[43742] in Cypherpunks
Re: NSA, ITAR, NCSA and plug-in hooks.
daemon@ATHENA.MIT.EDU (Adam Hupp)
Tue Nov 21 16:13:15 1995
Date: Tue, 21 Nov 1995 16:19:24 -0600
To: ylo@cs.hut.fi
From: ahupp@primenet.com (Adam Hupp)
Cc: cypherpunks@toad.com
>Date: Tue, 21 Nov 1995 02:10:02 +0100
>From: Tatu Ylonen <ylo@cs.hut.fi>
>To: ahupp@primenet.com
>Cc: cypherpunks@toad.com
>Subject: Re: NSA, ITAR, NCSA and plug-in hooks.
>
>> PKZIP allows encryption (other's ?). How about a hook to that?
>
>PKZIP "encryption" is self-deception. A program for cracking it,
>PKCRACK, is widely available on the internet. See e.g.
>ftp.funet.fi:/pub/crypt/analysis.
>
>[For information about internationally available cryptographic
>software, see http://www.cs.hut.fi/crypto.]
>
> Tatu Ylonen <ylo@cs.hut.fi>
PKCRACK uses a dictionary attack. Anyway, my point was that you could use
PKZIP's encryption as an excuse for passing a password.
