[1291] in bugtraq
Re: Lotus Notes Encryption Methods
daemon@ATHENA.MIT.EDU (David Miller)
Fri Mar 17 10:53:31 1995
Date: Fri, 17 Mar 1995 08:22:21 -0500 (EST)
From: David Miller <isdmill@gatekeeper.ddp.state.me.us>
To: Software Test Account <softtest@wu1.wl.aecl.ca>
Cc: "Dr. Frederick B. Cohen" <fc@all.net>, root@wu1.wl.aecl.ca, bugtraq@fc.net
In-Reply-To: <Pine.3.88.9503160854.A11813-0100000@wu1.wl.aecl.ca>
On Thu, 16 Mar 1995, Software Test Account wrote:
> On Tue, 14 Mar 1995, Dr. Frederick B. Cohen wrote:
>
> > > In the tech notes that I have, it would seemt that RC2 uses a 128bit key and
> > > RC4 uses a 256bit key.
> > >
> > > Both these keys seem rather small in comparison to something like PGP's
> > > 1028bit key.
> >
> > 128bit key is about 40 digits - NSA approved - breakable by a PC
> > in a few hours.
> > FC
> >
> You have actually done this with a PC? With what kind of hw/sw???
> Seems other comments would suggest that this would be an unlikely occurence.
> Can you expand on your statement.
As has ben pointed out already, the bits of a pgp key refer to the length
of a number which must be factored to recover the 128 bit IDEA session
key. Factoring a 128 bit number is not a difficult challenge on a PC.
Trying all possible keys in a 128 bit key is not realistic on any type of
computer today.
If you wish to pursue this further, could you please take it to private
email or a more appropriate place (sci.cryptography,
sci.cryptography.research, cypherpunks)?
Thanks:)
>
> Erik
> ____ _____ _______ __ Erik Lindquist
> / _ | / ___/ / _____/ / / Systems Administrator
> / /_| | / /__ / / / / AECL Whiteshell Laboratories
> / __ | / ___/ / / / / VOICE: (204) 753-2311x3145
> / / | | / /____ / /_____ / /_____ FAX: (204) 753-2455
> /_/ |_| /______/ /_______/ /________/ E-mail: lindquie@wu1.wl.aecl.ca
>
>
>
----------------------------------------------------------------------------
It's *amazing* what one can accomplish when
one doesn't know what one can't do!
