CISSP_Candidate
08-29-2006, 04:39 PM
I think the answer to the following question on this website is incorrect.
Which of the following is not a concern with the Clipper Chip?
A) Its 80-bit key is weak.
B) The ability of the law enforcement agencies to protect the escrowed keys.
C) It has raised many questions about the public's privacy versus the government's right to eavesdrop.
D) The fact that the Skipjack algorithm was never opened for public review.
The answer was said to be B) The ability of the law enforcement agencies to protect the escrowed keys.
But I think it's wrong because:
1) D) shouldn't be a concern because Skipjack was opened for public review when it was disclassified in 1998. http://en.wikipedia.org/wiki/Skipjack_%28cipher%29.
2) B) should be a concern because the ability of goverment agacies is always a concern of privacy groups.
Here're the deatils on this website:
Details Submit a comment on this question
All of the previous are concerns with the U.S. Government's Clipper Chip, except that keys are not escrowed by law enforcement agencies, but by specialized escrow agencies. There is nonetheless a concern with these agencies' ability to protect escrowed keys, and whether they may divulge them in unauthorized ways. The fact that the Skipjack algorithm (used in the Clipper Chip) was never opened for public review is a concern in the fact that it has never been publicly tested to ensure that the developers did not miss any important steps in building a complex and secure mechanism. Because the algorithm was never released for public review, many people in the public do not trust its effectiveness.
Which of the following is not a concern with the Clipper Chip?
A) Its 80-bit key is weak.
B) The ability of the law enforcement agencies to protect the escrowed keys.
C) It has raised many questions about the public's privacy versus the government's right to eavesdrop.
D) The fact that the Skipjack algorithm was never opened for public review.
The answer was said to be B) The ability of the law enforcement agencies to protect the escrowed keys.
But I think it's wrong because:
1) D) shouldn't be a concern because Skipjack was opened for public review when it was disclassified in 1998. http://en.wikipedia.org/wiki/Skipjack_%28cipher%29.
2) B) should be a concern because the ability of goverment agacies is always a concern of privacy groups.
Here're the deatils on this website:
Details Submit a comment on this question
All of the previous are concerns with the U.S. Government's Clipper Chip, except that keys are not escrowed by law enforcement agencies, but by specialized escrow agencies. There is nonetheless a concern with these agencies' ability to protect escrowed keys, and whether they may divulge them in unauthorized ways. The fact that the Skipjack algorithm (used in the Clipper Chip) was never opened for public review is a concern in the fact that it has never been publicly tested to ensure that the developers did not miss any important steps in building a complex and secure mechanism. Because the algorithm was never released for public review, many people in the public do not trust its effectiveness.