From owner-freebsd-security@FreeBSD.ORG Wed Dec 15 17:45:32 2010 Return-Path: Delivered-To: freebsd-security@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 26F95106564A for ; Wed, 15 Dec 2010 17:45:32 +0000 (UTC) (envelope-from bakul@bitblocks.com) Received: from mail.bitblocks.com (mail.bitblocks.com [64.142.15.60]) by mx1.freebsd.org (Postfix) with ESMTP id 0D7938FC1C for ; Wed, 15 Dec 2010 17:45:31 +0000 (UTC) Received: from bitblocks.com (localhost.bitblocks.com [127.0.0.1]) by mail.bitblocks.com (Postfix) with ESMTP id 1BB915B73; Wed, 15 Dec 2010 09:10:13 -0800 (PST) To: =?utf-8?Q?Dag-Erling_Sm=C3=B8rgrav?= In-reply-to: Your message of "Wed, 15 Dec 2010 17:06:48 +0100." <867hfbkokn.fsf@ds4.des.no> References: <30464535.post@talk.nabble.com> <867hfbkokn.fsf@ds4.des.no> Comments: In-reply-to =?utf-8?Q?Dag-Erling_Sm=C3=B8rgrav?= message dated "Wed, 15 Dec 2010 17:06:48 +0100." Date: Wed, 15 Dec 2010 09:10:13 -0800 From: Bakul Shah Message-Id: <20101215171014.1BB915B73@mail.bitblocks.com> Cc: freebsd-security@freebsd.org Subject: Re: IPSEC allegations X-BeenThere: freebsd-security@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Security issues \[members-only posting\]" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 15 Dec 2010 17:45:32 -0000 On Wed, 15 Dec 2010 17:06:48 +0100 =?utf-8?Q?Dag-Erling_Sm=C3=B8rgrav?= wrote: > [redirected from -hackers to -security] > > Jakub Lach writes: > > http://marc.info/?l=3Dopenbsd-tech&m=3D129236621626462&w=3D2 > > http://maycontaintracesofbolts.blogspot.com/2010/12/openbsd-ipsec-backdoor-= > allegations.html I am looking at this only as an interesting puzzle (any motivations of various parties involved are of no relevance in this narrow context). I have no crypto expertise so my question may make no sense. But can one do a "black box" analysis (that is, no peeking at source code!) to figure out if keys are being leaked etc.? I am thinking something analogous to spectal analysis of signals. For instance, doing fourier analysis on the encrypted white noise or some such. Thanks!