/ Collection of Internet / Collection of Internet.iso / faq / comp / ripem / attacks

next >

MacOS 8.1

Win98

DOS

browse contents

view JSON data

view as text

+--------+-------------------------+-------------------------+--------+--------+
|00000000| 4e 65 77 73 67 72 6f 75 | 70 73 3a 20 61 6c 74 2e |Newsgrou|ps: alt.|
|00000010| 73 65 63 75 72 69 74 79 | 2e 72 69 70 65 6d 2c 73 |security|.ripem,s|
|00000020| 63 69 2e 63 72 79 70 74 | 2c 63 6f 6d 70 2e 73 65 |ci.crypt|,comp.se|
|00000030| 63 75 72 69 74 79 2e 6d | 69 73 63 2c 61 6c 74 2e |curity.m|isc,alt.|
|00000040| 73 65 63 75 72 69 74 79 | 2c 63 6f 6d 70 2e 6d 61 |security|,comp.ma|
|00000050| 69 6c 2e 6d 69 73 63 2c | 61 63 2e 63 2e 36 39 30 |il.misc,|ac.c.690|
|00000060| 2e 63 72 79 70 74 2c 61 | 6c 74 2e 61 6e 73 77 65 |.crypt,a|lt.answe|
|00000070| 72 73 2c 63 6f 6d 70 2e | 61 6e 73 77 65 72 73 2c |rs,comp.|answers,|
|00000080| 6e 65 77 73 2e 61 6e 73 | 77 65 72 73 0a 50 61 74 |news.ans|wers.Pat|
|00000090| 68 3a 20 62 6c 6f 6f 6d | 2d 62 65 61 63 6f 6e 2e |h: bloom|-beacon.|
|000000a0| 6d 69 74 2e 65 64 75 21 | 6e 69 63 2e 68 6f 6f 6b |mit.edu!|nic.hook|
|000000b0| 75 70 2e 6e 65 74 21 73 | 77 72 69 6e 64 65 21 63 |up.net!s|wrinde!c|
|000000c0| 73 2e 75 74 65 78 61 73 | 2e 65 64 75 21 6d 61 74 |s.utexas|.edu!mat|
|000000d0| 68 2e 6f 68 69 6f 2d 73 | 74 61 74 65 2e 65 64 75 |h.ohio-s|tate.edu|
|000000e0| 21 73 6f 6c 2e 63 74 72 | 2e 63 6f 6c 75 6d 62 69 |!sol.ctr|.columbi|
|000000f0| 61 2e 65 64 75 21 75 73 | 65 6e 65 74 2e 75 63 73 |a.edu!us|enet.ucs|
|00000100| 2e 69 6e 64 69 61 6e 61 | 2e 65 64 75 21 73 69 6c |.indiana|.edu!sil|
|00000110| 76 65 72 2e 75 63 73 2e | 69 6e 64 69 61 6e 61 2e |ver.ucs.|indiana.|
|00000120| 65 64 75 21 6d 76 61 6e | 68 65 79 6e 0a 46 72 6f |edu!mvan|heyn.Fro|
|00000130| 6d 3a 20 4d 61 72 63 20 | 56 61 6e 48 65 79 6e 69 |m: Marc |VanHeyni|
|00000140| 6e 67 65 6e 20 3c 6d 76 | 61 6e 68 65 79 6e 40 63 |ngen <mv|anheyn@c|
|00000150| 73 2e 69 6e 64 69 61 6e | 61 2e 65 64 75 3e 0a 53 |s.indian|a.edu>.S|
|00000160| 75 62 6a 65 63 74 3a 20 | 52 49 50 45 4d 20 46 72 |ubject: |RIPEM Fr|
|00000170| 65 71 75 65 6e 74 6c 79 | 20 4e 6f 74 65 64 20 56 |equently| Noted V|
|00000180| 75 6c 6e 65 72 61 62 69 | 6c 69 74 69 65 73 0a 43 |ulnerabi|lities.C|
|00000190| 6f 6e 74 65 6e 74 2d 54 | 79 70 65 3a 20 74 65 78 |ontent-T|ype: tex|
|000001a0| 74 2f 78 2d 75 73 65 6e | 65 74 2d 46 41 51 3b 20 |t/x-usen|et-FAQ; |
|000001b0| 76 65 72 73 69 6f 6e 3d | 31 2e 30 3b 20 74 69 74 |version=|1.0; tit|
|000001c0| 6c 65 3d 22 52 49 50 45 | 4d 20 41 74 74 61 63 6b |le="RIPE|M Attack|
|000001d0| 73 22 0a 4d 65 73 73 61 | 67 65 2d 49 44 3a 20 3c |s".Messa|ge-ID: <|
|000001e0| 43 4a 73 6e 73 43 2e 48 | 7a 75 40 75 73 65 6e 65 |CJsnsC.H|zu@usene|
|000001f0| 74 2e 75 63 73 2e 69 6e | 64 69 61 6e 61 2e 65 64 |t.ucs.in|diana.ed|
|00000200| 75 3e 0a 46 6f 6c 6c 6f | 77 75 70 2d 54 6f 3a 20 |u>.Follo|wup-To: |
|00000210| 61 6c 74 2e 73 65 63 75 | 72 69 74 79 2e 72 69 70 |alt.secu|rity.rip|
|00000220| 65 6d 0a 4f 72 69 67 69 | 6e 61 74 6f 72 3a 20 6d |em.Origi|nator: m|
|00000230| 76 61 6e 68 65 79 6e 40 | 73 69 6c 76 65 72 2e 75 |vanheyn@|silver.u|
|00000240| 63 73 2e 69 6e 64 69 61 | 6e 61 2e 65 64 75 0a 53 |cs.india|na.edu.S|
|00000250| 65 6e 64 65 72 3a 20 6e | 65 77 73 40 75 73 65 6e |ender: n|ews@usen|
|00000260| 65 74 2e 75 63 73 2e 69 | 6e 64 69 61 6e 61 2e 65 |et.ucs.i|ndiana.e|
|00000270| 64 75 20 28 55 53 45 4e | 45 54 20 4e 65 77 73 20 |du (USEN|ET News |
|00000280| 53 79 73 74 65 6d 29 0a | 4e 6e 74 70 2d 50 6f 73 |System).|Nntp-Pos|
|00000290| 74 69 6e 67 2d 48 6f 73 | 74 3a 20 73 69 6c 76 65 |ting-Hos|t: silve|
|000002a0| 72 2e 75 63 73 2e 69 6e | 64 69 61 6e 61 2e 65 64 |r.ucs.in|diana.ed|
|000002b0| 75 0a 4f 72 67 61 6e 69 | 7a 61 74 69 6f 6e 3a 20 |u.Organi|zation: |
|000002c0| 43 6f 6d 70 75 74 65 72 | 20 53 63 69 65 6e 63 65 |Computer| Science|
|000002d0| 2c 20 49 6e 64 69 61 6e | 61 20 55 6e 69 76 65 72 |, Indian|a Univer|
|000002e0| 73 69 74 79 0a 4d 69 6d | 65 2d 56 65 72 73 69 6f |sity.Mim|e-Versio|
|000002f0| 6e 3a 20 31 2e 30 0a 44 | 61 74 65 3a 20 4d 6f 6e |n: 1.0.D|ate: Mon|
|00000300| 2c 20 31 37 20 4a 61 6e | 20 31 39 39 34 20 32 32 |, 17 Jan| 1994 22|
|00000310| 3a 30 30 3a 31 31 20 47 | 4d 54 0a 41 70 70 72 6f |:00:11 G|MT.Appro|
|00000320| 76 65 64 3a 20 6e 65 77 | 73 2d 61 6e 73 77 65 72 |ved: new|s-answer|
|00000330| 73 2d 72 65 71 75 65 73 | 74 40 4d 49 54 2e 45 44 |s-reques|t@MIT.ED|
|00000340| 55 0a 45 78 70 69 72 65 | 73 3a 20 57 65 64 2c 20 |U.Expire|s: Wed, |
|00000350| 32 30 20 41 70 72 20 31 | 39 39 34 20 30 30 3a 30 |20 Apr 1|994 00:0|
|00000360| 30 3a 30 30 20 47 4d 54 | 0a 4c 69 6e 65 73 3a 20 |0:00 GMT|.Lines: |
|00000370| 31 39 34 0a 58 72 65 66 | 3a 20 62 6c 6f 6f 6d 2d |194.Xref|: bloom-|
|00000380| 62 65 61 63 6f 6e 2e 6d | 69 74 2e 65 64 75 20 61 |beacon.m|it.edu a|
|00000390| 6c 74 2e 73 65 63 75 72 | 69 74 79 2e 72 69 70 65 |lt.secur|ity.ripe|
|000003a0| 6d 3a 34 33 31 20 73 63 | 69 2e 63 72 79 70 74 3a |m:431 sc|i.crypt:|
|000003b0| 31 33 35 35 37 20 63 6f | 6d 70 2e 73 65 63 75 72 |13557 co|mp.secur|
|000003c0| 69 74 79 2e 6d 69 73 63 | 3a 36 31 33 31 20 61 6c |ity.misc|:6131 al|
|000003d0| 74 2e 73 65 63 75 72 69 | 74 79 3a 36 32 34 36 20 |t.securi|ty:6246 |
|000003e0| 63 6f 6d 70 2e 6d 61 69 | 6c 2e 6d 69 73 63 3a 35 |comp.mai|l.misc:5|
|000003f0| 39 32 32 20 61 6c 74 2e | 61 6e 73 77 65 72 73 3a |922 alt.|answers:|
|00000400| 31 36 35 35 20 63 6f 6d | 70 2e 61 6e 73 77 65 72 |1655 com|p.answer|
