Factbites
 Where results make sense
About us   |   Why use us?   |   Reviews   |   PR   |   Contact us  

Topic: Snake oil (cryptography)


Related Topics

In the News (Sat 14 Nov 09)

  
  Snake oil - Wikipedia, the free encyclopedia
Snake Oil and Holy Water is also the title of a well-known essay by Richard Dawkins attacking the convergence of science and religion, and Snake Oil is the title of a book by John Diamond attacking alternative medicine.
Snake oil originally came from China, where it was used as a remedy for inflammation and pain in rheumatoid arthritis, bursitis, and other similar conditions.
An alternate theory for the origins of the term "snake oil" is that it was a corruption of "Seneca oil", after the Seneca tribe in the Eastern United States, who were known to use petroleum from natural seeps as a liniment for skin ailments.
en.wikipedia.org /wiki/Snake_oil   (746 words)

  
 Snake oil (cryptography) - Wikipedia, the free encyclopedia
In cryptography, snake oil is a term used to describe commercial cryptographic methods and products which are considered bogus or fraudulent, and therefore insecure.
Distinguishing secure cryptography from insecure cryptography can be difficult from the viewpoint of a user; for example, the output any kind of encryption or obfustication will typically resemble gibberish.
Since cryptography is a complicated subject, many snake oil purveyors will use very complicated "technobabble" to hide behind and sell their product.
en.wikipedia.org /wiki/Snake_oil_(cryptography)   (1905 words)

  
 Snake oil (cryptography)   (Site not responding. Last check: 2007-11-07)
In cryptography, snake oil is a term used to describe bogus or fraudulent cryptographic methods and products, such as ciphers with vast key lengths or which need no keyss at all, secret algorithms and devices that claim to solve all security problems, and cryptographic bumph generally.
Cryptography is widely used today — to keep information secret, to ensure data integrity, to authenticate message senders, for message non-repudiation, etc. It is also widely used in ways which, for reasons of design error or misapplication, are insecure, insecurable, ineffective, or inappropriate.
Since even legitimate, non-snake oil, cryptography descriptions are confusing and obscure to most, the difference between real obscurity and bogus nonsense may be hard for the non-cryptographically knowledgeable to identify, no matter how well informed such folks may be in other fields, even technical ones.
www.sciencedaily.com /encyclopedia/snake_oil__cryptography_   (1783 words)

  
 Snake oil - TheBestLinks.com - Alchemy, Alcohol, Alternative medicine, Cryptography, ...   (Site not responding. Last check: 2007-11-07)
Snake oil is a term used for fake, fraudulent, and usually ineffective potions and nostrums.
In time, snake oil became a generic name for any medicine, 'patented' or not, typically marketed as a panacea or miraculous remedy, whose ingredients were usually secret, unidentified, or mis-characterized, and mostly inert or ineffective.
The snake oil peddler was an historical and folkloric figure of the American Old West, often featured in Western movies: a travelling "doctor" with dubious credentials, selling some patent medicine — such as snake oil — with boisterous marketing hype, often supported by pseudo-scientific evidence.
www.thebestlinks.com /Snake_oil.html   (485 words)

  
 Encyclopedia: Snake oil (cryptography)
In cryptography, encryption is the process of obscuring information to make it unreadable without special knowledge.
In cryptography, Kerckhoffs law (also called Kerckhoffs assumption, axiom or principle) was stated by Auguste Kerckhoffs in the 19th century: a cryptosystem should be secure even if everything about the system, except the key, is public knowledge.
In cryptography, the key size (alternatively key length) is a measure of the number of possible keys which can be used in a cipher.
www.nationmaster.com /encyclopedia/Snake-oil-(cryptography)   (2815 words)

  
 ipedia.com: Snake oil (cryptography) Article   (Site not responding. Last check: 2007-11-07)
In cryptography, snake oil is a term used to describe bogus or fraudulent cryptographic methods and products, such as ciphers with vast key lengths or which need no keyss at all, secret algorithms and...
Most often, such snake oil secrecy only prevents the user/purchaser from discovering the method's flaws; indeed, it has often prevented an honest – though confused or deluded – developer/inventor from seeing one or more of those flaws.
Since even high quality, very secure and legitimate cryptography descriptions are confusing and obscure to most, the difference between real obscurity and bogus nonsense may be hard for the non-cryptographically knowledgeable to identify, no matter how well informed such folks may be in other fields, even technical ones.
www.ipedia.com /snake_oil__cryptography_.html   (1856 words)

