Datenterrorist

Datensammler sind Verbrecher!

DSA VS RSA

Ich hab grad mal zum Thema etwas im Usenet gesucht und folgendes gefunden:

"DSA is the Digital Signature Algorithm, and only does signatures not
encryption. RSA can do both signatures and encryption. It is however
true that DSA keys can be used with some elyptic curve encryption
algorithms to encrypt. Using different keys for encryption and signing
(for certificates and the like) has considerable cryptographic merit,
and while you can use separate keys with RSA, the temptation to use the
same one is frequently overwelming expecially to those who do not
unstand why they should not.

According to Bruce Schneier both DSA and RSA with the same length keys
are just about identical in difficulty to crack. Use the key for
encryption as well as signing and breaking the key gets much easier
simply because there is more data to work with.

SSH uses either DSA or RSA for signing, not encryption, so actually
it makes little difference which you use. As mentioned elsewhere in
this thread US encryption export laws used to mean that DSA was
preferable as it was only for signing and could not be used for
encryption and therefore was allowed to be exported. Following
on from Sept 11 this kind of regulation could come back although
enforcing it would be even harder that it was when implementations
were produced outside the US before the regulations were relaxed.
RSA used to be covered by patent, but that has now lapsed, which
also was a US only problem."


Msg-ID: <afklal$2vo$1@knossos.btinternet.com>
16.02.05 22:10:52 - balle - 5 comments - Kryptografie


Root Dateisystem verschlüsseln

Da mich jetzt erneut einige Leute gefragt haben wie ich auf meinem Laptop die Root Partition verschlüsselt habe, hier der Link zu dem Howto:
Encrypted Root Filesystem
Swap und /tmp hab ich mit Hilfe der README von Loop AES verschlüsselt.
17.01.05 10:16:53 - balle - 2 comments - Kryptografie


Verschlüsselung für die Mailingliste

Exim: http://www.raphinou.com/smailman/smailman.html
Qmail: http://freshmeat.net/projects/gpg-ezmlm/
Sendmail: http://www.rediris.es/app/pgplist/index.en.html

10.01.05 07:23:38 - balle - No comments - Kryptografie


OpenSSL Zertifikate

How you handle certificates depend a great deal on what your role is.
Your role can be one or several of:

- User of some client software
- User of some server software
- Certificate authority

This file is for users who wish to get a certificate of their own.
click
05.07.04 20:23:00 - balle - No comments - Kryptografie


Dateien verschlüsseln mit OpenSSL

Verschlüsseln (mit AES 256):
openssl enc -e aes256 -in <file_to_encrypt> -out <encrypted_file>

Entschlüsseln
openssl enc -d aes256 -in <ecrypted_file> -out <plain_file>
23.06.04 19:18:35 - balle - 22 comments - Kryptografie


GNUPG Manual

Das Handbuch zur GNU Version von PGP
click
01.01.04 23:57:00 - balle - No comments - Kryptografie


OpenSSL Handbücher

Apache-SSL und OpenSSL Handbücher
click
01.01.04 23:56:00 - balle - No comments - Kryptografie


Crypted filesystems

Wie verschlüsselt man Dateisysteme unter Linux?
click
01.01.04 23:55:00 - balle - No comments - Kryptografie


Tunneling Traffic

Wie tunnelt man Plain Protokolle und schützt sich vor Man-in-the-middle Angriffen?
click
01.01.04 23:52:00 - balle - No comments - Kryptografie


IPsec verstehen und nutzen

Wie funktioniert IPsec und wie bastel ich mir mit FreeS/WAN ein VPN?
click
01.01.04 23:51:00 - balle - No comments - Kryptografie


« September 2010 »
MonTueWedThuFriSatSun
  12345
6789101112
13141516171819
20212223242526
27282930