Re: Lotus Notes Encryption Methods

David Miller (isdmill@gatekeeper.ddp.state.me.us)
Fri, 17 Mar 1995 08:22:21 -0500 (EST)

On Thu, 16 Mar 1995, Software Test Account wrote:

> On Tue, 14 Mar 1995, Dr. Frederick B. Cohen wrote:
> 
> > > In the tech notes that I have, it would seemt that RC2 uses a 128bit key and
> > > RC4 uses a 256bit key.
> > > 
> > > Both these keys seem rather small in comparison to something like PGP's
> > > 1028bit key.
> > 
> > 128bit key is about 40 digits - NSA approved - breakable by a PC
> > in a few hours.
> > FC
> > 
> You have actually done this with a PC?  With what kind of hw/sw???
> Seems other comments would suggest that this would be an unlikely occurence.
> Can you expand on your statement.

As has ben pointed out already, the bits of a pgp key refer to the length 
of a number which must be factored to recover the 128 bit IDEA session 
key.  Factoring a 128 bit number is not a difficult challenge on a PC.  
Trying all possible keys in a 128 bit key is not realistic on any type of 
computer today.

If you wish to pursue this further, could you please take it to private 
email or a more appropriate place (sci.cryptography, 
sci.cryptography.research, cypherpunks)?

Thanks:)


> 
> Erik
>      ____       _____    _______   __     Erik Lindquist  
>     / _  |     / ___/   / _____/  /  /    Systems Administrator 
>    / /_| |    / /__    / /       /  /     AECL Whiteshell Laboratories
>   /  __  |   / ___/   / /       /  /      VOICE: (204) 753-2311x3145  
>  / /   | |  / /____  / /_____  /  /_____  FAX:   (204) 753-2455 
> /_/    |_| /______/ /_______/ /________/  E-mail: lindquie@wu1.wl.aecl.ca 
> 
> 
> 

----------------------------------------------------------------------------
		It's *amazing* what one can accomplish when 
		    one doesn't know what one can't do!