home *** CD-ROM | disk | FTP | other *** search
- Xref: sparky comp.compression:4570 sci.crypt:6666
- Newsgroups: comp.compression,sci.crypt
- Path: sparky!uunet!zaphod.mps.ohio-state.edu!moe.ksu.ksu.edu!usenet-feed.cc.umr.edu!mcastle
- From: mcastle@cs.umr.edu (Michael R Castle)
- Subject: Re: ARJ "Security Envelopes" Broken
- References: <1993Jan9.065934.4930@leland.Stanford.EDU> <bontchev.726782688@fbihh>
- Date: Mon, 11 Jan 1993 23:27:31 GMT
- Nntp-Posting-Host: next9.cs.umr.edu
- Organization: University of Missouri - Rolla, Rolla, MO
- Sender: cnews@umr.edu (UMR Usenet News Post)
- Message-ID: <1993Jan11.232731.9624@umr.edu>
- Lines: 26
-
- In article <bontchev.726782688@fbihh> bontchev@fbihh.informatik.uni-hamburg.de writes:
- >
- >You had to ask me first - it would save you to duplicate the effort...
- >:-) They are -extremely- easy to forge, even easier than ZIP's... :-(
- >The encryption is also -extremely- weak, -MUCH- wheaker than the one
- >in PKZIP...
-
- When ARJ first came out, I sent mail to Rob mentioning the problems with
- exporting pkzip and advising that he may want to look into the legalities
- of his using encryption in exportable software. In his response, he
- indicated that he was just using simple xoring (which he expected to be
- easily broken). The _ONLY_ reason for encryption was to keep a casual
- user from accidently private data. Stopping crackers who are trying to
- break into archives was not the point behind adding encryption to arj.
-
- >
- >Regards,
- >Vesselin
-
- regards,
- mrc
- --
- Mike Castle .-=NEXUS=-. Life is like a clock: You can work constantly
- mcastle@cs.umr.edu and be right all the time, or not work at all
- S087891@UMRVMA.UMR.EDU and be right at least twice a day. -- mrc
- We are all of us living in the shadow of Manhattan. -- Watchmen
-