|00000410| 73 3a 33 34 36 31 20 6e | 65 77 73 2e 61 6e 73 77 |s:3461 n|ews.answ|
|00000420| 65 72 73 3a 31 34 32 32 | 38 0a 0a 41 72 63 68 69 |ers:1422|8..Archi|
|00000430| 76 65 2d 6e 61 6d 65 3a | 20 72 69 70 65 6d 2f 61 |ve-name:| ripem/a|
|00000440| 74 74 61 63 6b 73 0a 4c | 61 73 74 2d 75 70 64 61 |ttacks.L|ast-upda|
|00000450| 74 65 3a 20 31 30 20 4e | 6f 76 20 39 33 20 32 31 |te: 10 N|ov 93 21|
|00000460| 3a 30 30 3a 30 30 20 2d | 30 35 30 30 0a 0a 53 4f |:00:00 -|0500..SO|
|00000470| 4d 45 20 50 4f 53 53 49 | 42 4c 45 20 41 54 54 41 |ME POSSI|BLE ATTA|
|00000480| 43 4b 53 20 4f 4e 20 52 | 49 50 45 4d 0a 2d 2d 2d |CKS ON R|IPEM.---|
|00000490| 2d 2d 2d 2d 2d 2d 2d 2d | 2d 2d 2d 2d 2d 2d 2d 2d |--------|--------|
|000004a0| 2d 2d 2d 2d 2d 2d 2d 2d | 2d 2d 2d 0a 0a 54 68 69 |--------|---..Thi|
|000004b0| 73 20 69 73 20 61 20 6c | 69 76 69 6e 67 20 6c 69 |s is a l|iving li|
|000004c0| 73 74 20 6f 66 20 70 6f | 74 65 6e 74 69 61 6c 20 |st of po|tential |
|000004d0| 77 65 61 6b 6e 65 73 73 | 65 73 20 74 6f 20 6b 65 |weakness|es to ke|
|000004e0| 65 70 20 79 6f 75 72 20 | 65 79 65 73 20 6f 70 65 |ep your |eyes ope|
|000004f0| 6e 0a 66 6f 72 20 77 68 | 65 6e 20 75 73 69 6e 67 |n.for wh|en using|
|00000500| 20 52 49 50 45 4d 20 66 | 6f 72 20 73 65 63 75 72 | RIPEM f|or secur|
|00000510| 65 20 65 6c 65 63 74 72 | 6f 6e 69 63 20 6d 61 69 |e electr|onic mai|
|00000520| 6c 2e 20 20 49 74 20 64 | 6f 65 73 20 6e 6f 74 20 |l.  It d|oes not |
|00000530| 67 6f 20 69 6e 74 6f 0a | 67 72 65 61 74 20 64 65 |go into.|great de|
|00000540| 74 61 69 6c 2c 20 61 6e | 64 20 69 73 20 61 6c 6d |tail, an|d is alm|
|00000550| 6f 73 74 20 63 65 72 74 | 61 69 6e 6c 79 20 6e 6f |ost cert|ainly no|
|00000560| 74 20 65 78 68 61 75 73 | 74 69 76 65 2e 20 20 4f |t exhaus|tive.  O|
|00000570| 62 76 69 6f 75 73 6c 79 | 2c 20 6d 61 6e 79 0a 6f |bviously|, many.o|
|00000580| 66 20 74 68 65 20 77 65 | 61 6b 6e 65 73 73 65 73 |f the we|aknesses|
|00000590| 20 61 72 65 20 77 65 61 | 6b 6e 65 73 73 65 73 20 | are wea|knesses |
|000005a0| 6f 66 20 63 72 79 70 74 | 6f 67 72 61 70 68 69 63 |of crypt|ographic|
|000005b0| 61 6c 6c 79 20 73 65 63 | 75 72 65 64 20 6d 61 69 |ally sec|ured mai|
|000005c0| 6c 20 69 6e 0a 67 65 6e | 65 72 61 6c 2c 20 61 6e |l in.gen|eral, an|
|000005d0| 64 20 77 69 6c 6c 20 70 | 65 72 74 61 69 6e 20 74 |d will p|ertain t|
|000005e0| 6f 20 73 65 63 75 72 65 | 20 6d 61 69 6c 20 70 72 |o secure| mail pr|
|000005f0| 6f 67 72 61 6d 73 20 6f | 74 68 65 72 20 74 68 61 |ograms o|ther tha|
|00000600| 6e 20 52 49 50 45 4d 2e | 0a 49 74 20 69 73 20 6d |n RIPEM.|.It is m|
|00000610| 61 69 6e 74 61 69 6e 65 | 64 20 62 79 20 4d 61 72 |aintaine|d by Mar|
|00000620| 63 20 56 61 6e 48 65 79 | 6e 69 6e 67 65 6e 20 3c |c VanHey|ningen <|
|00000630| 6d 76 61 6e 68 65 79 6e | 40 63 73 2e 69 6e 64 69 |mvanheyn|@cs.indi|
|00000640| 61 6e 61 2e 65 64 75 3e | 2e 20 20 49 74 0a 69 73 |ana.edu>|.  It.is|
|00000650| 20 70 6f 73 74 65 64 20 | 6d 6f 6e 74 68 6c 79 20 | posted |monthly |
|00000660| 74 6f 20 61 20 76 61 72 | 69 65 74 79 20 6f 66 20 |to a var|iety of |
|00000670| 6e 65 77 73 20 67 72 6f | 75 70 73 3b 20 66 6f 6c |news gro|ups; fol|
|00000680| 6c 6f 77 75 70 73 20 70 | 65 72 74 61 69 6e 69 6e |lowups p|ertainin|
|00000690| 67 0a 73 70 65 63 69 66 | 69 63 61 6c 6c 79 20 74 |g.specif|ically t|
|000006a0| 6f 20 52 49 50 45 4d 20 | 73 68 6f 75 6c 64 20 67 |o RIPEM |should g|
|000006b0| 6f 20 74 6f 20 61 6c 74 | 2e 73 65 63 75 72 69 74 |o to alt|.securit|
|000006c0| 79 2e 72 69 70 65 6d 2e | 0a 0a 43 52 59 50 54 41 |y.ripem.|..CRYPTA|
|000006d0| 4e 41 4c 59 53 49 53 20 | 41 54 54 41 43 4b 53 0a |NALYSIS |ATTACKS.|
|000006e0| 2d 2d 2d 2d 2d 2d 2d 2d | 2d 2d 2d 2d 2d 2d 2d 2d |--------|--------|
|000006f0| 2d 2d 2d 2d 2d 0a 0a 2d | 20 42 72 65 61 6b 69 6e |-----..-| Breakin|
|00000700| 67 20 52 53 41 20 77 6f | 75 6c 64 20 61 6c 6c 6f |g RSA wo|uld allo|
|00000710| 77 20 61 6e 20 61 74 74 | 61 63 6b 65 72 20 74 6f |w an att|acker to|
|00000720| 20 66 69 6e 64 20 6f 75 | 74 20 79 6f 75 72 20 70 | find ou|t your p|
|00000730| 72 69 76 61 74 65 20 6b | 65 79 2c 0a 20 20 69 6e |rivate k|ey,.  in|
|00000740| 20 77 68 69 63 68 20 63 | 61 73 65 20 68 65 20 63 | which c|ase he c|
|00000750| 6f 75 6c 64 20 72 65 61 | 64 20 61 6e 79 20 6d 61 |ould rea|d any ma|
|00000760| 69 6c 20 65 6e 63 72 79 | 70 74 65 64 20 74 6f 20 |il encry|pted to |
|00000770| 79 6f 75 20 61 6e 64 20 | 73 69 67 6e 0a 20 20 6d |you and |sign.  m|
|00000780| 65 73 73 61 67 65 73 20 | 77 69 74 68 20 79 6f 75 |essages |with you|
|00000790| 72 20 70 72 69 76 61 74 | 65 20 6b 65 79 2e 0a 0a |r privat|e key...|
|000007a0| 20 20 52 53 41 20 69 73 | 20 67 65 6e 65 72 61 6c |  RSA is| general|
|000007b0| 6c 79 20 62 65 6c 69 65 | 76 65 64 20 74 6f 20 62 |ly belie|ved to b|
|000007c0| 65 20 72 65 73 69 73 74 | 61 6e 74 20 74 6f 20 61 |e resist|ant to a|
|000007d0| 6c 6c 20 73 74 61 6e 64 | 61 72 64 0a 20 20 63 72 |ll stand|ard.  cr|
|000007e0| 79 70 74 61 6e 61 6c 79 | 74 69 63 20 74 65 63 68 |yptanaly|tic tech|
|000007f0| 6e 69 71 75 65 73 2e 20 | 20 45 76 65 6e 20 61 20 |niques. | Even a |
|00000800| 73 74 61 6e 64 61 72 64 | 20 6b 65 79 20 28 61 62 |standard| key (ab|
|00000810| 6f 75 74 20 35 31 36 20 | 62 69 74 73 20 77 69 74 |out 516 |bits wit|
|00000820| 68 0a 20 20 52 49 50 45 | 4d 29 20 69 73 20 6c 6f |h.  RIPE|M) is lo|
|00000830| 6e 67 20 65 6e 6f 75 67 | 68 20 74 6f 20 72 65 6e |ng enoug|h to ren|
|00000840| 64 65 72 20 74 68 69 73 | 20 69 6d 70 72 61 63 74 |der this| impract|