  
 Snake Oil (from the Feb 99 Crypto-Gram)
Snake Oil The problem with bad security is that it looks just like good security.
Cryptography is hard; the odds that someone without any experience in the field can revolutionize it are small.
Further reading: The "Snake Oil" FAQ is an excellent source of information on questionable cryptographic products, and a good way to increase the sensitivity of your bullshit detector.
www.shmoo.com /mail/cypherpunks/feb99/msg00205.html   (2160 words)

  
 Avoiding bogus encryption products: Snake Oil FAQ   (Site not responding. Last check: 2007-11-07)
This is a compilation of common habits of snake oil vendors.
Symmetric vs. Asymmetric Cryptography There are two basic types of cryptosystems: symmetric (also known as ``conventional'' or ``secret key'') and asymmetric (``public key.'') Symmetric ciphers require both the sender and the recipient to have the same key.
Snake Oil Warning Signs ``Trust Us, We Know What We're Doing'' Perhaps the biggest warning sign of all is the ``trust us, we know what we're doing'' message that's either stated directly or implied by the vendor.
www.faqs.org /faqs/cryptography-faq/snake-oil   (4136 words)

  
 Snake Oil Encryption   (Site not responding. Last check: 2007-11-07)
Indeed, cryptography has been around thousands of years, and its history is marked again and again by the excessive confidence of system designers and the inevitable fall of secret cipher after secret cipher.
Snake oil vendors are like the con artists who advertise via spam mail.
Another vendor manages to deliver three snake oil claims in a single sentence on its web site: "Uses 128 rounds of a ridiculously strong 3072 bit paranoid encryption that far exceeds even military standards!" Note the exaggerrated claim, the large key size, and the claim to military-grade security, even though no such thing exists.
www.securius.com /newsletters/Snake_Oil_Encryption.html   (1171 words)

  
 Modern Cryptography
The basic element of all modern cryptography is a cipher, which is a mathematical set of rules (known technically as an algorithm) for converting one sequence of bits into another.
In the world of cryptography, we assume something is broken until we have evidence to the contrary." By this he means that an encryption method can be fully trusted only if it has been subject to rigorous and critical analysis by experts to check its resistance to all known cryptanalytic attacks.
These warning signs for snake oil are by no means foolproof, but they do serve as a useful guide for most users, who do not have the expertise or time to make an assessment of cryptographic software for themselves.
www.queen.clara.net /pgp/art5.html   (1906 words)

  
 What is cryptography? - A Word Definition From the Webopedia Computer Dictionary
Cryptography is used to protect e-mail messages, credit card information, and corporate data.
Cryptography systems can be broadly classified into symmetric-key systems that use a single key that both the sender and recipient have, and public-key systems that use two keys, a public key known to everyone and a private key that only the recipient of messages uses.
Contains links to information on cryptography, a tutorial on public key encryption for secrecy and a discussion of the debate regarding government control of cryptography.
www.webopedia.com /TERM/c/cryptography.html   (611 words)

  
 Perfect Security - Snake Oil
Revolutionary Breakthroughs Beware of any vendor who claims to have invented a ``new type of cryptography'' or a ``revolutionary breakthrough.'' True breakthroughs are likely to show up in research literature, and professionals in the field typically won't trust them until after years of analysis, when they're not so new anymore.
But it is important to understand that any variation in the implementation means that it is not an OTP and has nowhere near the security of an OTP.
They must be truly random, using a real random source such as specialized hardware, radioactive decay timings, etc. Some snake oil vendors will try to dance around this issue, and talk about functions they perform on the bit stream, things they do with the bit stream vs. the plaintext, or something similar.
www.onetimepad.net /en/snakeoil.html   (4122 words)

