[ILUG] Echelon exists..so says EU report

John McCormac jmcc at hackwatch.com
Sat Sep 15 02:12:22 IST 2001


Colm Mac Carthaigh wrote:
> 
> the opensource nature of openssh or openssl does make it
> in the least bit less secure to the likes of the NSA,
> if you use the right key strenths it's _very_ unlikely
> anything the NSA have can defeat the encryption.

Not quite correct for a number of reasons, one of which is that you do
not know if NSA has developed a faster factoring algorithm. Another
relates to possible leakage in the algorithms used. If you really want
to be secure, don't use internet/phone based comms systems.

> yeah, I'd be more worried about covert operations to install kestroke
> loggers and actual hardware intervention, network sniffing isnt
> too much of a worry.

Why not use standoff devices that just sniff the tempest radiation? :-)
 
> It's currently pretty easy to encrypt securely, even from the NSA.

Possibly. Though Enigma, JN25, Purple, DES and a lot of other encryption
systems were supposed to be unbreakable. There would have to be some
selection process for deciding what problems and identifying nets of
'connected' people is how it would logically be done.

Regards...jmcc
;-) jmcc at nsa.ie




More information about the ILUG mailing list