[38162] in bugtraq

home help back first fref pref prev next nref lref last post

Re: The Misuse of RC4 in Microsoft Word and Excel

daemon@ATHENA.MIT.EDU (Brendan Dolan-Gavitt)
Tue Jan 11 19:52:19 2005

Date: Tue, 11 Jan 2005 14:42:02 -0500
To: Hongjun Wu <hongjun@i2r.a-star.edu.sg>
Cc: bugtraq@securityfocus.com
Message-ID: <20050111194202.GA11711@aurora>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="ikeVEW9yuYc//A+q"
Content-Disposition: inline
In-Reply-To: <20050111113754.21736.qmail@www.securityfocus.com>
From: Brendan Dolan-Gavitt <bdolangavitt@wesleyan.edu>
X-MailScanner-From: bdolangavitt@wesleyan.edu


--ikeVEW9yuYc//A+q
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

This isn't the first time Microsoft has made this exact mistake with
RC4; they did it with Syskey too. Have a look at:

http://www.bindview.com/Support/RAZOR/Advisories/1999/adv_WinNT_syskey.cfm

-Brendan

--ikeVEW9yuYc//A+q
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)

iD8DBQFB5CwKOmq2C6cMAtYRAjLzAJ9gtlO1+aYncdz7RGH2ws+5sbHkxACgi+t1
dEQ4GvTWDNLemgMY9JS4UZE=
=/GUh
-----END PGP SIGNATURE-----

--ikeVEW9yuYc//A+q--

home help back first fref pref prev next nref lref last post