About OpenBSD and his integrated cryptography

crud · 09-30-2007, 03:03 PM

Hi there, I wanted to ask a question about OpenBSD and its integrated cryptography. What does it means exactly? That includes cryptographic software and algorithms like OpenSSH and PRNG? My question exactly is that if I use OpenBSD in a network commutated by a router or hub for example, and I install a sniffer in that network, all my data will appears encrypted? Even if I visit a website not secured with SSL or so?

Greets,
N-

bsdunix · 10-01-2007, 08:38 PM

Quote:

... OpenBSD and its integrated cryptography. What does it means exactly?

Project Goals

This means IPsec, key engines, Kerberos, free-AFS, and other forms of strong crypto or crypto-using systems.

http://www.openbsd.com/goals.html
http://www.openbsd.com/crypto.html

The Design of the OpenBSD Cryptographic Framework
http://www.openbsd.com/papers/ocf.pdf

Quote:

... if I use OpenBSD in a network commutated by a router or hub for example, and I install a sniffer in that network, all my data will appears encrypted?

No, you have to setup IPsec for end-to-end encrypted data transfers.

http://www.openbsd.org/cgi-bin/man.c...rent&arch=i386

Zero to IPSec in 4 minutes
http://www.securityfocus.com/infocus/1859

crud · 10-05-2007, 03:53 PM

Thank you very much