Re: Good security related article

From: QHenrick_Hellstr=F6m_=5BStreamSec=5D=22?= (henrick_at_REMOVEstreamsec.se)
Date: 05/14/04

  • Next message: Adem: "Re: Web based database" 
    Date: Fri, 14 May 2004 15:17:10 +0200

    JQP wrote:

    > Of all the security issues out there; virii, worms, warez, etc.; what
    > percentage of the actual recorded cases can be attributed to a direct
    > cryptographic attack? My guess is less than 1%.

    You might be right, but I also think that might be because you didn't
    ask the appropriate question. A "direct cryptographic attack" would only
    happen *if* the system used cryptography in the first place, and it
    would only be successful if bad cryptography was used.

    The majority of such attacks that actually take place (because there is
    no better attack and the attack has a chance of being successful) are
    probably password cracking of people's own old files/drives.

    Still, a more relevant question would be in how many cases cryptography,
      had it been used, would have prevented an attack or made it harder,
    and in how many cases cryptography was used and actually prevented an
    attack. The percentage would in such case probably be higher.

    It would still be low, though, because of the vast number of attacks
    against Win32 PCs that are directly connected to the Internet without a
    firewall, and operated by people who use MSOE and open executable
    attachments without thinking. ;)

  • Next message: Adem: "Re: Web based database"

    Relevant Pages

    • Re: modulo
      ... cryptography key of some length, and if you use the key to encrypt ... the only way a 512-bit encryption algorithm ... dedicated hardware to attack it will never succeed. ...
      (comp.programming)
    • Re: Curious about semantic security.........
      ... This can happen under various attack models. ... of them, the so-called chosen plaintext attack is easier to work with, ... For additive stream ciphers, ... No no no sorry i really try to understand this, cryptography is your ...
      (sci.crypt)
    • Re: A New Approach to Cryptography -http://www.adacrypt.com
      ... So your evidence that nothing that is truly random is ... ways to do that no one way is perfect so what we do is use multiple ... cryptographic attack ... with strong cryptography a single strong algorithm is ...
      (sci.crypt)
    • Re: TFM + RSA + Dual Core :-)
      ... because your approach to cryptography leaves a lot to be desired. ... The basic attack described in 1990 is the foundation for over ... a dozen broken ciphers. ... Sure the "exact same differentials" were not ...
      (sci.crypt)
    • Re: Encrypted image backups open to new attack
      ... sophisticated 'comparison' attack, ... Snake oil meant to fool people into thinking TurboCrypt is more ... strong ciphers and strong ciphers are not ... |"The Doghouse: Random Cryptography Companies ...
      (alt.privacy)