[5980] in cryptography@c2.net mail archive
CSS broken
daemon@ATHENA.MIT.EDU (Frank Andrew Stevenson)
Wed Oct 27 10:06:12 1999
Date: Wed, 27 Oct 1999 14:54:17 +0200 (CEST)
From: Frank Andrew Stevenson <frank@funcom.com>
To: cryptography@c2.net
Message-ID: <Pine.SGI.3.96.991027144958.28574A-100000@odin>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Monday sourcecode for the CSS algorithm was released
through an anonymous remailer. CSS is the encryption algoritm
used on DVD movies, and it was supected that it was weak
beyond just having a 40 bit key. Yesterday I found it to
be vulnerable to a trivial 2^16 attack with as little
as 6 bytes of known plaintext.
I posted the details on:
http://livid.on.openprojects.net/pipermail/livid-dev/1999-October/000589.html
frank
This sentence is unique in this respect; it can safely
be attributed to my employer, Funcom Oslo AS.
E3D2BCADBEF8C82F A5891D2B6730EA1B PGPmail preferred, finger for key
There is no place like N59 50.558' E010 50.870'. (WGS84)