Article View: alt.security.ripem
Article #65one-time passphrases
From: Carl Ellison
Date: Tue, 12 Jan 1993 23:51
Date: Tue, 12 Jan 1993 23:51
29 lines
1602 bytes
1602 bytes
I have a normal terminal at home with a normal modem. (My company provides them to us.) [I'm on it at the moment.] I would never consider using RIPEM from here because I'd have to type my KEK passphrase. However, I could consider having to use RIPEM for some urgent reason. I could, conceivably, make several copies of my private key and encrypt them under passphrases which I will never use more than once. I could then have RIPEM accept one of these one-time phrases, use it and destroy the file in the same step. The vulnerability is that someone might have a copy of the file already and from that s/he could get my private key. Assuming I find some way around that vulnerability, what kind of RIPEM work might I feel free to do from home over an insecure line? What kind might you do from home? [P.S. I know -- the real answer is to spend the $25 for a PC clone :-) ] -- -- <<Disclaimer: All opinions expressed are my own, of course.>> -- Carl Ellison cme@sw.stratus.com -- Stratus Computer Inc. M3-2-BKW TEL: (508)460-2783 -- 55 Fairbanks Boulevard ; Marlborough MA 01752-1298 FAX: (508)624-7488
Technical Details
Message-ID:
<1ivlicINN6ij@transfer.stratus.com>Path:
arc1-ca.pugleaf.net!sparky!uunet!noc.near.net!transfer.stratus.com!ellisun.sw.stratus.com!cmeShow Full Headers
Complete Article Headers
Path: arc1-ca.pugleaf.net!sparky!uunet!noc.near.net!transfer.stratus.com!ellisun.sw.stratus.com!cme From: cme@ellisun.sw.stratus.com (Carl Ellison) Newsgroups: alt.security.ripem Subject: one-time passphrases Date: 12 Jan 1993 23:51:40 GMT Organization: Stratus Computer, Software Engineering Lines: 29 Distribution: world Message-ID: <1ivlicINN6ij@transfer.stratus.com> NNTP-Posting-Host: ellisun.sw.stratus.com Summary: use of RIPEM over an insecure line