|00000850| 69 63 61 6c 2c 20 62 61 | 72 72 69 6e 67 20 61 0a |ical, ba|rring a.|
|00000860| 20 20 68 75 67 65 20 69 | 6e 76 65 73 74 6d 65 6e |  huge i|nvestmen|
|00000870| 74 20 69 6e 20 68 61 72 | 64 77 61 72 65 20 6f 72 |t in har|dware or|
|00000880| 20 61 20 62 72 65 61 6b | 74 68 72 6f 75 67 68 20 | a break|through |
|00000890| 69 6e 20 66 61 63 74 6f | 72 69 6e 67 2e 0a 0a 2d |in facto|ring...-|
|000008a0| 20 42 72 65 61 6b 69 6e | 67 20 44 45 53 20 77 6f | Breakin|g DES wo|
|000008b0| 75 6c 64 20 61 6c 6c 6f | 77 20 61 6e 20 61 74 74 |uld allo|w an att|
|000008c0| 61 63 6b 65 72 20 74 6f | 20 72 65 61 64 20 61 6e |acker to| read an|
|000008d0| 79 20 67 69 76 65 6e 20 | 6d 65 73 73 61 67 65 2c |y given |message,|
|000008e0| 0a 20 20 73 69 6e 63 65 | 20 74 68 65 20 6d 65 73 |.  since| the mes|
|000008f0| 73 61 67 65 20 69 74 73 | 65 6c 66 20 69 73 20 65 |sage its|elf is e|
|00000900| 6e 63 72 79 70 74 65 64 | 20 77 69 74 68 20 44 45 |ncrypted| with DE|
|00000910| 53 2e 20 20 49 74 20 77 | 6f 75 6c 64 20 6e 6f 74 |S.  It w|ould not|
|00000920| 20 61 6c 6c 6f 77 0a 20 | 20 61 6e 20 61 74 74 61 | allow. | an atta|
|00000930| 63 6b 65 72 20 74 6f 20 | 63 6c 61 69 6d 20 74 6f |cker to |claim to|
|00000940| 20 62 65 20 79 6f 75 2e | 0a 0a 20 20 44 45 53 20 | be you.|..  DES |
|00000950| 68 61 73 20 6f 6e 6c 79 | 20 35 36 20 62 69 74 73 |has only| 56 bits|
|00000960| 20 69 6e 20 69 74 73 20 | 6b 65 79 2c 20 61 6e 64 | in its |key, and|
|00000970| 20 74 68 75 73 20 63 6f | 75 6c 64 20 63 6f 6e 63 | thus co|uld conc|
|00000980| 65 69 76 61 62 6c 79 20 | 62 65 0a 20 20 63 6f 6d |eivably |be.  com|
|00000990| 70 72 6f 6d 69 73 65 64 | 20 62 79 20 62 72 75 74 |promised| by brut|
|000009a0| 65 20 66 6f 72 63 65 20 | 77 69 74 68 20 73 75 66 |e force |with suf|
|000009b0| 66 69 63 69 65 6e 74 20 | 68 61 72 64 77 61 72 65 |ficient |hardware|
|000009c0| 2c 20 62 75 74 20 66 65 | 77 20 61 67 65 6e 63 69 |, but fe|w agenci|
|000009d0| 65 73 0a 20 20 68 61 76 | 65 20 73 75 63 68 20 6d |es.  hav|e such m|
|000009e0| 6f 6e 65 79 20 74 6f 20 | 64 65 76 6f 74 65 20 74 |oney to |devote t|
|000009f0| 6f 20 73 69 6d 70 6c 79 | 20 72 65 61 64 20 61 20 |o simply| read a |
|00000a00| 6d 65 73 73 61 67 65 2e | 20 20 53 69 6e 63 65 20 |message.|  Since |
|00000a10| 65 61 63 68 0a 20 20 6d | 65 73 73 61 67 65 20 68 |each.  m|essage h|
|00000a20| 61 73 20 61 20 64 69 66 | 66 65 72 65 6e 74 20 44 |as a dif|ferent D|
|00000a30| 45 53 20 6b 65 79 2c 20 | 74 68 65 20 77 6f 72 6b |ES key, |the work|
|00000a40| 20 66 6f 72 20 65 61 63 | 68 20 6d 65 73 73 61 67 | for eac|h messag|
|00000a50| 65 20 77 6f 75 6c 64 0a | 20 20 72 65 6d 61 69 6e |e would.|  remain|
|00000a60| 20 73 69 67 6e 69 66 69 | 63 61 6e 74 2e 20 20 52 | signifi|cant.  R|
|00000a70| 49 50 45 4d 20 31 2e 31 | 20 61 6c 6c 6f 77 73 20 |IPEM 1.1| allows |
|00000a80| 74 72 69 70 6c 65 2d 44 | 45 53 20 74 6f 20 62 65 |triple-D|ES to be|
|00000a90| 20 75 73 65 64 20 61 73 | 20 61 6e 0a 20 20 6f 70 | used as| an.  op|
|00000aa0| 74 69 6f 6e 3b 20 69 74 | 20 69 73 20 62 65 6c 69 |tion; it| is beli|
|00000ab0| 65 76 65 64 20 73 74 72 | 6f 6e 67 65 72 20 74 68 |eved str|onger th|
|00000ac0| 61 6e 20 73 69 6e 67 6c | 65 2d 44 45 53 20 61 6e |an singl|e-DES an|
|00000ad0| 64 20 73 68 6f 75 6c 64 | 20 72 65 73 69 73 74 0a |d should| resist.|
|00000ae0| 20 20 62 72 75 74 65 20 | 66 6f 72 63 65 20 61 74 |  brute |force at|
|00000af0| 74 61 63 6b 73 2e 0a 0a | 4b 45 59 20 4d 41 4e 41 |tacks...|KEY MANA|
|00000b00| 47 45 4d 45 4e 54 20 41 | 54 54 41 43 4b 53 0a 2d |GEMENT A|TTACKS.-|
|00000b10| 2d 2d 2d 2d 2d 2d 2d 2d | 2d 2d 2d 2d 2d 2d 2d 2d |--------|--------|
|00000b20| 2d 2d 2d 2d 2d 0a 0a 2d | 20 53 74 65 61 6c 69 6e |-----..-| Stealin|
|00000b30| 67 20 79 6f 75 72 20 70 | 72 69 76 61 74 65 20 6b |g your p|rivate k|
|00000b40| 65 79 20 77 6f 75 6c 64 | 20 61 6c 6c 6f 77 20 74 |ey would| allow t|
|00000b50| 68 65 20 73 61 6d 65 20 | 62 65 6e 65 66 69 74 73 |he same |benefits|
|00000b60| 20 61 73 20 62 72 65 61 | 6b 69 6e 67 0a 20 20 52 | as brea|king.  R|
|00000b70| 53 41 2e 20 20 54 6f 20 | 73 61 66 65 67 75 61 72 |SA.  To |safeguar|
|00000b80| 64 20 69 74 2c 20 69 74 | 20 69 73 20 65 6e 63 72 |d it, it| is encr|
|00000b90| 79 70 74 65 64 20 77 69 | 74 68 20 61 20 44 45 53 |ypted wi|th a DES|
|00000ba0| 20 6b 65 79 20 77 68 69 | 63 68 20 69 73 20 64 65 | key whi|ch is de|
|00000bb0| 72 69 76 65 64 0a 20 20 | 66 72 6f 6d 20 61 20 70 |rived.  |from a p|
|00000bc0| 61 73 73 70 68 72 61 73 | 65 20 79 6f 75 20 74 79 |assphras|e you ty|
|00000bd0| 70 65 20 69 6e 2e 20 20 | 48 6f 77 65 76 65 72 2c |pe in.  |However,|
|00000be0| 20 69 66 20 61 6e 20 61 | 74 74 61 63 6b 65 72 20 | if an a|ttacker |
|00000bf0| 63 61 6e 20 67 65 74 20 | 61 20 63 6f 70 79 0a 20 |can get |a copy. |
|00000c00| 20 6f 66 20 79 6f 75 72 | 20 70 72 69 76 61 74 65 | of your| private|
|00000c10| 20 6b 65 79 66 69 6c 65 | 20 61 6e 64 20 79 6f 75 | keyfile| and you|
|00000c20| 72 20 70 61 73 73 70 68 | 72 61 73 65 20 28 62 79 |r passph|rase (by|
|00000c30| 20 73 6e 6f 6f 70 69 6e | 67 20 6e 65 74 77 6f 72 | snoopin|g networ|
|00000c40| 6b 0a 20 20 70 61 63 6b | 65 74 73 2c 20 74 61 70 |k.  pack|ets, tap|
|00000c50| 70 69 6e 67 20 6c 69 6e | 65 73 2c 20 6f 72 20 77 |ping lin|es, or w|
|00000c60| 68 61 74 65 76 65 72 29 | 20 68 65 20 63 6f 75 6c |hatever)| he coul|
|00000c70| 64 20 62 72 65 61 6b 20 | 74 68 65 20 77 68 6f 6c |d break |the whol|
|00000c80| 65 20 73 63 68 65 6d 65 | 2e 0a 0a 20 20 54 68 65 |e scheme|...  The|
|00000c90| 20 6d 61 69 6e 20 72 69 | 73 6b 20 69 73 20 74 68 | main ri|sk is th|
