Re: The Pain of Cryptography

"Roger Schlafly" <[EMAIL PROTECTED]> wrote in message
news:[EMAIL PROTECTED]
> "Anton Stiglic" <[EMAIL PROTECTED]> wrote
> > Maybe David Wagner suffers from split personality!  Note that his last
> > post appears to come from the domain taverner.cs.berkeley.edu,
>
> You are reading a lot into this. Obviously David was paid a fixed
> amount of money to spend a limited number of hours doing an
> analysis, and write a report. He chose to spend that time doing
> some standard attacks, and seeing if they work. There is nothing
> wrong with his report.
>
> Sometimes someone finds a clever attack that someone else overlooks.
> That's life in the crypto biz. If there is a lesson here, I'd say that
> companies should hire more than one cryptologist to do analyses.

Or read their own report closely. Nowhere does David say "this XYZ is
secure".  He says "I found no faults in it".  In fact he even cautions that
"this doesn't mean this is secure".  They decided to wrongly paraphrase
David anyways.  They're own fault.

Tom