Bugtraq mailing list archives
Re: Lotus Notes Encryption Methods
From: isdmill () gatekeeper ddp state me us (David Miller)
Date: Fri, 17 Mar 1995 08:22:21 -0500 (EST)
On Thu, 16 Mar 1995, Software Test Account wrote:
On Tue, 14 Mar 1995, Dr. Frederick B. Cohen wrote:In the tech notes that I have, it would seemt that RC2 uses a 128bit key and RC4 uses a 256bit key. Both these keys seem rather small in comparison to something like PGP's 1028bit key.128bit key is about 40 digits - NSA approved - breakable by a PC in a few hours. FCYou have actually done this with a PC? With what kind of hw/sw??? Seems other comments would suggest that this would be an unlikely occurence. Can you expand on your statement.
As has ben pointed out already, the bits of a pgp key refer to the length of a number which must be factored to recover the 128 bit IDEA session key. Factoring a 128 bit number is not a difficult challenge on a PC. Trying all possible keys in a 128 bit key is not realistic on any type of computer today. If you wish to pursue this further, could you please take it to private email or a more appropriate place (sci.cryptography, sci.cryptography.research, cypherpunks)? Thanks:)
Erik ____ _____ _______ __ Erik Lindquist / _ | / ___/ / _____/ / / Systems Administrator / /_| | / /__ / / / / AECL Whiteshell Laboratories / __ | / ___/ / / / / VOICE: (204) 753-2311x3145 / / | | / /____ / /_____ / /_____ FAX: (204) 753-2455 /_/ |_| /______/ /_______/ /________/ E-mail: lindquie () wu1 wl aecl ca
---------------------------------------------------------------------------- It's *amazing* what one can accomplish when one doesn't know what one can't do!
Current thread:
- Re: Lotus Notes Encryption Methods, (continued)
- Re: Lotus Notes Encryption Methods Perry E. Metzger (Mar 14)
- Re: Lotus Notes Encryption Methods Vishy Gopalakrishnan (Mar 14)
- Non-PK encryption not vulnerable via low key length?! Jonathan Cooper (Mar 15)
- Re: Non-PK encryption not vulnerable via low key length?! Mark G. Scheuern (Mar 15)
- Re: Non-PK encryption not vulnerable via low key length?! That Whispering Wolf... (Mar 16)
- Re: Non-PK encryption not vulnerable via low key length?! Software Test Account (Mar 16)
- Re: Non-PK encryption not vulnerable via low key length?! Adam Shostack (Mar 17)
- Re: Non-PK encryption not vulnerable via low key length?! Allan Sutton (Mar 17)
- Non-PK encryption not vulnerable via low key length?! Jonathan Cooper (Mar 15)
- Problems with wuftpd - password logging(?) DaVe McComb (Mar 16)
- Re: Lotus Notes Encryption Methods David Miller (Mar 17)