Army signals security & "Clansmen" series radios
Ben Laurie
ukcrypto at maillist.ox.ac.uk
Thu, 07 Sep 2000 15:42:06 +0100
Charles Lindsey wrote:
>
> On Wed, 6 Sep 2000 18:57:30 +0100
> Dave Bird <dave@xemu.demon.co.uk> said...
>
> > That is almost a despair situation for security: there are so many
> > message terminals that someone is bound to get careless through
> > sheer numbers.
> >
> > Where the medium allows it, it is best to send individual variant
> > messages to each local key.
>
> Yes, but if there are 10,000 recipients it will take forever to generate
> the encryptions, and the size of each message will be huge (yes, I know
> you only have to encrypt the session key, but 10,000 encrypted session
> keys is still a lot of data to have to transmit).
Hmm. OpenSSL can do around 55 2048 bit public key operations per second
on my not-so-fast P2, so "ages" is, in fact, around 3 minutes. That
doesn't strike me as a serious problem.
Cheers,
Ben.
--
http://www.apache-ssl.org/ben.html
Coming to ApacheCon Europe 2000? http://apachecon.com/