[48108] in Cypherpunks
Re: Lotus Notes
daemon@ATHENA.MIT.EDU (Simon Spero)
Fri Jan 26 02:39:39 1996
Date: Thu, 25 Jan 1996 23:31:27 -0800 (PST)
From: Simon Spero <ses@tipper.oit.unc.edu>
To: JMKELSEY@delphi.com
Cc: cypherpunks@toad.com
In-Reply-To: <01I0FXJK293C9DCXJ9@delphi.com>
[Birthday paradoxing to get test for non-random padding]
> simply generating a few thousand messages (maybe six or seven
> thousand, to be safe), and seeing whether or not we ever get a
> duplicate LEAF. We expect to, after about 2^12 encryptions, if
If you were to try this, you'ld probably want to try around 12,000 to
reach the 95% confidence interval. However, I seriously doubt that this
is going to be the case; they're using BSAFE, which does random padding
to PCKS1 in just about all it's RSA modes. The only people Lotus could
hire to get it that wrong probably have too much tied up in options to be
easily head-hunted.
Simon
