Full Disclosure mailing list archives

Re: [Full-Dev-Server] Time Expiry Alogorithm??


From: Michael Simpson <Michael.Simpson () inveresk com>
Date: Fri, 19 Nov 2004 09:37:53 +0000

interesting question
presumably there would have to be a time stamp as part of the sig which if 
it was too old then the message would get discarded
you would have to hash the time as otherwise it would be open to spoofing
think kerberos has this facitlity but it tends to be **MUCH** tighter 
(matter of mins by default to allow for slew) and is used to stop replay 
attacks

full-disclosure-admin () lists netsys com wrote on 19/11/2004 07:39:19:

Hi List,

I was just wondering is there any encrytpion alogortim which expires 
with time. 
For example an email message maybe decrypted withing 48 hours of its
delivery otherwise it become usless or cant be decrypted with the
orignal key

Gautam

-- 
Gautam R. Singh
http://gautam.techwhack.com

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: