Strength in Complexity?

[Perry E. Metzger]

Arshad Noor <arshad.noor at strongauth.com> writes:
> Ben Laurie wrote:
>> As such, I'm not seeing much value.
>
> That may be because you are a cryptographer.  If you were the CSO, an
> Operations Director, or an Application Developer in a company that had
> to manage encryption keys for 5,000 POS Terminals, 10,000 laptops,
> desktops and servers across multiple data-centers and 400 stores, you
> would see it very differently.

I'm not sure I would see it differently from Ben.

There are existing deployed solutions like Kerberos that scale far
beyond that and work just fine, and actually address all the things
this protocol seems to leave as an exercise to the reader. And yes,
they're in use in real companies at gigantic scales. (Indeed, Kerberos
is central to Microsoft's technologies these days.)


Perry

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at metzdowd.com