Elcomsoft at it again - Password-cracking chip causes security concerns

[David Farber <dave () farber net>]

Begin forwarded message:

From: Ross Stapleton-Gray <ross () stapleton-gray com>
Date: October 25, 2007 2:49:25 PM EDT
To: dave () farber net
Subject: Re: [IP] Elcomsoft at it again - Password-cracking chip  
causes security concerns

At 11:28 AM 10/25/2007, David Farber passed along:
> A technique for cracking computer passwords using inexpensive
> off-the-shelf computer graphics hardware is causing a stir in the
> computer security community...

fyi, the Department of Homeland Security made three awards in its  
FY07.1 SBIR round, regarding using networked computers to  
collaboratively crack passwords, including one proposal using FPGAs:
http://sbir.dhs.gov/AbstractAwards.asp?SolicitationID=7&Phase=1#53

The charge in that solicitation, for "Enhanced Project 'Safe- 
Cracker,'" said:

   Individuals are using technology (passwords & encryption) to  
"lock" containers
   of information on their computers. Investigations increasingly  
hinge on the
   ability to obtain the information electronically "locked" within  
these
   containers. DHS LEAs [law enforcement agencies] need a solution  
to "unlock"
   these containers. Project "Safe-Cracker" provides the ability for  
LEAs to
   unlock containers where criminals hide information.

   The Enhanced Project "Safe-Cracker" project will improve the current
   distributed networking technology of the "Safe-Cracker" project.  
Specifically,
   it will design and develop a method and/or information technology
   infrastructure that provides computer power to state/local/and  
federal law
   enforcement agencies to combat encryption used by terrorists,  
enemy nation
   states and criminals (organized and individuals). The project  
will seek to
   efficiently interconnect distributed network-silos to network  
hubs that will
   include not only governmental agencies but also universities and  
corporations
   throughout the United States. This will allow law enforcement  
agents to be
   able to submit encrypted files to the distributed networking- 
silo, via a web
   based secure server, to harness the processing power of all the  
computers
   connected to the various silos.








-------------------------------------------
Archives: http://v2.listbox.com/member/archive/247/=now
RSS Feed: http://v2.listbox.com/member/archive/rss/247/
Powered by Listbox: http://www.listbox.com