  
 Cryptography
Additional Information: Cryptography is the art of creating and using cryptosystems.
Cryptosystems are methods of rendering messages such that only a select group of people may read them in the original form.
History of cryptography, cipher machines and their simulation, cryptanalysis and other code breaking techniques.
www.canadiancontent.net /dir/Top/Computers/Hacking/Cryptography   (451 words)

  
 HerpSearch.com - USA's biggest reptile search engine   (Site not responding. Last check: 2007-11-07)
The brown snake lays from 10 to 35 eggs.
The common or eastern brown snake is found throughout the eastern half of...
Snake and Snake Productions T-shirts of goddesses and lunar phase...
www.herpsearch.com /?q=Snake&s=70   (268 words)

  
 Snake Oil Warning Signs: Encryption Software to Avoid   (Site not responding. Last check: 2007-11-07)
Beware of any vendor who claims to have invented a ``new type of cryptography'' or a ``revolutionary breakthrough.'' True breakthroughs are likely to show up in research literature, and professionals in the field typically won't trust them until after years of analysis, when they're not so new anymore.
Some vendors will claim their software is ``unbreakable.'' This is marketing hype, and a common sign of snake oil.
Strong cryptography is considered dangerous munitions by the United States and requires approval from the US State Department before it can leave the country.
www.privacy.com.au /snake-oil-faq.html   (3844 words)

  
 Madhu's Corner :: Security and Cryptography   (Site not responding. Last check: 2007-11-07)
Cryptography is the science of converting easy to understand information (plaintext) into undecipherable junk (ciphertext).
I'm pretty sad at the number of times that poor cryptography (known as snake-oil) is passed off, esp in the name of "advanced" "proprietary" "patent pending" algorithms.
Security and Cryptography are often allied subjects, but that's all that can be said.
www.kurups.org /secure   (217 words)

  
 Cryptography
Snake Oil Warning Signs: Encryption Software to Avoid; Interhack.Net, the research site of Interhack (2003) - This page is a FAQ-style compilation of the habits of "Snake Oil Vendors", the sellers of overrated or useless cryptography packages.
Cryptography Overview - A nice tutorial on what cryptography is from the National Institute of Standards and Technology.
Cryptography For the Masses by Gary Anthes; May 27, 2002; This article discusses how cryptography is seen as being too complicated and so sometimes it is not used.
csc.colstate.edu /summers/e-library/crypto.html   (5573 words)

  
 What is snake oil? - A Word Definition From the Webopedia Computer Dictionary
Refers to a cryptography or security product that makes exaggerated claims of what the product is capable of, giving the user a false sense of security.
The term snake oil, which is credited to Matt Curtin for using in reference to computer security products, comes from the 19
Snake oil salesmen would falsely claim that the potions would cure any ailments.
www.webopedia.com /TERM/S/snake_oil.html   (146 words)

  
 Cryptography
Unfortunately, they seem to abandoning some key features of any cryptography program, and that is the ability of the user to ensure that the program does what it claims to do and does not insert any foreign security weakening material.
Cryptography is bought precisely because of a lack of trust of others by the purchaser, and this lack of trust should also extend to the manufacturer of the cryptographic engines.
However the whole of the regulations controling the export of cryptography in the USA has been thrown into confusion by the Bernstein case.
axion.physics.ubc.ca /crypt.html   (4841 words)

  
 [No title]
The very fact that they haven't even learned enough cryptography to know these elementary concepts is not reassuring.
It has strong cryptography, but requires some sort of special license from the government to buy this strong version.
Unlike the patent medicine hucksters of old, these software implementors usually don't even know their stuff is snake oil.
www.philzimmermann.com /EN/essays/SnakeOil.html   (1808 words)

  
 List of cryptography topics - LearnThis.Info Enclyclopedia   (Site not responding. Last check: 2007-11-07)
This page aims to alphabetically list articles that are primarily related to cryptography.
There is a categorised and (somewhat) annotated list of the same articles in subject groupings at Topics in cryptography; it will probably be more useful to those attempting to make some sense of the field.
Topics in cryptography — an analytical list of articles and terms.
encyclopedia.learnthis.info /l/li/list_of_cryptography_topics.html   (581 words)

