[52753] in Cypherpunks
Re: HP & Export of DCE
daemon@ATHENA.MIT.EDU (Perry E. Metzger)
Wed Mar 27 12:36:29 1996
To: Adam Shostack <adam@lighthouse.homeport.org>
Cc: cypherpunks@toad.com
In-Reply-To: Your message of "Wed, 27 Mar 1996 11:18:49 EST."
<199603271619.LAA08716@homeport.org>
Reply-To: perry@piermont.com
Date: Wed, 27 Mar 1996 11:21:06 -0500
From: "Perry E. Metzger" <perry@piermont.com>
Adam Shostack writes:
> | Adam Shostack writes:
> | > Well, if Leahy passes, DCE is exportable. Anyone know if the
> | > 'SecureRPC' in DCE is the one BAL broke years back?
> |
> | No, they broke Sun's Secure RPC, which is different.
>
> I wasn't aware there were multiple things masquerading under the name
> Secure RPC. In any event, does the crypto in DCE stand up to the
> LaMacchia/Odlyzko attacks?
They are attacks against Diffie-Hellman. I don't know if DCE uses D-H
in a similar manner. The main problem was too small a (fixed) modulus.
> (And did Sun ever upgrade what they ship?)
I don't believe so.
Perry
