Security Basics mailing list archives

RE: sshd for windows


From: "DeGennaro, Gregory" <Gregory_DeGennaro () csaa com>
Date: Thu, 19 Jun 2003 10:01:56 -0700

Now, that I can accept.

One of the many things I have learn in infosec, never and always is not in
the infosec dictionary.  However, "when" is in that same dictionary!

The Titanic was unsinkable and the Bismark was indestructable.  Where are
they now and how long did they last?!  Ok something more related, we would
never go above 300 baud modems and DES would never be broken.

Encryption was created by an imperfect being, therefore it is not perfect.

Anything is possible and theories/facts are created, tested, disproved or
changed all of the time.

-----Original Message-----
From: Adam Newhard [mailto:atnewhard () microstrain com] 
Sent: Thursday, June 19, 2003 5:59 AM
To: security-basics () securityfocus com
Subject: Re: sshd for windows

i'll definitely agree with the 80 bit exhaustive search cannot be done part.
if you're doing an exhaustive search sequentially or even searching with
some sort of pattern (like applying the somewhat def of random key - 50% of
the bits are on, sequentially generated keys have a hamming distance greater
than half the key size, blah blah blah), it's suppose to take at least 2^40
tries if you're even remotely lucky on an 80 bit exhaustive search.  just
pray to god you're not one of the unlucky souls who generates one of the des
weak keys and you should be ok...but always be paranoid.
adam
----------------------------------------------------
Adam Newhard
Microstrain, Inc.
If vegetarians eat vegetables, watch out for humanitarians



---------------------------------------------------------------------------
Evaluating SSL VPNs' Consider NEOTERIS, chosen as leader by top analysts!
The Gartner Group just put Neoteris in the top of its Magic Quadrant,
while InStat has confirmed Neoteris as the leader in marketshare.
     
Find out why, and see how you can get plug-n-play secure remote access in
about an hour, with no client, server changes, or ongoing maintenance.
          
Visit us at: http://www.neoteris.com/promos/sf-6-9.htm
----------------------------------------------------------------------------


Current thread: