[ubuntu-uk] Insurance.aes256 and OpenSSL
clanlaw at googlemail.com
Tue Jan 4 12:35:52 UTC 2011
On 4 January 2011 12:31, Tyler J. Wagner <tyler at tolaris.com> wrote:
> On Tue, 2011-01-04 at 10:38 +0000, Paul Sladen wrote:
>> On Tue, 4 Jan 2011, Rowan Berkeley wrote:
>> > it should be possible to see the keyhole at least.
>> You can see the keyhole---but it unremarkable because it looks exactly
>> the same as any other keyhole.
>> What you can't see is any of the tumblers *in* the keyhole, or through
>> the keyhole to what is behind it, as that would be a security failure.
> It's a cute metaphor, but inappropriate. Encryption doesn't lock a room,
> it changes the entire contents of the room into other, random atoms.
> There's no keyhole, no tumblers, nothing to see at all except
> nearly-random noise.
If there is no keyhole what do you do with the key, just wave it about
and hope for the best? :)
More information about the ubuntu-uk