[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: NSA, ITAR, NCSA and plug-in hooks.
>Date: Tue, 21 Nov 1995 02:10:02 +0100
>From: Tatu Ylonen <[email protected]>
>To: [email protected]
>Cc: [email protected]
>Subject: Re: NSA, ITAR, NCSA and plug-in hooks.
>
>> PKZIP allows encryption (other's ?). How about a hook to that?
>
>PKZIP "encryption" is self-deception. A program for cracking it,
>PKCRACK, is widely available on the internet. See e.g.
>ftp.funet.fi:/pub/crypt/analysis.
>
>[For information about internationally available cryptographic
>software, see http://www.cs.hut.fi/crypto.]
>
> Tatu Ylonen <[email protected]>
PKCRACK uses a dictionary attack. Anyway, my point was that you could use
PKZIP's encryption as an excuse for passing a password.