Re: What benefit would there be in using triple RC4-40?

New Message Reply About this list Date view Thread view Subject view Author view

David Honig (honig@sprynet.com)
Tue, 25 Aug 1998 17:36:33 -0700


At 09:38 AM 8/25/98 +0100, Andy Brown wrote:
>The "strength" of a CAPI application seems to rest entirely upon the security
>of the particular Cryptographic Service Provider (CSP) that you choose to
use.

Also includes the security of CAPI and the rest of the OS, unfortunately.

>All you lucky people inside the USA

Your humor is dry and subtle like a fine wine.

> have a choice of many, including Fortezza

Rolling on the floor, as they say..

>and even a biometric fingerprint version.

We in the Great State of Calif. have the privledge of letting
the DMV store our thumbprints for us.

> Problem is, outside the USA we are
>stuck with only the default MS provider which gets you 40 bit RC4/RC2, 512
bit
>RSA and your private keys stored in the registry. Unpleasant.

"We are stuck with" ---you crack me up.

If you advise your clients to use 40-bits of search space to secure
anything you are guilty of fraud and worse ---your client will act as
if she has real security, when she has none!

In home construction, its a crime to build with known insufficient materials.
How about security consultion/programming?

>Thanks for all the advice, I'm more interested than ever in finding out the
>security of multiple applications of a stream cipher now just as a matter of
>curiosity.
>
>
>- Andy

Math is fun, Andy. Reality is not an option. Microsoft sucks, now work
around it. I am not really this ascerbic. Any questions?

There is a secret message embedded in the phosphor of this period.

  


New Message Reply About this list Date view Thread view Subject view Author view

 
All trademarks and copyrights are the property of their respective owners.

Other Directory Sites: SeekWonder | Directory Owners Forum

The following archive was created by hippie-mail 7.98617-22 on Sat Apr 10 1999 - 01:11:01