PDA

Click to See Complete Forum and Search --> : 8192 bit encryption?


emPtYKnOw
December 20th, 2002, 07:55 AM
hey guys what do u think about this.
http://www.bytefusion.com/products/ens/secexmail/index_secexmail.htm

they are claiming 8192 bit key size with RSA standard encryption. What do u guys think? Can this replace pgp? The down side is it is only for windows as of now. And although they use twofish open ssl their actual code is not open source...hmmm.... interesting...
i dont know about you but if Im encrypting something i would def. go with open source (gPG), that i know has been viewed and examined by millions over this where i dont know jack about these people or their claims.
Waiting to here your thoughts

descrack
December 20th, 2002, 01:11 PM
well dude there eather full of crap or they handed there key over to the nsa fbi cse cia and a

few others the laws US and other wise state that u cant make anything that hard to break so

do u want the fbi reading your email? no I didnt think so ;)

El Diablo
December 20th, 2002, 03:16 PM
well remember this, the larger the key the more encryption overhead you have which means more CPU usage. An 8192 bit key would probably make most peoples CPU's croak.

I haven't read the article yet so I'll get right on that and make more comments later :)




El Diablo

sk8
December 24th, 2002, 04:19 PM
There is some truth in their claim but i m afraid that is not too much! somebody over 'ere at the HAF (Hellenic Air Force) Computer Department claims that it indeed uses some if not all PGP and then something more.
the point is that if the phrase is weak,or can be weakened, it can be "easily" broken into. in other words it seems that its not what it seems.
sorry to dissapoint you but over here the encryption level is even higher in some cases. =D

lench
December 25th, 2002, 04:25 AM
"and then all the encrytion breakers of the world screamed out in pain"
i need that kinda power it will come very handy :D

descrack
December 27th, 2002, 11:43 PM
:p thats still not anything to worrie bout cause it stands to reson that with a book called cracking des if you adjust the cypher keys which might make you go blind with out the right type of software and a doc in math matics and comp sic then it will still brake it in a bout a year or two hehehe dam it sucks to run a slow hunk of junk like my pc when bruting cypher :D

The Old Man
December 28th, 2002, 12:42 AM
8192? The least of our worries, IMHO.
Most of the things "you and i and our companies" need to encrypt have a relatively short valuable lifespan. They would not be worth the resources to "crack" when encrypted with basic 128-bit encryption, especially using a reasonable key. In fact, should one actually take the original message,
poly-alphabetize (http://the_old_man.tripod.com/PolyAlphaTable/PolyAlphaCipherSystems.html) the original text then encrypt that resulting cipher text with your PGP V-7.02, we'd all be pushing up daisies before anyone who was interested in what we wrote, and had sufficient equipment to crack it, could sort it all out. :)

magnoon
December 28th, 2002, 01:13 AM
Last week this was discussed in the comp.security.misc newsgroup and one of the project engineers joined in to give a little more information. You might be interested in reading what he had to say.

http://www.der-keiler.de/Newsgroups/comp.security.misc/2002-12/0349.html

The Old Man
December 28th, 2002, 04:25 AM
Originally posted here (http://www.AntiOnline.com/showthread.php?threadid=#post) by magnoon
Last week this was discussed in the comp.security.misc newsgroup and one of the project engineers joined in to give a little more information. You might be interested in reading what he had to say.

http://www.der-keiler.de/Newsgroups/comp.security.misc/2002-12/0349.html
A good link, thanks Magnoon, the arguments in the article meets the logic level i can relate to. It was interesting enough that i even went to their ByteFusion (http://www.bytefusion.com) site and enjoyed reading about their products including their encrypted email product, available in several flavors from free for non-business home use, up to complete secure email server products. They even had some freebies that sysops might find useful, as well as some other nice server-perks for higher-end hosting. i already have encrypted email capability with PGP, but if i didn't i'd probably download their free version to try it out. :)

mayhem991
December 28th, 2002, 02:29 PM
:) :) If this is true it will help the multinational corporations communicate. At present we can't send some information via email.

The Old Man
December 28th, 2002, 07:27 PM
Originally posted here (http://www.AntiOnline.com/showthread.php?threadid=#post) by mayhem991
:) :) If this is true it will help the multinational corporations communicate. At present we can't send some information via email.
Mayhem, this is already a 'fait accompli' (sp). There are a couple of commercial secure email services available, one even has Phil Zimmerman on "The Board". The problems i found with them was they were painfully slow on the dial-up download for the free accounts i tried out, that's why i went to my own solution with PGP. The commercial secure email providers do, however, give reasonable security because the email is SSL from keyboard to server to keyboard, sender to receiver, and at least one of the outfits keeps the actual email on their own servers. The one Magnoon aimed us at would be a good solution for a business that had it's *own* server, as the program resides on the server and double-encrypts the email from the sender's keyboard, then the receiver decrypts it at their keyboard.
If you represent a company that exchanges sensitive messages via email, and "the board" does not authorize the chump-change expense of security for those messages similar to what Magnoon showed us at ByteFusion (www.bytefusion.com) we were talking about or someone similar, then shame on "the board" when your competition buys its way into your email stream! The worst part is, you won't even be aware it's happened, until your commercial bids don't quite make it, your "specials" are about ten-percent above the competition, and your R&D projects, "hot offers" and patent applications are about a week slower than the competition, and your competition has your customer list.... Just joking... none of that stuff happens, does it? I mean, no large company would hire a topnotch IT whiz, then have him/her get an IT position at the competition, now, would they? And they could *never* bribe an IT set of fingers at the competition's console, could they? Secure email at the corporate level has a lot of ramifications, much too lengthy for our discussion here.
Good luck, and go investigate those secure email solutions, maybe if you know more about them than your boss does, you'll be explaining it to "the board". Not a bad deal at all for your career progression!