Re: [Interest] TLS/SSL XML encryption security

2019-10-19 Thread Giuseppe D'Angelo via Interest
Il 19/10/19 14:35, Roland Hughes ha scritto: Actually it is of immense interest and value to the hundreds, perhaps thousands of Qt developers currently working on autonomous vehicles and attempting to integrate that with current infotainment systems. What's of little to no value are discussions o

Re: [Interest] TLS/SSL XML encryption security

2019-10-19 Thread Roland Hughes
On 10/18/19 8:45 AM, Rolf Winter wrote: This is not really about Qt anymore and overall has little to no value in itself. Could you move this discussion somewhere else please. Actually it is of immense interest and value to the hundreds, perhaps thousands of Qt developers currently working on

Re: [Interest] TLS/SSL XML encryption security

2019-10-18 Thread Rolf Winter
This is not really about Qt anymore and overall has little to no value in itself. Could you move this discussion somewhere else please. On Fri, Oct 18, 2019 at 2:46 PM Roland Hughes wrote: > > > On 10/17/19 4:48 PM, Matthew Woehlke wrote: > > On 17/10/2019 09.56, Roland Hughes wrote: > >> This pr

Re: [Interest] TLS/SSL XML encryption security

2019-10-18 Thread Roland Hughes
On 10/17/19 4:48 PM, Matthew Woehlke wrote: On 17/10/2019 09.56, Roland Hughes wrote: This presents the perfect challenge. Once "The Mother Road" it is now difficult to navigate having many turns, stops and 30 MPH stretches. Most importantly there are huge sections without cellular/wireless cov

Re: [Interest] TLS/SSL XML encryption security

2019-10-17 Thread Matthew Woehlke
On 17/10/2019 09.56, Roland Hughes wrote: > This presents the perfect challenge. Once "The Mother Road" it is now > difficult to navigate having many turns, stops and 30 MPH stretches. > Most importantly there are huge sections without cellular/wireless > coverage. Some sections satellite coverage

Re: [Interest] TLS/SSL XML encryption security

2019-10-17 Thread Christian Kandeler
On Thu, 17 Oct 2019 08:56:41 -0500 Roland Hughes wrote: > On this particular topic I won't respond again. Thank you. Christian ___ Interest mailing list Interest@qt-project.org https://lists.qt-project.org/listinfo/interest

Re: [Interest] TLS/SSL XML encryption security

2019-10-17 Thread Roland Hughes
On 10/9/19 5:00 AM, Thiago Macieira wrote: On Tuesday, 8 October 2019 09:26:19 PDT Roland Hughes wrote: A non-broken random generator will produce 2^128 possibilities in 128 bits. You CANNOT compare fast enough Does not matter because has nothing to do with how this works. Not the best, not

Re: [Interest] TLS/SSL XML encryption security

2019-10-08 Thread Thiago Macieira
On Tuesday, 8 October 2019 09:26:19 PDT Roland Hughes wrote: > > That DOES work with keys produced by OpenSSL that was affected by the > > Debian bug you described. That's because the bug caused the problem space > > to be extremely restricted. You said 32768 (2^15) possibilities. > > Unless the k

Re: [Interest] TLS/SSL XML encryption security

2019-10-08 Thread Roland Hughes
On 10/8/19 5:00 AM, Thiago Macieira wrote: On Monday, 7 October 2019 18:08:27 PDT Roland Hughes wrote: There was a time when a Gig of storage would occupy multiple floors of the Sears Tower and the paper weight was unreal. Have you ever heard of Claude Shannon? Nope. Anyway, you can't get mo

Re: [Interest] TLS/SSL XML encryption security

2019-10-08 Thread Roland Hughes
On 10/8/19 5:00 AM, Thiago Macieira wrote: On Monday, 7 October 2019 15:43:21 PDT Roland Hughes wrote: No. This technique is cracking without cracking. You are looking for a fingerprint. That fingerprint is the opening string for an xml document which must be there per the standard. For JSON it

Re: [Interest] TLS/SSL XML encryption security

2019-10-07 Thread Thiago Macieira
On Monday, 7 October 2019 18:08:27 PDT Roland Hughes wrote: > There was a time when a Gig of storage would occupy multiple floors of > the Sears Tower and the paper weight was unreal. Have you ever heard of Claude Shannon? Anyway, you can't get more data into storage than there are possible state

Re: [Interest] TLS/SSL XML encryption security

2019-10-07 Thread Thiago Macieira
On Monday, 7 October 2019 15:43:21 PDT Roland Hughes wrote: > No. This technique is cracking without cracking. You are looking for a > fingerprint. That fingerprint is the opening string for an xml document > which must be there per the standard. For JSON it is the quote and colon > stuff mentioned