|00000ca0| 61 74 20 6f 66 20 74 72 | 61 6e 73 66 65 72 72 69 |at of tr|ansferri|
|00000cb0| 6e 67 20 65 69 74 68 65 | 72 20 74 68 65 20 70 61 |ng eithe|r the pa|
|00000cc0| 73 73 70 68 72 61 73 65 | 20 6f 72 20 74 68 65 0a |ssphrase| or the.|
|00000cd0| 20 20 70 72 69 76 61 74 | 65 20 6b 65 79 20 66 69 |  privat|e key fi|
|00000ce0| 6c 65 20 61 63 72 6f 73 | 73 20 61 6e 20 75 6e 74 |le acros|s an unt|
|00000cf0| 72 75 73 74 65 64 20 6c | 69 6e 6b 2e 20 20 53 6f |rusted l|ink.  So|
|00000d00| 20 64 6f 6e 27 74 20 64 | 6f 20 74 68 61 74 2e 20 | don't d|o that. |
|00000d10| 20 52 75 6e 20 0a 20 20 | 52 49 50 45 4d 20 6f 6e | Run .  |RIPEM on|
|00000d20| 20 61 20 74 72 75 73 74 | 65 64 20 6d 61 63 68 69 | a trust|ed machi|
|00000d30| 6e 65 2c 20 70 72 65 66 | 65 72 61 62 6c 79 20 6f |ne, pref|erably o|
|00000d40| 6e 65 20 73 69 74 74 69 | 6e 67 20 72 69 67 68 74 |ne sitti|ng right|
|00000d50| 20 69 6e 20 66 72 6f 6e | 74 20 6f 66 0a 20 20 79 | in fron|t of.  y|
|00000d60| 6f 75 2e 20 20 49 64 65 | 61 6c 6c 79 2c 20 79 6f |ou.  Ide|ally, yo|
|00000d70| 75 72 20 6f 77 6e 20 6d | 61 63 68 69 6e 65 20 69 |ur own m|achine i|
|00000d80| 6e 20 79 6f 75 72 20 6f | 77 6e 20 68 6f 6d 65 20 |n your o|wn home |
|00000d90| 28 6f 72 20 6d 61 79 62 | 65 20 6f 66 66 69 63 65 |(or mayb|e office|
|00000da0| 29 0a 20 20 77 68 69 63 | 68 20 6e 6f 62 6f 64 79 |).  whic|h nobody|
|00000db0| 20 65 6c 73 65 20 68 61 | 73 20 70 68 79 73 69 63 | else ha|s physic|
|00000dc0| 61 6c 20 61 63 63 65 73 | 73 20 74 6f 2e 0a 0a 2d |al acces|s to...-|
|00000dd0| 20 46 6f 6f 6c 69 6e 67 | 20 79 6f 75 20 69 6e 74 | Fooling| you int|
|00000de0| 6f 20 61 63 63 65 70 74 | 69 6e 67 20 61 20 62 6f |o accept|ing a bo|
|00000df0| 67 75 73 20 70 75 62 6c | 69 63 20 6b 65 79 20 66 |gus publ|ic key f|
|00000e00| 6f 72 20 73 6f 6d 65 6f | 6e 65 20 65 6c 73 65 20 |or someo|ne else |
|00000e10| 63 6f 75 6c 64 20 0a 20 | 20 61 6c 6c 6f 77 20 61 |could . | allow a|
|00000e20| 6e 20 6f 70 70 6f 6e 65 | 6e 74 20 74 6f 20 64 65 |n oppone|nt to de|
|00000e30| 63 65 69 76 65 20 79 6f | 75 20 69 6e 74 6f 20 73 |ceive yo|u into s|
|00000e40| 65 6e 64 69 6e 67 20 73 | 65 63 72 65 74 20 6d 65 |ending s|ecret me|
|00000e50| 73 73 61 67 65 73 20 74 | 6f 20 68 69 6d 0a 20 20 |ssages t|o him.  |
|00000e60| 72 61 74 68 65 72 20 74 | 68 61 6e 20 74 6f 20 74 |rather t|han to t|
|00000e70| 68 65 20 72 65 61 6c 20 | 72 65 63 69 70 69 65 6e |he real |recipien|
|00000e80| 74 2e 20 20 49 66 20 74 | 68 65 20 65 6e 65 6d 79 |t.  If t|he enemy|
|00000e90| 20 63 61 6e 20 66 6f 6f | 6c 20 79 6f 75 72 0a 20 | can foo|l your. |
|00000ea0| 20 69 6e 74 65 6e 64 65 | 64 20 72 65 63 69 70 69 | intende|d recipi|
|00000eb0| 65 6e 74 20 61 73 20 77 | 65 6c 6c 2c 20 68 65 20 |ent as w|ell, he |
|00000ec0| 63 6f 75 6c 64 20 72 65 | 2d 65 6e 63 72 79 70 74 |could re|-encrypt|
|00000ed0| 20 74 68 65 20 6d 65 73 | 73 61 67 65 73 20 77 69 | the mes|sages wi|
|00000ee0| 74 68 0a 20 20 74 68 65 | 20 6f 74 68 65 72 20 62 |th.  the| other b|
|00000ef0| 6f 67 75 73 20 70 75 62 | 6c 69 63 20 6b 65 79 20 |ogus pub|lic key |
|00000f00| 61 6e 64 20 70 61 73 73 | 20 74 68 65 6d 20 61 6c |and pass| them al|
|00000f10| 6f 6e 67 2e 0a 0a 20 20 | 49 74 20 69 73 20 69 6d |ong...  |It is im|
|00000f20| 70 6f 72 74 61 6e 74 20 | 74 6f 20 67 65 74 20 74 |portant |to get t|
|00000f30| 68 65 20 70 72 6f 70 65 | 72 20 70 75 62 6c 69 63 |he prope|r public|
|00000f40| 20 6b 65 79 73 20 6f 66 | 20 6f 74 68 65 72 20 70 | keys of| other p|
|00000f50| 65 6f 70 6c 65 2e 0a 20 | 20 54 68 65 20 6d 6f 73 |eople.. | The mos|
|00000f60| 74 20 63 6f 6d 6d 6f 6e | 20 6d 65 63 68 61 6e 69 |t common| mechani|
|00000f70| 73 6d 20 66 6f 72 20 74 | 68 69 73 20 69 73 20 66 |sm for t|his is f|
|00000f80| 69 6e 67 65 72 3b 20 61 | 73 73 75 6d 69 6e 67 20 |inger; a|ssuming |
|00000f90| 74 68 65 20 6f 70 70 6f | 6e 65 6e 74 0a 20 20 68 |the oppo|nent.  h|
|00000fa0| 61 73 20 6e 6f 74 20 63 | 6f 6d 70 72 6f 6d 69 73 |as not c|ompromis|
|00000fb0| 65 64 20 72 6f 75 74 65 | 72 73 20 6f 72 20 64 61 |ed route|rs or da|
|00000fc0| 65 6d 6f 6e 73 20 6f 72 | 20 73 75 63 68 2c 20 66 |emons or| such, f|
|00000fd0| 69 6e 67 65 72 20 63 61 | 6e 20 62 65 20 0a 20 20 |inger ca|n be .  |
|00000fe0| 67 69 76 65 6e 20 61 20 | 66 61 69 72 20 61 6d 6f |given a |fair amo|
|00000ff0| 75 6e 74 20 6f 66 20 74 | 72 75 73 74 2e 20 20 54 |unt of t|rust.  T|
|00001000| 68 65 20 73 74 72 6f 6e | 67 65 73 74 20 6d 65 74 |he stron|gest met|
|00001010| 68 6f 64 20 6f 66 20 6b | 65 79 0a 20 20 61 75 74 |hod of k|ey.  aut|
|00001020| 68 65 6e 74 69 63 61 74 | 69 6f 6e 20 69 73 20 74 |henticat|ion is t|
|00001030| 6f 20 65 78 63 68 61 6e | 67 65 20 6b 65 79 73 20 |o exchan|ge keys |
|00001040| 69 6e 20 70 65 72 73 6f | 6e 3b 20 68 6f 77 65 76 |in perso|n; howev|
|00001050| 65 72 2c 20 74 68 69 73 | 20 69 73 0a 20 20 6e 6f |er, this| is.  no|
|00001060| 74 20 61 6c 77 61 79 73 | 20 70 72 61 63 74 69 63 |t always| practic|
|00001070| 61 6c 2e 20 20 48 61 76 | 69 6e 67 20 6f 74 68 65 |al.  Hav|ing othe|
|00001080| 72 20 70 65 6f 70 6c 65 | 20 22 76 6f 75 63 68 20 |r people| "vouch |
|00001090| 66 6f 72 20 79 6f 75 22 | 20 62 79 0a 20 20 73 69 |for you"| by.  si|
|000010a0| 67 6e 69 6e 67 20 61 20 | 73 74 61 74 65 6d 65 6e |gning a |statemen|
|000010b0| 74 20 63 6f 6e 74 61 69 | 6e 69 6e 67 20 79 6f 75 |t contai|ning you|
|000010c0| 72 20 6b 65 79 20 69 73 | 20 70 6f 73 73 69 62 6c |r key is| possibl|
|000010d0| 65 2c 20 61 6c 74 68 6f | 75 67 68 20 0a 20 20 52 |e, altho|ugh .  R|
