Re: [dsfjdssdfsd] Discussion: Malicious Entropy Attacks: Eggs, and Baskets

tytso@mit.edu Tue, 18 March 2014 02:39 UTC

Return-Path: <tytso@thunk.org>
X-Original-To: dsfjdssdfsd@ietfa.amsl.com
Delivered-To: dsfjdssdfsd@ietfa.amsl.com
Received: from localhost (ietfa.amsl.com [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EB8591A0353 for <dsfjdssdfsd@ietfa.amsl.com>; Mon, 17 Mar 2014 19:39:47 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.338
X-Spam-Level:
X-Spam-Status: No, score=-2.338 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, RP_MATCHES_RCVD=-0.547, SPF_PASS=-0.001, T_DKIM_INVALID=0.01] autolearn=ham
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id ylCNfqQHR-rR for <dsfjdssdfsd@ietfa.amsl.com>; Mon, 17 Mar 2014 19:39:46 -0700 (PDT)
Received: from imap.thunk.org (imap.thunk.org [IPv6:2600:3c02::f03c:91ff:fe96:be03]) by ietfa.amsl.com (Postfix) with ESMTP id 5C9D81A023D for <dsfjdssdfsd@ietf.org>; Mon, 17 Mar 2014 19:39:46 -0700 (PDT)
Received: from root (helo=closure.thunk.org) by imap.thunk.org with local-esmtp (Exim 4.80) (envelope-from <tytso@thunk.org>) id 1WPjwH-0005rk-J1; Tue, 18 Mar 2014 02:39:37 +0000
Received: by closure.thunk.org (Postfix, from userid 15806) id 046375801E5; Mon, 17 Mar 2014 22:39:32 -0400 (EDT)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=thunk.org; s=mail; t=1395110373; bh=5JbL/IwWxZi9S8qNhv0O10BF0MNyK5wHgCD/AiMUyow=; h=Date:From:To:Cc:Subject:References:In-Reply-To:From; b=eCU5Yoot7WAPVoJL23tIEBo4zUx2S7bV0CtMGts/nUu0eBZsCC2RfBf+g1cw+h4ky AmS8vCiCFn2uYdF46OFCoZrzYZQ0XryL9k8RyvGjtdt68VqVF1b/U/0z4AaYizuZWA sXCAMghA6yp9+v05djPaEvQdZetj38O+Uiv9XoSc=
Date: Mon, 17 Mar 2014 22:39:32 -0400
From: tytso@mit.edu
To: Arnold Reinhold <agr@me.com>
Message-ID: <20140318023932.GA7144@thunk.org>
References: <531F6068.4080907@akr.io> <20140311195443.GD2190@thunk.org> <F3B65184-1544-48FA-8C20-52FEAC208D8A@me.com> <56491888.20140315165037@gmail.com> <DF42CACF-3AC7-4FA9-934C-18D4A0504FB9@me.com> <20140316171716.GD31988@thunk.org> <D1CAFBA9-92AB-4CE6-871E-740A428DA859@me.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <D1CAFBA9-92AB-4CE6-871E-740A428DA859@me.com>
User-Agent: Mutt/1.5.22 (2013-10-16)
X-SA-Exim-Connect-IP: <locally generated>
X-SA-Exim-Mail-From: tytso@thunk.org
X-SA-Exim-Scanned: No (on imap.thunk.org); SAEximRunCond expanded to false
Archived-At: http://mailarchive.ietf.org/arch/msg/dsfjdssdfsd/PCeAOw1Ceushv0KRfv3hejwphIE
Cc: =?iso-8859-1?B?QGdtYWlsLmNvbT4=?=@thunk.org, dsfjdssdfsd@ietf.org, =?iso-8859-1?B?IktyaXN6dGnhbiBQaW506XIgQHRodW5rLm9yZyIgPHBpbnRlcmty?=@thunk.org
Subject: Re: [dsfjdssdfsd] Discussion: Malicious Entropy Attacks: Eggs, and Baskets
X-BeenThere: dsfjdssdfsd@ietf.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: "The dsfjdssdfsd list provides a venue for discussion of randomness in IETF protocols, for example related to updating RFC 4086." <dsfjdssdfsd.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/dsfjdssdfsd>, <mailto:dsfjdssdfsd-request@ietf.org?subject=unsubscribe>
List-Archive: <http://www.ietf.org/mail-archive/web/dsfjdssdfsd/>
List-Post: <mailto:dsfjdssdfsd@ietf.org>
List-Help: <mailto:dsfjdssdfsd-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/dsfjdssdfsd>, <mailto:dsfjdssdfsd-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 18 Mar 2014 02:39:48 -0000

On Mon, Mar 17, 2014 at 08:43:36PM -0400, Arnold Reinhold wrote:
> 2. The personal privacy threat model, which fears the mass
> surveillance society, doesn’t trust corporate vendors and certifying
> bodies, and considers state actors principal threats. I’d put
> Bitcoin and the like here.

... and this also needs to separated into the "proof against a
targetted attack" and "protect against mass surveillance".

There's a big difference between NSA or FBI cutting a deal with AT&T
so that they get to put an Carnivore style keyword monitoring device
in a telephone closet at a fiber exchange point, and the FBI deciding
to park a Tempest van outside of your house.

Cheers,

						- Ted