Army signals security & "Clansmen" series radios

Ben Laurie ukcrypto at maillist.ox.ac.uk
Thu, 07 Sep 2000 15:42:06 +0100


Charles Lindsey wrote:
> 
>         On Wed, 6 Sep 2000 18:57:30 +0100
>         Dave Bird <dave@xemu.demon.co.uk> said...
> 
> >  That is almost a despair situation for security: there are so many
> >  message terminals that someone is bound to get careless through
> >  sheer numbers.
> >
> >  Where the medium allows it, it is best to send individual variant
> >  messages to each local key.
> 
> Yes, but if there are 10,000 recipients it will take forever to generate
> the encryptions, and the size of each message will be huge (yes, I know
> you only have to encrypt the session key, but 10,000 encrypted session
> keys is still a lot of data to have to transmit).

Hmm. OpenSSL can do around 55 2048 bit public key operations per second
on my not-so-fast P2, so "ages" is, in fact, around 3 minutes. That
doesn't strike me as a serious problem.

Cheers,

Ben.

--
http://www.apache-ssl.org/ben.html

Coming to ApacheCon Europe 2000? http://apachecon.com/