[15006] in cryptography@c2.net mail archive
The PAIN mnemonic
daemon@ATHENA.MIT.EDU (Carl Ellison)
Mon Dec 22 19:12:48 2003
X-Original-To: cryptography@metzdowd.com
X-Original-To: cryptography@metzdowd.com
From: "Carl Ellison" <cme@acm.org>
To: "'Anne & Lynn Wheeler'" <lynn@garlic.com>
Cc: <cryptography@metzdowd.com>
Date: Sat, 20 Dec 2003 23:20:51 -0800
In-Reply-To: <4.2.2.20031220065839.00acbef0@mail.earthlink.net>
> A security taxonomy, PAIN:
> * privacy (aka thinks like encryption)
> * authentication (origin)
> * integrity (contents)
> * non-repudiation
Sorry, Lynn, but I don't buy this.
It's missing replay prevention (freshness)
and it included non-repudiation which is an unachievable, nonsense concept.
If you want to keep the mnemonic, you can change the 4th one to
"non-replay".
- Carl
+------------------------------------------------------------------+
|Carl M. Ellison cme@acm.org http://theworld.com/~cme |
| PGP: 75C5 1814 C3E3 AAA7 3F31 47B9 73F1 7E3C 96E7 2B71 |
+---Officer, arrest that man. He's whistling a copyrighted song.---+
---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com
