Article 16846 of alt.security:
Path: jac.zko.dec.com!crl.dec.com!pa.dec.com!decwrl!svc.portal.com!uunet!news.cichlid.com!not-for-mail
From: aab@cichlid.com (Andy Burgess)
Newsgroups: comp.security.unix,alt.security,sci.crypt
Subject: STEL VS deslogin
Date: 20 May 1995 14:37:52 -0700
Lines: 36
Message-ID: <3plnfg$4kl@loach.cichlid.com>
References: <3n0hmd$a5h@ghost.sm.dsi.unimi.it>
NNTP-Posting-Host: loach.cichlid.com
Keywords: stel crypto security secure telnet
Xref: jac.zko.dec.com comp.security.unix:16341 alt.security:16846 sci.crypt:29284

In <3n0hmd$a5h@ghost.sm.dsi.unimi.it> vince@idea.sec.dsi.unimi.it (David Vincenzetti) writes:

>Stel stands for Secure TELnet. We started developing Stel,
>at the University of Milan, when we realized that eavesdropping
>was a very serious problem and we did not like the freeware solutions
>that were available at that time. It was about three years ago.
>Still, as far as we know, there are no really satisfying packages
>able to solve the line active and passing tapping problem, and to be
>simple enough to use and to maintain by the average system administrator.
>In fact, in our honest opinion, we believe that the actual security
>packages available on the Internet suffer from at least one of the
>following drawbacks:

>	- Not secure enough
>	- Too large and complicated to install
>	- Too complex to use and maintain
>	- Unable to scale well in a distributed environment
>	- Subject to severe export regulations, so not
>	  suitable for users outside the United States

How does deslogin measure up here? It does use DES (as does STEL) so
I suppose there are export problems. Adding IDEA would not be hard.

Also let me encourage the STEL implementors to look at zlib (a streaming
gzip-like compression library). I added zlib compresison to deslogin and
get 3:1 compression typically. Zlib is totally without usage restrictions.
Remember that an encrypted data stream is essentially non-compressable 
by v.32/v.34/STAC etc so you can really improve your network utilization 
by compressing.

Get deslogin at: ftp://ftp.uu.net/pub/security/des/deslogin-1.3.tar.gz

Get zlib at: ftp://ftp.uu.net/graphics/png/code/zlib092.zip or 
  ftp://godzilli.cs.sunysb.edu/pub/ngf/code/zlib092.zip