note 58179 deleted from ref.mcrypt by danbrown
| From: | danbrown@php.net | Date: | Mon, 13 Dec 2010 16:24:28 +0000 |
| Subject: | note 58179 deleted from ref.mcrypt by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-174859@lists.php.net to get a copy of this message | ||
Note Submitter: amiller of connext point net
----
As regards the whole one-time-pad discussion below, I would also add that any one-time pad scheme
which involves the key passing through a computer in any fashion is blown from the very beginning.
At best, you have to rely on a less-secure cipher for key transmission; at (far-from-uncommon)
worst, your key has been written in the clear to some sectors of the disk (for example, by being
swapped out of memory), and awaits only someone with a sector-scanning tool to reveal it.
If you're thinking about Internet security, considering a one-time pad at all, unless
you're planning to use one to protect another cipher system's keys for transmission (and
probably even then!), is a waste of your time.