Re: [Interest] TLS/SSL XML encryption security

2019-10-07 Thread Roland Hughes
On 10/7/19 6:21 PM, Thiago Macieira wrote: On segunda-feira, 7 de outubro de 2019 07:06:07 PDT Roland Hughes wrote: We now have the storage and computing power available to create the database or 2^128 database tables if needed. Do you know how ludicrous this statement is? Let's say you had

Re: [Interest] TLS/SSL XML encryption security

2019-10-07 Thread Roland Hughes
On 10/7/19 6:21 PM, Thiago Macieira wrote: On segunda-feira, 7 de outubro de 2019 05:31:17 PDT Roland Hughes wrote: Let us not forget we are at the end of the x86 era when it comes to what evil-doers will use to generate a fingerprint database, or brute force crack. https://www.technologyrevie

Re: [Interest] TLS/SSL XML encryption security

2019-10-07 Thread Roland Hughes
From the haze of the smoke. And the mescaline. - The Airborne Toxic Event "Wishing Well" On 10/7/19 3:46 PM, Matthew Woehlke wrote: On 04/10/2019 20.17, Roland Hughes wrote: Even if all of that stuff has been fixed, you have to be absolutely certain the encryption method you choose doesn't l

Re: [Interest] TLS/SSL XML encryption security

2019-10-07 Thread Matthew Woehlke
On 04/10/2019 20.17, Roland Hughes wrote: > On 10/3/19 5:00 AM, Matthew Woehlke wrote: >> On 01/10/2019 20.47, Roland Hughes wrote: >>> To really secure transmitted data, you cannot use an open standard which >>> has readily identifiable fields. Companies needing great security are >>> moving to pr

Re: [Interest] TLS/SSL XML encryption security

2019-10-07 Thread Thiago Macieira
On segunda-feira, 7 de outubro de 2019 07:06:07 PDT Roland Hughes wrote: > We now > have the storage and computing power available to create the database or > 2^128 database tables if needed. Do you know how ludicrous this statement is? Let's say you had 128 bits for each of the 2^128 entries, wi

Re: [Interest] TLS/SSL XML encryption security

2019-10-07 Thread Thiago Macieira
On segunda-feira, 7 de outubro de 2019 05:31:17 PDT Roland Hughes wrote: > Screaming about the size of the forest one will hide there tree in > doesn't change the security by obscurity aspect of it. Thumping the desk > and claiming a forest which is 2^128 * 2^key-bit-width doesn't mean you > aren't

Re: [Interest] TLS/SSL XML encryption security

2019-10-07 Thread Henry Skoglund
Yes, I also know about the lizardmen from Phobos who can crack SSL/TLS keys instantly. If you can show some code all this would be much more credible. After all, this is a Qt mailing list, not a science fiction one. Rgrds Henry On 2019-10-07 16:06, Roland Hughes wrote: On 10/7/19 5:00 AM, T

Re: [Interest] TLS/SSL XML encryption security

2019-10-07 Thread Roland Hughes
On 10/7/19 5:00 AM, Thiago Macieira wrote: You do realise that's not how modern encryption works, right? You do realise that SSL/TLS rekeys periodically to avoid even a compromised key from going further? That's what the "data limit for all ciphersuits" means: rekey after a while. yeah. You'r

Re: [Interest] TLS/SSL XML encryption security

2019-10-07 Thread Roland Hughes
On 10/7/19 5:00 AM, Konrad Rosenbaum wrote: Hi, On 10/5/19 2:17 AM, Roland Hughes wrote: _ALL_ electronic encryption is security by obscurity. Take a moment and let that sink in because it is fact. Okay, out with it! What secret service are you working for and why are you trying to sell eve

Re: [Interest] TLS/SSL XML encryption security

2019-10-06 Thread Konrad Rosenbaum
Hi, On 10/5/19 2:17 AM, Roland Hughes wrote: _ALL_ electronic encryption is security by obscurity. Take a moment and let that sink in because it is fact. Okay, out with it! What secret service are you working for and why are you trying to sell everybody on bullshit that weakens our collecti

Re: [Interest] TLS/SSL XML encryption security

2019-10-05 Thread Giuseppe D'Angelo via Interest
Il 05/10/19 02:17, Roland Hughes ha scritto: Sorry, I need to invert the quoted message so answers make sense. On 10/3/19 5:00 AM, Matthew Woehlke wrote: On 01/10/2019 20.47, Roland Hughes wrote: If they targeted something which uses XML documents to communicate, they don't need to brute

Re: [Interest] TLS/SSL XML encryption security

2019-10-04 Thread Roland Hughes
Sorry, I need to invert the quoted message so answers make sense. On 10/3/19 5:00 AM, Matthew Woehlke wrote: On 01/10/2019 20.47, Roland Hughes wrote: If they targeted something which uses XML documents to communicate, they don't need to brute force attempt everything, just the first 120 or