Penetration Testing mailing list archives

[PEN-TEST] RC4


From: Jay Mobley <jmobley () IEINET COM>
Date: Tue, 28 Nov 2000 13:12:20 -0800

So , I am not pen-testing anything, but rather looking at some of my own
venurabilities... and in doing so I learn that my Win2k Terminal server
sends data to and from its client in a data stream encrypted with RC4. And
in researching what I could about RC4 , I have seen time and time again that
RC4 source was posted to a public usenet forum..... So my question is
this... If one has the source code to an encryption standard... how secure
is that standard???


-Jay Mobley
Interactive Explorers


Current thread: