>
> From: "Simon J. Gerraty" <sjg @
zen .
void .
oz .
au>
> Date: Thu, 6 Jul 1995 14:33:53 +1000
> Subject: Re: controlling FTP transfers
>
> > Should we all be doing cryptographic authentication on a
> > per-packet basis? This way, I have to break an MD5 key. --
> >
> > You got it.
>
> Yes indeed, but how are we ever going to standardize?
>
> The U.S. is not the only country with restrictive laws about encryption tech.
> Unless of course the encryption is so weak as to be useless.
>
You may use and export authentication and integrity mechanisms
everywhere, even strong ones. The stupid thing often seen is that
these functions are implemented using a confidentiallity function,
and that's where the problem starts. Using MD5 should not be a
problem, you may even use DES if you run it in MAC mode and your
implementation is hard to misuse to do DES encryption. If you want
confidentiallity you have to limit it to 40 bit key if you want
to use and export it everywhere. The strenght of 40 bit key was
discussed here some weeks ago.
> The net result is that we all have to re-invent wheels that have
> little or no change of ever interworking. I've hacked encryption
> back into telnet, but with all the previous TELOPT_ENCRYPTION code
> removed I'm 101% sure my implementation is incompatible... (so I used
> a different option number).
> The net result is that we all have to re-invent wheels that have
> little or no change of ever interworking. I've hacked encryption
> back into telnet, but with all the previous TELOPT_ENCRYPTION code
> removed I'm 101% sure my implementation is incompatible... (so I used
> a different option number).
>
> Anyone know how IPng are tackling this?
>
> Or is everyone hoping the Phil Zimmerman case and the RSA T-shirt will
> force a change to the laws?
>
> - --sjg
>
> ------------------------------
Kare
----------------------------------------------------------
| Kare Presttun Alcanet International |
| Tel: +33 1 4058 5614 33, rue Emeriau |
| Fax: +33 1 4058 5945 F-75015 Paris |
| Kare .
Presttun @
ansf .
alcatel .
fr FRANCE |
|
|
