[38162] in bugtraq
Re: The Misuse of RC4 in Microsoft Word and Excel
daemon@ATHENA.MIT.EDU (Brendan Dolan-Gavitt)
Tue Jan 11 19:52:19 2005
Date: Tue, 11 Jan 2005 14:42:02 -0500
To: Hongjun Wu <hongjun@i2r.a-star.edu.sg>
Cc: bugtraq@securityfocus.com
Message-ID: <20050111194202.GA11711@aurora>
Mime-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
protocol="application/pgp-signature"; boundary="ikeVEW9yuYc//A+q"
Content-Disposition: inline
In-Reply-To: <20050111113754.21736.qmail@www.securityfocus.com>
From: Brendan Dolan-Gavitt <bdolangavitt@wesleyan.edu>
X-MailScanner-From: bdolangavitt@wesleyan.edu
--ikeVEW9yuYc//A+q
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
This isn't the first time Microsoft has made this exact mistake with
RC4; they did it with Syskey too. Have a look at:
http://www.bindview.com/Support/RAZOR/Advisories/1999/adv_WinNT_syskey.cfm
-Brendan
--ikeVEW9yuYc//A+q
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.5 (GNU/Linux)
iD8DBQFB5CwKOmq2C6cMAtYRAjLzAJ9gtlO1+aYncdz7RGH2ws+5sbHkxACgi+t1
dEQ4GvTWDNLemgMY9JS4UZE=
=/GUh
-----END PGP SIGNATURE-----
--ikeVEW9yuYc//A+q--