Vulnerability Development mailing list archives

Re: Non-Mathmatical Forging of PKI Digital Certificates / Throwing Rocks at the PKI


From: Pluto <pluto () DEFCOM-SEC COM>
Date: Tue, 29 Aug 2000 19:16:10 +0200

On Sat, 26 Aug 2000, Lincoln Yeoh wrote:

I disagree that some form of escrow is a bad idea in a corporate environment.

For example the key itself or a master key could be split (Blakely Shamir
style) and then encrypted and escrowed with multiple entities - e.g. board
members, company safe.

  Why have a duplicate in the vault if you are using treshold keys?

Whether corporations should exist as entities on their own is a different
matter :).

  "All revolutions are local" won my personal award of funniest shirt on
defcon :)

  Gruss

--
  Pluto   -   SysAdmin of Hades
  Free information! Freedom through knowledge. Wisdom for all!! =:-)
  PGP 1024/7261AACD 1996/09/10 1F3F EA94 D056 A686  4D19 C456 6CF9 4344
  Phone: +49-173-4814739  eCash(DB): 129429938818  Q3T: js-Pluto


Current thread: