Tag Info

Hot answers tagged


There are a variety of sources out there for this kind of information, but only for individual services or operating systems. It's rather hard to get exact dates and version information on a lot of this, because people still had old versions of software running, or changes weren't documented at the same time they were made. I've done my best to correlate the ...


NSA was undergoing a transformation on the subject question during the timeframe you are questioning. In the previous two decades through the mid 90s NSA advocated for no strong privately controlled public encryption. This position surfaced with their clash with MIT over the work of the famed RSA crew Ron Rivest, Adi Shamir, and Leonard Adleman resulting ...


A quote from SSL and TLS: Theory and Practice - Rolf Oppliger says: Netscape Communications started to develop the SSL protocol soon after the National Center for Supercomputing Applications (NCSA) released Mosaic 1.0--the first popular Web browser--in 1993. Eight months later, in the middle of 1994, Netscape Communications already completed the design ...


what NSA suggested for use in commercial systems in past times. 90's and early 2000's. NSA did not publicize their involvement in national standards. So, the exact role NSA played in algorithms and documents may be difficult to determine. In 1987 the U.S. Congress passed the "Computer Security Act" which was intended to limit the role of the National ...


Phillip Hallam-Baker has written: The actual history of SSL was that SSL 1.0 was so bad that Alan Schiffman and myself broke it in ten minutes when Marc Andressen presented it at the MIT meeting. http://www.metzdowd.com/pipermail/cryptography/2013-October/018041.html No further details on what exactly the flaws were, though.


There were quite a few, but the ones that got a lot of news time over here: 3 on Facebook CIA UK Police FBI


A big reason for knowing outdated ciphers is so you can decrypt older documents that were made before the advent of modern cryptography methods. As a famous example, we have Kryptos, a sculpture by Jim Sanborn that's found outside the CIA offices in Langley. Kryptos has 4 different encrypted texts, 3 of which have been decrypted already, the 4th being one of ...


If you're doing reverse engineering, penetration testing, or generally involved in looking at things someone else has built, for some strange reason, folks always try coming up with their "own" encryption schemes, which are either flawed or embarrassing mis-interpretations of old ciphers, or just vanilla implementations of old algorithms. Beyond that, you ...


SSL 1.0 -> around 1994 with Mosaic, got thrown into trash a year later for ssl 2.0. so ssl 1.0 was the first draft, without any RFCs, very Mosaic-Centric. http://en.wikipedia.org/wiki/Transport_Layer_Security#SSL_1.0.2C_2.0_and_3.0 http://de.wikipedia.org/wiki/Transport_Layer_Security#Geschichte

Only top voted, non community-wiki answers of a minimum length are eligible