  
 Cryptography on Linux - Snake Oil   (Site not responding. Last check: 2007-11-07)
But most companies trying to market cryptography don't understand that and have marketing people, who don't understand that, trying to promote their products.
Now, instead of trying to outright suppress it or regulate it, they are trying to coerce companies into installing "escrow" or "backdoor" options into cryptographical strong products so that the government can intrude into you communications (and the government will decide when and they don't have to inform you).
This leaves a ripe open field for opponent of strong cryptography to raise the spector of the the "Four Horsemen of the Infocalypse", drug-dealers, money-launderers, terrorists, and pedophiles.
www.wittsend.com /crypto/notes09.html   (355 words)

  
 USENIX ;login: - electronic snake oil
However, over the years, a few common practices have developed that have helped us identify the traits of those whose products are "snake oil." Before we consider those, though, let's cover some terminology and basic concepts of cryptography.
There is the USENET Cryptography FAQ, RSA's Cryptography Today FAQ, and books such as Bruce Schneier's excellent Applied Cryptography[1].
Note that a vendor who specializes in cryptography may have a proprietary algorithm that it will reveal only under a nondisclosure agreement.
www.usenix.org /publications/login/1999-4/snake_oil.html   (3763 words)

  
 Open Directory - Computers: Hacking: Cryptography   (Site not responding. Last check: 2007-11-07)
Cryptography FAQ - Ten part FAQ list that is essential reading for any newcomer to cryptography.
Cryptography World - Introduction to cryptography, including concepts, key management and application.
Why Cryptography Is Harder Than It Looks - Essay on pitfalls of implementing and using secure systems.
dmoz.org /Computers/Hacking/Cryptography   (508 words)

  
 Hyperlink: Security: Cryptography
This is a survey of existing and proposed laws and regulations on cryptography - systems used for protecting information against unauthorized access - around the world.
Using Cryptography: Cryptography processes, procedures, and extended samples of C and Visual Basic programs using CryptoAPI functions and CAPICOM objects.
Cryptography Reference: Detailed descriptions of the Microsoft Windows CryptoAPI - cryptography functions, interfaces, objects, structures, and other programming elements.
www.mhavila.com.br /link/security/crypto.html.en   (1204 words)

  
 [No title]
Symmetric vs. Asymmetric Cryptography There are two basic types of cryptosystems: symmetric (also known as "conventional" or "secret key") and asymmetric ("public key").
True breakthroughs are likely to show up in research literature, and professionals in the field typically won't trust them until after years of analysis, when they're not so new anymore.
These are the rules by which munitions (including cryptography), as defined by the US State Department, may (or may not) be exported from the US.
www.shorty.com /info/encrypt/snakeoil.txt   (3742 words)

  
 Gourt :: Computers :: Hacking :: Cryptography
Cryptography FAQ: Ten part FAQ list that is essential reading for any newcomer to cryptography.
Frode Weierud's Cryptology Page: Frode's Cryptology Page is dedicated to the history of cryptography, cipher machines and their simulation, cryptanalysis and other code breaking techniques.
Handbook of Applied Cryptography: This site provides order information, updates, errata, supplementary information, chapter bibliographies, and other information for the 1996 CRC Handbook of Applied Cryptography by Menezes, van Oorschot and Vanstone.
computers.gourt.com /Hacking/Cryptography.html   (652 words)

  
 Oils HQ : Snake Oil
Whilst every care is taken in the maintenance of this site, Oils HQ does not warrant or guarantee the accuracy or completeness of the content available on this Website.
As with every resource on the internet, it is your responsibility to judge the accuracy or completeness of the content before relying on it in any way.
Oils HQ excludes all liability of any kind (including negligence) in respect of any third party information or other material made available on, or which can be accessed using, this Website.
oilshq.com /snakeoil/index.php   (863 words)

Try your search on: Qwika (all wikis)

Factbites
  About us   |   Why use us?   |   Reviews   |   Press   |   Contact us  
Copyright © 2005-2007 www.factbites.com Usage implies agreement with terms.