-----BEGIN PGP SIGNED MESSAGE-----
in
security and greatly increased costs to the end-user. Building the secure
computer-communication infrastructures necessary to provide adequate
technological underpinnings demanded by these requirements would be enormously
complex and is far beyond the experience and current competency of the field.
Even if such infrastructures could be built, the risks and costs of such an
operating environment may ultimately prove unacceptable. In addition, these
infrastructures would generally require extraordinary levels of human
trustworthiness.
These difficulties are a function of the basic government access requirements
proposed for key-recovery encryption systems. They exist regardless of the
design of the recovery systems - whether the systems use private-key crypto-
graphy or public-key cryptography; whether the databases are split with secret-
sharing techniques or maintained in a single hardened secure facility; whether
the recovery services provide private keys, session keys, or merely decrypt
specific data as needed; and whether there is a single centralized infrastruc-
ture, many decentralized infrastructures, or a collection of different
approaches.
All key-recovery systems require the existence of a highly sensitive and
highly-available secret key or collection of keys that must be maintained in a
secure manner over an ex
-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 0.3.9
1YDlaV8nEHEoYUmvr1IlEpwy3+sAFnXxdlrxJMHohITIjhgnp1/8ZLZ95Jc6z5VS
+t0mh2r1uv0ts2yM8atj74x4i4INcxMHx1zQXu7FcrDme1GYoFbMiqjNRf/XWL6W
XQnNK2x9e+xXBMYbrXF5FzelwvdKVArQ6dkub9l5FtAsuzcEUzdYDttPRj65QM5y
KUpDkCmm0VvkisSZOkAjsbBmiVPpmil6e8NbhKeoNYDSx6MVyNql9d==
=lEox
-----END PGP SIGNATURE-----
FAQ
Profile
Private Messages
Log in
