[42226] in Cypherpunks

home help back first fref pref prev next nref lref last post

Re: Quick commercial package question

daemon@ATHENA.MIT.EDU (Marshall Clow)
Wed Oct 25 02:04:00 1995

Date: Tue, 24 Oct 1995 22:57:35 -0700
To: Jonathon Fletcher <jonathon@doemail.sbi.com>
From: Marshall Clow <mclow@coyote.csusm.edu>
Cc: cypherpunks@toad.com

Somebody who might be "Jonathon Fletcher" <jonathon@doemail.sbi.com> said:
>
>  There's a compression/archiving package on the Mac call Stuffit.
>
>  Question is - does anyone know anything about the strength or
>trustability of the encryption algorithm used ? It's freely exportable
>from the US (or so I thought) so it can't be DES. Is it (down) on a level
>with the MS Word or Wordperfect ciphers, or is it a little better ? How
>far should I trust it ?
>
Well, that's an interesting question.
On one hand, it's a proprietary encryption algorithm, written by a bright
17 year old.

On the other hand, there have been no reported cracks, no "decrypt your
encrypted archives" programs like there are for MS Word, or WordPerfect.
(Maybe it's hard, maybe no one cares.)
[ Late breaking news: "t byfield" reported one; it appears not to work. ]

On the gripping hand, there was no trouble getting export approval.

Many people/companies put encrypted Stuffit archives up for anonymous ftp.
(Beta versions of executables, etc)

How far should you trust it?
That's up to you.

-- Marshall
Aladdin Systems, maker of Stuffit Deluxe, etc.

Disclaimer:  There is no way that this can be considered an official
statement of Aladdin Systems.

Marshall Clow
Aladdin Systems
mclow@coyote.csusm.edu
Warning: Objects in calendar are closer than they appear.



home help back first fref pref prev next nref lref last post