🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: alt.security.ripem
Article #65

one-time passphrases

#65
From: Carl Ellison
Date: Tue, 12 Jan 1993 23:51
29 lines
1602 bytes
I have a normal terminal at home with a normal modem.  (My company provides
them to us.)  [I'm on it at the moment.]

I would never consider using RIPEM from here because I'd have to type my
KEK passphrase.

However, I could consider having to use RIPEM for some urgent reason.

I could, conceivably, make several copies of my private key and encrypt
them under passphrases which I will never use more than once.  I could then
have RIPEM accept one of these one-time phrases, use it and destroy the
file in the same step.

The vulnerability is that someone might have a copy of the file already and
from that s/he could get my private key.  Assuming I find some way around
that vulnerability, what kind of RIPEM work might I feel free to do from
home over an insecure line?

What kind might you do from home?


[P.S.  I know -- the real answer is to spend the $25 for a PC clone :-) ]

-- 
-- <<Disclaimer: All opinions expressed are my own, of course.>>
-- Carl Ellison						cme@sw.stratus.com
-- Stratus Computer Inc.	M3-2-BKW		TEL: (508)460-2783
-- 55 Fairbanks Boulevard ; Marlborough MA 01752-1298	FAX: (508)624-7488
Technical Details
Message-ID: <1ivlicINN6ij@transfer.stratus.com>
Path: arc1-ca.pugleaf.net!sparky!uunet!noc.near.net!transfer.stratus.com!ellisun.sw.stratus.com!cme

Show Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!sparky!uunet!noc.near.net!transfer.stratus.com!ellisun.sw.stratus.com!cme
From: cme@ellisun.sw.stratus.com (Carl Ellison)
Newsgroups: alt.security.ripem
Subject: one-time passphrases
Date: 12 Jan 1993 23:51:40 GMT
Organization: Stratus Computer, Software Engineering
Lines: 29
Distribution: world
Message-ID: <1ivlicINN6ij@transfer.stratus.com>
NNTP-Posting-Host: ellisun.sw.stratus.com
Summary: use of RIPEM over an insecure line