>This even bites the best of us. Phil Zimmermann [...] PGP 1.0 had Phil's Bass-o-matic cipher, which he subsequently dropped. When I first saw that, I thought to myself, "snake oil," but not in those words. I'm glad that lesson got learned. >I, for one, will never use any crypto system for which the algorithm >hasn't been extensively published and scrutinized. I am in total agreement. Eric