|000010e0| 49 50 45 4d 20 64 6f 65 | 73 6e 27 74 20 68 61 76 |IPEM doe|sn't hav|
|000010f0| 65 20 66 65 61 74 75 72 | 65 73 20 66 6f 72 20 64 |e featur|es for d|
|00001100| 6f 69 6e 67 20 74 68 69 | 73 20 61 73 20 61 75 74 |oing thi|s as aut|
|00001110| 6f 6d 61 74 69 63 61 6c | 6c 79 20 61 73 0a 20 20 |omatical|ly as.  |
|00001120| 50 47 50 2e 20 20 52 49 | 50 45 4d 20 64 6f 65 73 |PGP.  RI|PEM does|
|00001130| 20 67 65 6e 65 72 61 74 | 65 20 61 6e 64 20 63 68 | generat|e and ch|
|00001140| 65 63 6b 20 4d 44 35 20 | 66 69 6e 67 65 72 70 72 |eck MD5 |fingerpr|
|00001150| 69 6e 74 73 20 6f 66 20 | 70 75 62 6c 69 63 20 6b |ints of |public k|
|00001160| 65 79 73 0a 20 20 69 6e | 20 74 68 65 20 6b 65 79 |eys.  in| the key|
|00001170| 20 66 69 6c 65 73 3b 20 | 74 68 65 79 20 6d 61 79 | files; |they may|
|00001180| 20 62 65 20 65 78 63 68 | 61 6e 67 65 64 20 76 69 | be exch|anged vi|
|00001190| 61 20 61 20 73 65 70 61 | 72 61 74 65 20 63 68 61 |a a sepa|rate cha|
|000011a0| 6e 6e 65 6c 20 66 6f 72 | 0a 20 20 61 75 74 68 65 |nnel for|.  authe|
|000011b0| 6e 74 69 63 61 74 69 6f | 6e 2e 0a 0a 50 4c 41 59 |nticatio|n...PLAY|
|000011c0| 42 41 43 4b 20 41 54 54 | 41 43 4b 53 0a 2d 2d 2d |BACK ATT|ACKS.---|
|000011d0| 2d 2d 2d 2d 2d 2d 2d 2d | 2d 2d 2d 2d 2d 0a 0a 2d |--------|-----..-|
|000011e0| 20 45 76 65 6e 20 69 66 | 20 61 6e 20 6f 70 70 6f | Even if| an oppo|
|000011f0| 6e 65 6e 74 20 63 61 6e | 6e 6f 74 20 62 72 65 61 |nent can|not brea|
|00001200| 6b 20 74 68 65 20 63 72 | 79 70 74 6f 67 72 61 70 |k the cr|yptograp|
|00001210| 68 79 2c 20 61 6e 20 6f | 70 70 6f 6e 65 6e 74 20 |hy, an o|pponent |
|00001220| 63 6f 75 6c 64 0a 20 20 | 73 74 69 6c 6c 20 63 61 |could.  |still ca|
|00001230| 75 73 65 20 64 69 66 66 | 69 63 75 6c 74 69 65 73 |use diff|iculties|
|00001240| 2e 20 20 46 6f 72 20 65 | 78 61 6d 70 6c 65 2c 20 |.  For e|xample, |
|00001250| 73 75 70 70 6f 73 65 20 | 79 6f 75 20 73 65 6e 64 |suppose |you send|
|00001260| 20 61 20 6d 65 73 73 61 | 67 65 0a 20 20 77 69 74 | a messa|ge.  wit|
|00001270| 68 20 4d 49 43 2d 4f 4e | 4c 59 20 28 61 20 50 45 |h MIC-ON|LY (a PE|
|00001280| 4d 20 6d 6f 64 65 20 77 | 68 69 63 68 20 64 6f 65 |M mode w|hich doe|
|00001290| 73 20 6e 6f 74 20 70 72 | 6f 76 69 64 65 20 64 69 |s not pr|ovide di|
|000012a0| 73 63 6c 6f 73 75 72 65 | 20 70 72 6f 74 65 63 74 |sclosure| protect|
|000012b0| 69 6f 6e 29 0a 20 20 74 | 6f 20 41 6c 69 63 65 20 |ion).  t|o Alice |
|000012c0| 77 68 69 63 68 20 73 61 | 79 73 20 22 4f 4b 2c 20 |which sa|ys "OK, |
|000012d0| 6c 65 74 27 73 20 64 6f | 20 74 68 61 74 2e 22 20 |let's do| that." |
|000012e0| 59 6f 75 72 20 6f 70 70 | 6f 6e 65 6e 74 20 69 6e |Your opp|onent in|
|000012f0| 74 65 72 63 65 70 74 73 | 0a 20 20 69 74 2c 20 61 |tercepts|.  it, a|
|00001300| 6e 64 20 6e 6f 77 20 72 | 65 73 65 6e 64 73 20 69 |nd now r|esends i|
|00001310| 74 20 74 6f 20 42 6f 62 | 2c 20 77 68 6f 20 6e 6f |t to Bob|, who no|
|00001320| 77 20 68 61 73 20 61 20 | 6d 65 73 73 61 67 65 20 |w has a |message |
|00001330| 77 68 69 63 68 20 69 73 | 0a 20 20 61 75 74 68 65 |which is|.  authe|
|00001340| 6e 74 69 63 61 74 65 64 | 20 61 73 20 66 72 6f 6d |nticated| as from|
|00001350| 20 79 6f 75 20 74 65 6c | 6c 69 6e 67 20 68 69 6d | you tel|ling him|
|00001360| 20 74 6f 20 64 6f 20 74 | 68 61 74 2e 20 20 4f 66 | to do t|hat.  Of|
|00001370| 20 63 6f 75 72 73 65 2c | 20 68 65 20 6d 61 79 0a | course,| he may.|
|00001380| 20 20 69 6e 74 65 72 70 | 72 65 74 20 69 74 20 69 |  interp|ret it i|
|00001390| 6e 20 61 6e 20 65 6e 74 | 69 72 65 6c 79 20 64 69 |n an ent|irely di|
|000013a0| 66 66 65 72 65 6e 74 20 | 63 6f 6e 74 65 78 74 2e |fferent |context.|
|000013b0| 20 20 4f 72 20 79 6f 75 | 72 20 6f 70 70 6f 6e 65 |  Or you|r oppone|
|000013c0| 6e 74 0a 20 20 63 6f 75 | 6c 64 20 74 72 61 6e 73 |nt.  cou|ld trans|
|000013d0| 6d 69 74 20 74 68 65 20 | 73 61 6d 65 20 6d 65 73 |mit the |same mes|
|000013e0| 73 61 67 65 20 74 6f 20 | 74 68 65 20 73 61 6d 65 |sage to |the same|
|000013f0| 20 72 65 63 69 70 69 65 | 6e 74 20 6d 75 63 68 20 | recipie|nt much |
|00001400| 6c 61 74 65 72 2c 0a 20 | 20 66 69 67 75 72 69 6e |later,. | figurin|
|00001410| 67 20 69 74 20 77 6f 75 | 6c 64 20 62 65 20 73 65 |g it wou|ld be se|
|00001420| 65 6e 20 64 69 66 66 65 | 72 65 6e 74 6c 79 20 61 |en diffe|rently a|
|00001430| 74 20 61 20 6c 61 74 65 | 72 20 74 69 6d 65 2e 20 |t a late|r time. |
|00001440| 20 4f 72 20 74 68 65 0a | 20 20 6f 70 70 6f 6e 65 | Or the.|  oppone|
|00001450| 6e 74 20 63 6f 75 6c 64 | 20 63 68 61 6e 67 65 20 |nt could| change |
|00001460| 74 68 65 20 4f 72 69 67 | 69 6e 61 74 6f 72 2d 4e |the Orig|inator-N|
|00001470| 61 6d 65 3a 20 74 6f 20 | 68 69 6d 73 65 6c 66 2c |ame: to |himself,|
|00001480| 20 72 65 67 69 73 74 65 | 72 20 0a 20 20 79 6f 75 | registe|r .  you|
|00001490| 72 20 70 75 62 6c 69 63 | 20 6b 65 79 20 61 73 20 |r public| key as |
|000014a0| 68 69 73 2c 20 61 6e 64 | 20 73 65 6e 64 20 61 20 |his, and| send a |
|000014b0| 6d 65 73 73 61 67 65 20 | 68 6f 70 69 6e 67 20 74 |message |hoping t|
|000014c0| 68 65 20 72 65 63 69 70 | 69 65 6e 74 0a 20 20 77 |he recip|ient.  w|
|000014d0| 69 6c 6c 20 73 65 6e 64 | 20 68 69 6d 20 72 65 74 |ill send| him ret|
|000014e0| 75 72 6e 20 6d 61 69 6c | 20 69 6e 64 69 63 61 74 |urn mail| indicat|
|000014f0| 69 6e 67 20 28 70 65 72 | 68 61 70 73 20 65 76 65 |ing (per|haps eve|
|00001500| 6e 20 71 75 6f 74 69 6e | 67 21 29 20 74 68 65 0a |n quotin|g!) the.|
|00001510| 20 20 75 6e 6b 6e 6f 77 | 6e 20 6d 65 73 73 61 67 |  unknow|n messag|
|00001520| 65 2e 0a 0a 20 20 54 6f | 20 64 65 66 65 61 74 20 |e...  To| defeat |
|00001530| 70 6c 61 79 62 61 63 6b | 20 61 74 74 61 63 6b 73 |playback| attacks|
|00001540| 2c 20 74 68 65 20 70 6c | 61 69 6e 74 65 78 74 20 |, the pl|aintext |
|00001550| 6f 66 20 65 61 63 68 20 | 6d 65 73 73 61 67 65 20 |of each |message |
|00001560| 73 68 6f 75 6c 64 20 0a | 20 20 69 6e 63 6c 75 64 |should .|  includ|
|00001570| 65 20 73 6f 6d 65 20 69 | 6e 64 69 63 61 74 69 6f |e some i|ndicatio|
|00001580| 6e 20 6f 66 20 74 68 65 | 20 73 65 6e 64 65 72 20 |n of the| sender |
|00001590| 61 6e 64 20 72 65 63 69 | 70 69 65 6e 74 2c 20 61 |and reci|pient, a|
|000015a0| 6e 64 20 61 20 75 6e 69 | 71 75 65 0a 20 20 69 64 |nd a uni|que.  id|
|000015b0| 65 6e 74 69 66 69 65 72 | 20 28 74 79 70 69 63 61 |entifier| (typica|
|000015c0| 6c 6c 79 20 74 68 65 20 | 64 61 74 65 29 2e 20 20 |lly the |date).  |
|000015d0| 41 20 67 6f 6f 64 20 66 | 72 6f 6e 74 2d 65 6e 64 |A good f|ront-end|
|000015e0| 20 73 63 72 69 70 74 20 | 66 6f 72 20 52 49 50 45 | script |for RIPE|
|000015f0| 4d 0a 20 20 73 68 6f 75 | 6c 64 20 64 6f 20 74 68 |M.  shou|ld do th|
|00001600| 69 73 20 61 75 74 6f 6d | 61 74 69 63 61 6c 6c 79 |is autom|atically|
|00001610| 20 28 49 4d 48 4f 29 2e | 20 20 41 73 20 61 20 72 | (IMHO).|  As a r|
|00001620| 65 63 69 70 69 65 6e 74 | 2c 20 79 6f 75 20 73 68 |ecipient|, you sh|
|00001630| 6f 75 6c 64 20 62 65 0a | 20 20 73 75 72 65 20 74 |ould be.|  sure t|
|00001640| 68 61 74 20 74 68 65 20 | 4f 72 69 67 69 6e 61 74 |hat the |Originat|
|00001650| 6f 72 2d 4e 61 6d 65 3a | 20 68 65 61 64 65 72 20 |or-Name:| header |
|00001660| 61 6e 64 20 74 68 65 20 | 73 65 6e 64 65 72 20 69 |and the |sender i|
|00001670| 6e 64 69 63 61 74 65 64 | 20 77 69 74 68 69 6e 0a |ndicated| within.|
|00001680| 20 20 74 68 65 20 70 6c | 61 69 6e 74 65 78 74 20 |  the pl|aintext |
|00001690| 61 72 65 20 74 68 65 20 | 73 61 6d 65 2c 20 74 68 |are the |same, th|
|000016a0| 61 74 20 79 6f 75 20 72 | 65 61 6c 6c 79 20 61 72 |at you r|eally ar|
|000016b0| 65 20 61 20 72 65 63 69 | 70 69 65 6e 74 2c 20 61 |e a reci|pient, a|
|000016c0| 6e 64 20 74 68 61 74 0a | 20 20 74 68 65 20 6d 65 |nd that.|  the me|
|000016d0| 73 73 61 67 65 20 69 73 | 20 6e 6f 74 20 61 6e 20 |ssage is| not an |
|000016e0| 6f 6c 64 20 6f 6e 65 2e | 20 20 53 6f 6d 65 20 74 |old one.|  Some t|
|000016f0| 68 69 73 20 61 6c 73 6f | 20 63 61 6e 20 61 6e 64 |his also| can and|
|00001700| 20 73 68 6f 75 6c 64 20 | 62 65 0a 20 20 61 75 74 | should |be.  aut|
|00001710| 6f 6d 61 74 65 64 2e 20 | 20 54 68 65 20 61 75 74 |omated. | The aut|
|00001720| 68 6f 72 20 6f 66 20 74 | 68 69 73 20 46 41 51 20 |hor of t|his FAQ |
|00001730| 68 61 73 20 6d 61 64 65 | 20 61 20 6d 6f 64 65 73 |has made| a modes|
|00001740| 74 20 61 74 74 65 6d 70 | 74 20 61 74 0a 20 20 61 |t attemp|t at.  a|
|00001750| 75 74 6f 6d 61 74 69 6e | 67 20 74 68 65 20 70 72 |utomatin|g the pr|
|00001760| 6f 63 65 73 73 20 6f 66 | 20 67 65 6e 65 72 61 74 |ocess of| generat|
|00001770| 69 6e 67 20 61 6e 64 20 | 63 68 65 63 6b 69 6e 67 |ing and |checking|
|00001780| 20 65 6e 63 61 70 73 75 | 6c 61 74 65 64 0a 20 20 | encapsu|lated.  |
|00001790| 68 65 61 64 65 72 73 3b | 20 74 68 65 20 70 72 6f |headers;| the pro|
|000017a0| 67 72 61 6d 73 20 61 72 | 65 20 69 6e 63 6c 75 64 |grams ar|e includ|
|000017b0| 65 64 20 69 6e 20 74 68 | 65 20 73 74 61 6e 64 61 |ed in th|e standa|
|000017c0| 72 64 20 64 69 73 74 72 | 69 62 75 74 69 6f 6e 20 |rd distr|ibution |
|000017d0| 69 6e 0a 20 20 74 68 65 | 20 75 74 69 6c 73 20 64 |in.  the| utils d|
|000017e0| 69 72 65 63 74 6f 72 79 | 2e 0a 0a 4c 4f 43 41 4c |irectory|...LOCAL|
|000017f0| 20 41 54 54 41 43 4b 53 | 0a 2d 2d 2d 2d 2d 2d 2d | ATTACKS|.-------|
|00001800| 2d 2d 2d 2d 2d 2d 0a 0a | 2d 20 43 6c 65 61 72 6c |------..|- Clearl|
|00001810| 79 2c 20 74 68 65 20 73 | 65 63 75 72 69 74 79 20 |y, the s|ecurity |
|00001820| 6f 66 20 52 49 50 45 4d | 20 63 61 6e 6e 6f 74 20 |of RIPEM| cannot |
|00001830| 62 65 20 67 72 65 61 74 | 65 72 20 74 68 61 6e 20 |be great|er than |
|00001840| 74 68 65 20 73 65 63 75 | 72 69 74 79 20 6f 66 0a |the secu|rity of.|
|00001850| 20 20 74 68 65 20 6d 61 | 63 68 69 6e 65 20 77 68 |  the ma|chine wh|
|00001860| 65 72 65 20 74 68 65 20 | 65 6e 63 72 79 70 74 69 |ere the |encrypti|
|00001870| 6f 6e 20 69 73 20 70 65 | 72 66 6f 72 6d 65 64 2e |on is pe|rformed.|
|00001880| 20 20 46 6f 72 20 65 78 | 61 6d 70 6c 65 2c 20 75 |  For ex|ample, u|
|00001890| 6e 64 65 72 0a 20 20 55 | 4e 49 58 2c 20 61 20 73 |nder.  U|NIX, a s|
|000018a0| 75 70 65 72 2d 75 73 65 | 72 20 63 6f 75 6c 64 20 |uper-use|r could |
|000018b0| 6d 61 6e 61 67 65 20 74 | 6f 20 67 65 74 20 61 74 |manage t|o get at|
|000018c0| 20 79 6f 75 72 20 65 6e | 63 72 79 70 74 65 64 20 | your en|crypted |
|000018d0| 6d 61 69 6c 2c 0a 20 20 | 61 6c 74 68 6f 75 67 68 |mail,.  |although|
|000018e0| 20 69 74 20 77 6f 75 6c | 64 20 74 61 6b 65 20 73 | it woul|d take s|
|000018f0| 6f 6d 65 20 70 6c 61 6e | 6e 69 6e 67 20 61 6e 64 |ome plan|ning and|
|00001900| 20 65 66 66 6f 72 74 20 | 74 6f 20 64 6f 20 73 6f | effort |to do so|
|00001910| 6d 65 74 68 69 6e 67 20 | 6c 69 6b 65 0a 20 20 72 |mething |like.  r|
|00001920| 65 70 6c 61 63 65 20 74 | 68 65 20 52 49 50 45 4d |eplace t|he RIPEM|
|00001930| 20 65 78 65 63 75 74 61 | 62 6c 65 20 77 69 74 68 | executa|ble with|
|00001940| 20 61 20 54 72 6f 6a 61 | 6e 20 68 6f 72 73 65 20 | a Troja|n horse |
|00001950| 6f 72 20 74 6f 20 67 65 | 74 20 61 20 63 6f 70 79 |or to ge|t a copy|
