[OTR-dev] Draft of Security Analysis

[Andrew S. Morrison]

We wanted to send along the draft of some of the results of our security
analysis before we give a talk on it in a few days in hopes we could get
some comments. We believe we've found a few good attacks.

http://www.stanford.edu/~amo/DRAFT_otr_analysis.pdf

The paper is just a draft right now. We're hoping some people on this list
could take a look at the "Attacks Found" section and read through to make
sure the attacks are legitimate. After a round of getting comments from
you guys and some others we'll send the final version of our paper and the
Murphi code we used to model OTR. That'll be in about a week and a half.

The talk we're giving will be on Stanford campus this Thursday some time
after 1:15. If anyone is interested in coming to see our presentation let
me know. It'll only be about 15 minutes, and there'll be a few other
presentations from groups analyzing other protocols.

-- 
Andrew S. Morrison
asm at cs.stanford.edu
(650) 575 9261
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <http://lists.cypherpunks.ca/pipermail/otr-dev/attachments/20060306/7a4aaaa8/attachment.pgp>