[fw-wiz] [IP] China Mandates Closed Security Standard

From: Gregory Hicks (ghicks_at_cadence.com)
Date: 02/04/04

  • Next message: Laura Taylor: "RE: [fw-wiz] Generic Rules Digest Software"
    To: firewall-wizards@honor.icsalabs.com, cryptography@metzdowd.com
    Date: Tue, 3 Feb 2004 16:20:29 -0800 (PST)
    
    

    Of interest to security folks... From Dave Farber's IP list..

    ------------- Begin Forwarded Message -------------

    Date: Tue, 03 Feb 2004 18:33:18 -0500
    From: Dave Farber <dave@farber.net>

    China Mandates Closed Security Standard

    The Wi-Fi Alliance and IEEE were apparently taken by surprise when the
    Chinese government's regulatory arm announced that only devices that
    included WAPI (Wired Authentication and Privacy Infrastructure) would
    be legal to sell in China after Dec. 1, 2003.

    That was the first most companies and individuals had heard of WAPI,
    which is a home-grown replacement for the broken WEP (Wired Equivalent
    Privacy) standard that in the rest of the world is being replaced by
    WPA (Wi-Fi Protected Access) and IEEE 802.11i (due to be finished in
    2004).

    The Chinese apparently didn't want to wait for WPA or 802.11i, and have
    mandated WAPI on new equipment. Existing gear doesn't have to be
    trashed, and companies with contracts to deliver equipment that
    extended past Dec. 1 were allowed to continue to deliver it.

    Only a handful of Chinese companies are licensed to include WAPI in
    their equipment, which may force non-Chinese vendors to partner to
    continue to sell into a growing market.

    What's worse, WAPI is confidential. It hasn't been openly discussed or
    tested, and given the nature of China's monitoring of other forms of
    communication, it's likely that the standard includes a method for
    interception of ostensibly encrypted traffic.

    -------------------------------------
    Archives at: http://www.interesting-people.org/archives/interesting-people/

    ------------- End Forwarded Message -------------

    -------------------------------------------------------------------
    Gregory Hicks | Principal Systems Engineer
    Cadence Design Systems | Direct: 408.576.3609
    555 River Oaks Pkwy M/S 6B1 | Fax: 408.894.3400
    San Jose, CA 95134 | Internet: ghicks@cadence.com

    "The trouble with doing anything right the first time is that nobody
    appreciates how difficult it was."

    When a team of dedicated individuals makes a commitment to act as
    one... the sky's the limit.

    Just because "We've always done it that way" is not necessarily a good
    reason to continue to do so... Grace Hopper, Rear Admiral, United
    States Navy

    _______________________________________________
    firewall-wizards mailing list
    firewall-wizards@honor.icsalabs.com
    http://honor.icsalabs.com/mailman/listinfo/firewall-wizards


  • Next message: Laura Taylor: "RE: [fw-wiz] Generic Rules Digest Software"

    Relevant Pages

    • Re: cobol data format!!! urgent!!!
      ... misunderstood what "conformance to a standard" means. ... Cobol people 'know' binary floating-point is ... The quotation above is from IEEE 754. ... same as the IBM System/390 format which isn't the same as the Unisys MCP ...
      (comp.lang.cobol)
    • WIFI Standards War from China
      ... China's preferred wireless standard ... WAPI is gaining acceptance. ... According to reports emanating from last week's China Hi-Tech Fair ... wi-fi as it is more widely known. ...
      (soc.culture.china)
    • Re: WIFI Standards War from China
      ... China's preferred wireless standard ... WAPI is gaining acceptance. ... According to reports emanating from last week's China Hi-Tech Fair ... wi-fi as it is more widely known. ...
      (soc.culture.china)
    • Re: cobol data format!!! urgent!!!
      ... Like most standard committees, the 10967 folk take the attitude 'if ... support it in hardware i.e. all except IBM and Unisys. ... A mandated IEEE 754 implementation ... "Two subsections are dedicated to the floating-point divide, ...
      (comp.lang.cobol)
    • Floating point and insularity was Re: cobol data format!!! urgent!!!
      ... the main need from a COBOL programmer's point of view is the ability to ... I look upon the lack of IEEE floating point in the IBM ... implementing the 2002 standard and making the floating point usages IEEE ... >>formats for each platform. ...
      (comp.lang.cobol)