Re: Data integrity check in CIPE - Please explain me the necessityor benefit of a larger checksum.
"Eric M. Hopper" <[email protected]>
| Newsgroups | gmane.comp.encryption.cipe |
|---|---|
| Organization | Omnifarious Software |
| Message-ID | <[email protected]> |
On Mon, 2003-09-29 at 14:00, hans steegers wrote: > Bullshit: there was nothing to discover, just reading Protocol.txt. And there > is _NO_BUG_!!! (This is FUD!) And as a wannabee cryptographer, one should > expect you read at least the protocol description of the protocol you use. > And as a programmer you should at least be curious about the implementation. > And now calling it 'another insecure protocol' contradicts all your advertised > expertise. > > For me it was no surprise at all: I knew about the tradeoff between security > and speed + simplicity: I judged the security as sufficient for my purposes. > I don't care, for example, if somebody tries to replay a sequence of > datagrams: it will do no harm here. > > What makes me very, very **angry** is those commercial people selling CIPE to > customers as ultra-secure without having evaluated CIPE properly. And the > same people are now crying faul and demand it fixed! > For greed and profit and advertising non-existent expertise. That is criminal! I am not them. You are shrill and annoying. You try to find weaknesses in others that have nothing to do with technical merit and exploit them. You promote your own solutions without being open to critical review. Now I understand why nobody wanted to help you implement the compressed version of the CIPE protocol. I am interested in helping to fix the CIPE protocol, but I am no longer insterested in helping you do it. I do thank you though for your diagram of a CIPE packet. It's been most instructive. If you should have anything helpful along those lines to contribute in the future, please put the word 'TECHNICAL' in the subject line. If anybody else wants to step forward as the maintainer, I am willing to provide detailed analysis and write code. Thanks, -- There's an excellent C/C++/Python/Unix/Linux programmer with a wide range of other experience and system admin skills who needs work. Namely, me. http://www.omnifarious.org/~hopper/resume.html -- Eric Hopper <[email protected]>
signature.asc
(application/pgp-signature, 185 B)
-----BEGIN PGP MESSAGE----- Version: GnuPG v1.2.1 (GNU/Linux) iD4DBQA/eKDNjtsvlOwvazYRAvAqAJYxcfSzCjVH2Gg+HPfy2vIghgaQAJ9AbR3u Ni9Rb9WKv5o9KmOnXIjsWA== =dVoR -----END PGP MESSAGE-----