[Dshield] Crypto Question

[Valdis.Kletnieks at vt.edu]

On Fri, 06 Mar 2009 09:31:02 PST, David Brodbeck said:

> Why does your car have three braking systems (two hydraulic, one  
> mechanical)?  If one was broken, you'd fix it, therefore you should  
> only need one, right?  After all, having three is a pain in the ass  
> for no real gain...

That's because brakes are essentially heuristics, not algorithms.
Note the difference between mechanical failure and algorithmic
failure - if you put new brake pads in the car, the brakes will start
working.

But there's no way to "replace the brake pads" on a broken algorithm,
except to replace it wholesale.

The people who are advocating this should ask themselves what they know
about crypto that the experts who designed things like the X.509 certificate
format didn't know. Rather than *insisting* that they are right, they
should learn to ask "OK, so what's wrong with the way I'm looking at it?"
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 226 bytes
Desc: not available
Url : http://lists.sans.org/pipermail/list/attachments/20090309/d22d6200/attachment.bin