|00001960| 20 6f 66 0a 20 20 74 68 | 65 20 70 6c 61 69 6e 74 | of.  th|e plaint|
|00001970| 65 78 74 2c 20 64 65 70 | 65 6e 64 69 6e 67 20 68 |ext, dep|ending h|
|00001980| 6f 77 20 69 74 27 73 20 | 73 74 6f 72 65 64 2e 0a |ow it's |stored..|
|00001990| 0a 20 20 49 6e 20 61 64 | 64 69 74 69 6f 6e 2c 20 |.  In ad|dition, |
|000019a0| 74 68 65 20 6c 69 6e 6b | 20 62 65 74 77 65 65 6e |the link| between|
|000019b0| 20 79 6f 75 20 61 6e 64 | 20 74 68 65 20 6d 61 63 | you and| the mac|
|000019c0| 68 69 6e 65 20 72 75 6e | 6e 69 6e 67 20 52 49 50 |hine run|ning RIP|
|000019d0| 45 4d 20 69 73 0a 20 20 | 61 6e 20 65 78 74 65 6e |EM is.  |an exten|
|000019e0| 73 69 6f 6e 20 6f 66 20 | 74 68 61 74 2e 20 20 49 |sion of |that.  I|
|000019f0| 66 20 79 6f 75 20 64 65 | 63 72 79 70 74 20 77 69 |f you de|crypt wi|
|00001a00| 74 68 20 52 49 50 45 4d | 20 6f 6e 20 61 20 72 65 |th RIPEM| on a re|
|00001a10| 6d 6f 74 65 20 6d 61 63 | 68 69 6e 65 0a 20 20 77 |mote mac|hine.  w|
|00001a20| 68 69 63 68 20 79 6f 75 | 20 61 72 65 20 63 6f 6e |hich you| are con|
|00001a30| 6e 65 63 74 65 64 20 74 | 6f 20 76 69 61 20 6e 65 |nected t|o via ne|
|00001a40| 74 77 6f 72 6b 20 28 6f | 72 2c 20 77 6f 72 73 65 |twork (o|r, worse|
|00001a50| 20 79 65 74 2c 20 6d 6f | 64 65 6d 29 2c 20 61 6e | yet, mo|dem), an|
|00001a60| 0a 20 20 65 61 76 65 73 | 64 72 6f 70 70 65 72 20 |.  eaves|dropper |
|00001a70| 63 6f 75 6c 64 20 73 65 | 65 20 74 68 65 20 70 6c |could se|e the pl|
|00001a80| 61 69 6e 74 65 78 74 20 | 28 61 6e 64 20 70 72 6f |aintext |(and pro|
|00001a90| 62 61 62 6c 79 20 61 6c | 73 6f 20 79 6f 75 72 0a |bably al|so your.|
|00001aa0| 20 20 70 61 73 73 70 68 | 72 61 73 65 2e 29 0a 0a |  passph|rase.)..|
|00001ab0| 20 20 52 49 50 45 4d 20 | 73 68 6f 75 6c 64 20 6f |  RIPEM |should o|
|00001ac0| 6e 6c 79 20 62 65 20 65 | 78 65 63 75 74 65 64 20 |nly be e|xecuted |
|00001ad0| 6f 6e 20 73 79 73 74 65 | 6d 73 20 79 6f 75 20 74 |on syste|ms you t|
|00001ae0| 72 75 73 74 2c 20 6f 62 | 76 69 6f 75 73 6c 79 2e |rust, ob|viously.|
|00001af0| 20 20 49 6e 0a 20 20 74 | 68 65 20 65 78 74 72 65 |  In.  t|he extre|
|00001b00| 6d 65 20 63 61 73 65 2c | 20 52 49 50 45 4d 20 73 |me case,| RIPEM s|
|00001b10| 68 6f 75 6c 64 20 6f 6e | 6c 79 20 62 65 20 75 73 |hould on|ly be us|
|00001b20| 65 64 20 6f 6e 20 79 6f | 75 72 20 6f 77 6e 20 6d |ed on yo|ur own m|
|00001b30| 61 63 68 69 6e 65 2c 0a | 20 20 77 68 69 63 68 20 |achine,.|  which |
|00001b40| 79 6f 75 20 68 61 76 65 | 20 74 6f 74 61 6c 20 63 |you have| total c|
|00001b50| 6f 6e 74 72 6f 6c 20 6f | 76 65 72 20 61 6e 64 20 |ontrol o|ver and |
|00001b60| 77 68 69 63 68 20 6e 6f | 62 6f 64 79 20 65 6c 73 |which no|body els|
|00001b70| 65 20 68 61 73 20 61 63 | 63 65 73 73 0a 20 20 74 |e has ac|cess.  t|
|00001b80| 6f 2c 20 77 68 69 63 68 | 20 68 61 73 20 6f 6e 6c |o, which| has onl|
|00001b90| 79 20 63 61 72 65 66 75 | 6c 6c 79 20 65 78 61 6d |y carefu|lly exam|
|00001ba0| 69 6e 65 64 20 73 6f 66 | 74 77 61 72 65 20 6b 6e |ined sof|tware kn|
|00001bb0| 6f 77 6e 20 74 6f 20 62 | 65 20 66 72 65 65 20 6f |own to b|e free o|
|00001bc0| 66 0a 20 20 76 69 72 75 | 73 65 73 2c 20 61 6e 64 |f.  viru|ses, and|
|00001bd0| 20 73 6f 20 6f 6e 2e 20 | 20 48 6f 77 65 76 65 72 | so on. | However|
|00001be0| 2c 20 74 68 65 72 65 27 | 73 20 61 20 76 65 72 79 |, there'|s a very|
|00001bf0| 20 72 65 61 6c 20 74 72 | 61 64 65 2d 6f 66 66 20 | real tr|ade-off |
|00001c00| 62 65 74 77 65 65 6e 0a | 20 20 63 6f 6e 76 65 6e |between.|  conven|
|00001c10| 69 65 6e 63 65 20 61 6e | 64 20 73 65 63 75 72 69 |ience an|d securi|
|00001c20| 74 79 20 68 65 72 65 2e | 0a 0a 20 20 41 20 6d 6f |ty here.|..  A mo|
|00001c30| 72 65 20 6d 6f 64 65 72 | 61 74 65 6c 79 20 63 61 |re moder|ately ca|
|00001c40| 75 74 69 6f 75 73 20 75 | 73 65 72 20 6d 69 67 68 |utious u|ser migh|
|00001c50| 74 20 75 73 65 20 52 49 | 50 45 4d 20 6f 6e 20 61 |t use RI|PEM on a|
|00001c60| 20 55 4e 49 58 20 77 6f | 72 6b 73 74 61 74 69 6f | UNIX wo|rkstatio|
|00001c70| 6e 0a 20 20 77 68 65 72 | 65 20 6f 74 68 65 72 20 |n.  wher|e other |
|00001c80| 70 65 6f 70 6c 65 20 68 | 61 76 65 20 61 63 63 65 |people h|ave acce|
|00001c90| 73 73 20 28 65 76 65 6e | 20 72 6f 6f 74 20 61 63 |ss (even| root ac|
|00001ca0| 63 65 73 73 29 2c 20 62 | 75 74 20 69 6e 63 72 65 |cess), b|ut incre|
|00001cb0| 61 73 65 0a 20 20 73 65 | 63 75 72 69 74 79 20 62 |ase.  se|curity b|
|00001cc0| 79 20 6b 65 65 70 69 6e | 67 20 70 72 69 76 61 74 |y keepin|g privat|
|00001cd0| 65 20 6b 65 79 73 20 61 | 6e 64 20 74 68 65 20 28 |e keys a|nd the (|
|00001ce0| 73 74 61 74 69 63 61 6c | 6c 79 20 6c 69 6e 6b 65 |statical|ly linke|
|00001cf0| 64 2c 20 6f 66 0a 20 20 | 63 6f 75 72 73 65 29 20 |d, of.  |course) |
|00001d00| 65 78 65 63 75 74 61 62 | 6c 65 20 6f 6e 20 61 20 |executab|le on a |
|00001d10| 66 6c 6f 70 70 79 20 64 | 69 73 6b 2e 0a 0a 20 20 |floppy d|isk...  |
|00001d20| 53 6f 6d 65 20 70 65 6f | 70 6c 65 20 77 69 6c 6c |Some peo|ple will|
|00001d30| 20 6b 65 65 70 20 52 49 | 50 45 4d 20 6f 6e 20 61 | keep RI|PEM on a|
|00001d40| 20 6d 75 6c 74 69 2d 75 | 73 65 72 20 73 79 73 74 | multi-u|ser syst|
|00001d50| 65 6d 2c 20 62 75 74 20 | 77 68 65 6e 20 64 69 61 |em, but |when dia|
|00001d60| 6c 69 6e 67 0a 20 20 69 | 6e 20 6f 76 65 72 20 61 |ling.  i|n over a|
|00001d70| 6e 20 69 6e 73 65 63 75 | 72 65 20 6c 69 6e 65 2c |n insecu|re line,|
|00001d80| 20 74 68 65 79 20 77 69 | 6c 6c 20 64 6f 77 6e 6c | they wi|ll downl|
|00001d90| 6f 61 64 20 74 68 65 20 | 6d 65 73 73 61 67 65 20 |oad the |message |
