; the underlying cryptosystem is too recent and has been
subject
to too little scrutiny for users to be confident of its strength;
verification of signatures with DSA is too slow; the existence of a
second authentication standard will cause hardship to computer hardware
and
software vendors, who have already standardized on RSA; and the process
by
which NIST chose DSA was too secretive and arbitrary, with too much
influence wielded by NSA.
And from www.rsa.com on the ElGamal variation of Diffie-Hellman...
The main disadvantage of ElGamal is the need for randomness, and its
slower speed (especially for signing). Another potential disadvantage of
the ElGamal system is that message expansion by a factor of two takes
place during encryption. However, such message expansion is negligible
if
the cryptosystem is used only for exchange of secret keys.
So, before you run off to play with your new toys, read the
warranty first. Also there are platforms that PGP 5.0 doesn't cover yet
that PGP 2.6.3i already does, such as: MS-DOS, OS/2, Amiga, Atari,
Macintosh, BeOS and Linux. Until such a time, a world-wide conversion
seems unlikely.
NODE 24de17a0Re: d-day
Lucky Green <shamrock@netcom.com>Fri, 25 Jul 1997 06:02:20 +0800
On Thu, 24 Jul 1997, Dave K-P wrote:
>
> So, before you run off to play with your new toys, read the
> warranty first. Also there are platforms that PGP 5.0 doesn't cover yet
> that PGP 2.6.3i already does, such as: MS-DOS, OS/2, Amiga, Atari,
> Macintosh, BeOS and Linux. Until such a time, a world-wide conversion
> seems unlikely.
The Linux beta of PGP 5.0 is available at
http://www.pgp.com/products/50-linux-beta.cgi
Once the scanning effort (91% proofread) has completed, PGP 5.0 for a
wide variety of OS'es is only a matter of time.
-- Lucky Green <mailto:shamrock@netcom.com> PGP encrypted mail preferred