Date sent: Tue, 25 Oct 2005 00:38:36 +0200 To: cyphrpunk <cyphrpunk@gmail.com> Copies to: John Kelsey <kelsey.j@ix.netcom.com>, Ian G <iang@systemics.com>, ray@unipay.nl, cryptography@metzdowd.com, cypherpunks@jfet.org From: nagydani@epointsystem.org (Daniel A. Nagy) Subject: Re: [fc-discuss] Financial Cryptography Update: On Digital Cash-like Payment Systems
One intresting security measure protecting valuable digital assets (WM protects private keys this way) is "inflating" them before encryption.
While it does not protect agains trojan applications, it does a surprisingly good job at reducing attacks following the key logging + file theft pattern.
This security measure depends on two facts: storage being much cheaper than bandwidth and transmission of long files being detectable, allowing for detecting and thwarting an attack in progress.
How does one inflate a key?
-- Daniel