Linux-Hams archive - August 1998: Re: Password Security

Re: Password Security

David C. Brown N2RJT (hxzehd.zopt@usda.gov)
Mon, 10 Aug 1998 22:55:11 -0400 (EDT)


On Mon, 10 Aug 1998, Sean Bowers wrote:

> Brian,
>
> I'll look into this just out of curiosity sake, but are there provisions in CFR
> Part 97 that say encryption (even one time) is permitted only when used for access
> control on packet radio, etc. I would certainly make sure all my ducks were in a
> row before transmitting an encrypted password. Just MHO.
>
> Cheers,
> Sean

Assuming we're talking about login access:
1) We are talking about access control, so encryption is just fine.
2) Skey isn't encryption. Hashing isn't encryption, either.

Now, if you extrapolate, and you want to provide a private link, oops,
you're now talking about encryption. The way I read the rules, that's not
legal .. even if no key is involved (for example, you can easily make a
session minimally secure just by compressing its data).

> --
>
> mscjm.fbsyso@rijnh.nl
> Computer Programmer/Analyst
> Publication and Printing Services
> University of Southern Mississippi
>

--
Dave  | Email:  terhi.victor@logonet.com
Brown | Packet: N2RJT@WB2PSI.#WNY.NY.USA.NOAM