Re: [OT] Re: random, digest, uuid, cipher & Co

[David Haley <dchaley@...>]

David Haley wrote:

> Anyhow in order to judge your protocol, you need to specify what kind 
> of attacks you're trying to protect against, if any, and what level of 
> security failure is tolerable. You pointed out that security is always 
> a compromise, but there's SSL's compromise and then there's this 
> compromise. :-)


As a final note before I think this topic should be taken away from the 
Lua list, if you're curious, check out some of the slides at:
http://www.stanford.edu/class/cs259/slides.html
The first slides, 'Introduction', cover the Needham-Schroeder protocol 
which is a good example of a security flaw having nothing to do with 
cryptography.

--
~David-Haley
http://david.the-haleys.org