Gah. I should know better than to post before my sources give their official position. It will be a known plaintext attack. :-) I hope I'm not made regret jumping the gun again. Please DON'T bug RSA about this. Peter Trei ptrei@acm.org trei@process.com