On Thu, 16 Mar 1995, Software Test Account wrote: > On Tue, 14 Mar 1995, Dr. Frederick B. Cohen wrote: > > > > In the tech notes that I have, it would seemt that RC2 uses a 128bit key and > > > RC4 uses a 256bit key. > > > > > > Both these keys seem rather small in comparison to something like PGP's > > > 1028bit key. > > > > 128bit key is about 40 digits - NSA approved - breakable by a PC > > in a few hours. > > FC > > > You have actually done this with a PC? With what kind of hw/sw??? > Seems other comments would suggest that this would be an unlikely occurence. > Can you expand on your statement. As has ben pointed out already, the bits of a pgp key refer to the length of a number which must be factored to recover the 128 bit IDEA session key. Factoring a 128 bit number is not a difficult challenge on a PC. Trying all possible keys in a 128 bit key is not realistic on any type of computer today. If you wish to pursue this further, could you please take it to private email or a more appropriate place (sci.cryptography, sci.cryptography.research, cypherpunks)? Thanks:) > > Erik > ____ _____ _______ __ Erik Lindquist > / _ | / ___/ / _____/ / / Systems Administrator > / /_| | / /__ / / / / AECL Whiteshell Laboratories > / __ | / ___/ / / / / VOICE: (204) 753-2311x3145 > / / | | / /____ / /_____ / /_____ FAX: (204) 753-2455 > /_/ |_| /______/ /_______/ /________/ E-mail: lindquie@wu1.wl.aecl.ca > > > ---------------------------------------------------------------------------- It's *amazing* what one can accomplish when one doesn't know what one can't do!