|00001da0| 74 6f 20 74 68 65 69 72 | 0a 20 20 6f 77 6e 20 73 |to their|.  own s|
|00001db0| 79 73 74 65 6d 20 61 6e | 64 20 70 65 72 66 6f 72 |ystem an|d perfor|
|00001dc0| 6d 20 74 68 65 20 52 49 | 50 45 4d 20 64 65 63 72 |m the RI|PEM decr|
|00001dd0| 79 70 74 69 6f 6e 20 74 | 68 65 72 65 2e 20 20 48 |yption t|here.  H|
|00001de0| 6f 77 65 76 65 72 2c 20 | 74 68 65 0a 20 20 73 65 |owever, |the.  se|
|00001df0| 63 75 72 69 74 79 20 70 | 72 6f 76 69 64 65 64 20 |curity p|rovided |
|00001e00| 62 79 20 73 75 63 68 20 | 61 20 6d 65 63 68 61 6e |by such |a mechan|
|00001e10| 69 73 6d 20 69 73 20 73 | 6f 6d 65 77 68 61 74 20 |ism is s|omewhat |
|00001e20| 69 6c 6c 75 73 6f 72 79 | 3b 20 73 69 6e 63 65 0a |illusory|; since.|
|00001e30| 20 20 79 6f 75 20 70 72 | 65 73 75 6d 61 62 6c 79 |  you pr|esumably|
|00001e40| 20 74 79 70 65 20 79 6f | 75 72 20 63 6c 65 61 72 | type yo|ur clear|
|00001e50| 74 65 78 74 20 70 61 73 | 73 77 6f 72 64 20 74 6f |text pas|sword to|
|00001e60| 20 6c 6f 67 20 69 6e 2c | 20 79 6f 75 27 76 65 20 | log in,| you've |
|00001e70| 6a 75 73 74 0a 20 20 67 | 69 76 65 6e 20 61 77 61 |just.  g|iven awa|
|00001e80| 79 20 74 68 65 20 73 74 | 6f 72 65 2c 20 73 69 6e |y the st|ore, sin|
|00001e90| 63 65 20 74 68 65 20 61 | 74 74 61 63 6b 65 72 20 |ce the a|ttacker |
|00001ea0| 63 61 6e 20 6e 6f 77 20 | 6c 6f 67 20 69 6e 20 61 |can now |log in a|
|00001eb0| 73 20 79 6f 75 20 61 6e | 64 0a 20 20 69 6e 73 74 |s you an|d.  inst|
|00001ec0| 61 6c 6c 20 74 72 61 70 | 73 20 69 6e 20 79 6f 75 |all trap|s in you|
|00001ed0| 72 20 61 63 63 6f 75 6e | 74 20 74 6f 20 73 74 65 |r accoun|t to ste|
|00001ee0| 61 6c 20 79 6f 75 72 20 | 70 72 69 76 61 74 65 20 |al your |private |
|00001ef0| 6b 65 79 20 6e 65 78 74 | 20 74 69 6d 65 0a 20 20 |key next| time.  |
|00001f00| 79 6f 75 20 75 73 65 20 | 69 74 20 66 72 6f 6d 20 |you use |it from |
|00001f10| 61 20 6c 65 73 73 20 69 | 6e 73 65 63 75 72 65 20 |a less i|nsecure |
|00001f20| 6c 69 6e 65 2e 20 20 54 | 68 69 73 20 77 69 6c 6c |line.  T|his will|
|00001f30| 20 6c 69 6b 65 6c 79 20 | 72 65 6d 61 69 6e 20 74 | likely |remain t|
|00001f40| 68 65 0a 20 20 73 69 74 | 75 61 74 69 6f 6e 20 61 |he.  sit|uation a|
|00001f50| 73 20 6c 6f 6e 67 20 61 | 73 20 6d 6f 73 74 20 73 |s long a|s most s|
|00001f60| 79 73 74 65 6d 73 20 75 | 73 65 20 74 68 65 20 72 |ystems u|se the r|
|00001f70| 61 74 68 65 72 20 71 75 | 61 69 6e 74 20 6d 65 63 |ather qu|aint mec|
|00001f80| 68 61 6e 69 73 6d 20 6f | 66 0a 20 20 63 6c 65 61 |hanism o|f.  clea|
|00001f90| 72 74 65 78 74 20 70 61 | 73 73 77 6f 72 64 20 61 |rtext pa|ssword a|
|00001fa0| 75 74 68 65 6e 74 69 63 | 61 74 69 6f 6e 2e 0a 0a |uthentic|ation...|
|00001fb0| 20 20 49 20 66 69 6e 64 | 20 69 74 20 6e 69 63 65 |  I find| it nice|
|00001fc0| 20 74 6f 20 70 75 74 20 | 61 20 62 72 69 65 66 20 | to put |a brief |
|00001fd0| 73 74 61 74 65 6d 65 6e | 74 20 6f 66 20 68 6f 77 |statemen|t of how|
|00001fe0| 20 63 61 72 65 66 75 6c | 6c 79 20 49 20 6d 61 6e | careful|ly I man|
|00001ff0| 61 67 65 20 6d 79 0a 20 | 20 73 65 63 75 72 69 74 |age my. | securit|
|00002000| 79 20 61 72 72 61 6e 67 | 65 6d 65 6e 74 20 69 6e |y arrang|ement in|
|00002010| 20 6d 79 20 2e 70 6c 61 | 6e 20 6e 65 78 74 20 74 | my .pla|n next t|
|00002020| 6f 20 6d 79 20 70 75 62 | 6c 69 63 20 6b 65 79 2c |o my pub|lic key,|
|00002030| 20 73 6f 20 74 68 61 74 | 0a 20 20 70 6f 74 65 6e | so that|.  poten|
|00002040| 74 69 61 6c 20 63 6f 72 | 72 65 73 70 6f 6e 64 65 |tial cor|responde|
|00002050| 6e 74 73 20 63 61 6e 20 | 62 65 20 61 77 61 72 65 |nts can |be aware|
|00002060| 20 77 68 61 74 20 6c 65 | 76 65 6c 20 6f 66 20 70 | what le|vel of p|
|00002070| 72 65 63 61 75 74 69 6f | 6e 73 20 61 72 65 0a 20 |recautio|ns are. |
|00002080| 20 69 6e 20 70 6c 61 63 | 65 2e 20 20 53 6f 6d 65 | in plac|e.  Some|
|00002090| 20 70 65 6f 70 6c 65 20 | 75 73 65 20 74 77 6f 20 | people |use two |
|000020a0| 6b 65 79 73 2c 20 61 20 | 73 68 6f 72 74 20 6f 6e |keys, a |short on|
|000020b0| 65 20 77 68 69 63 68 20 | 69 73 20 6e 6f 74 0a 20 |e which |is not. |
|000020c0| 20 63 61 72 65 66 75 6c | 6c 79 20 6d 61 6e 61 67 | careful|ly manag|
|000020d0| 65 64 20 66 6f 72 20 6f | 72 64 69 6e 61 72 79 20 |ed for o|rdinary |
|000020e0| 75 73 65 20 61 6e 64 20 | 61 20 6c 6f 6e 67 65 72 |use and |a longer|
|000020f0| 20 6f 6e 65 20 77 68 69 | 63 68 20 69 73 20 74 72 | one whi|ch is tr|
|00002100| 65 61 74 65 64 0a 20 20 | 77 69 74 68 20 67 72 65 |eated.  |with gre|
|00002110| 61 74 65 72 20 63 61 72 | 65 20 66 6f 72 20 63 72 |ater car|e for cr|
|00002120| 69 74 69 63 61 6c 20 63 | 6f 72 72 65 73 70 6f 6e |itical c|orrespon|
|00002130| 64 65 6e 63 65 2e 0a 0a | 55 4e 54 52 55 53 54 45 |dence...|UNTRUSTE|
|00002140| 44 20 50 41 52 54 4e 45 | 52 20 41 54 54 41 43 4b |D PARTNE|R ATTACK|
|00002150| 53 0a 2d 2d 2d 2d 2d 2d | 2d 2d 2d 2d 2d 2d 2d 2d |S.------|--------|
|00002160| 2d 2d 2d 2d 2d 2d 2d 2d | 2d 2d 2d 0a 0a 2d 20 52 |--------|---..- R|
|00002170| 49 50 45 4d 27 73 20 65 | 6e 63 72 79 70 74 69 6f |IPEM's e|ncryptio|
|00002180| 6e 20 77 69 6c 6c 20 65 | 6e 73 75 72 65 20 74 68 |n will e|nsure th|
|00002190| 61 74 20 6f 6e 6c 79 20 | 61 20 70 65 72 73 6f 6e |at only |a person|
|000021a0| 20 77 69 74 68 20 74 68 | 65 20 70 72 69 76 61 74 | with th|e privat|
|000021b0| 65 20 6b 65 79 0a 20 20 | 63 6f 72 72 65 73 70 6f |e key.  |correspo|
|000021c0| 6e 64 69 6e 67 20 74 6f | 20 74 68 65 20 70 75 62 |nding to| the pub|
|000021d0| 6c 69 63 20 6b 65 79 20 | 75 73 65 64 20 74 6f 20 |lic key |used to |
|000021e0| 65 6e 63 72 79 70 74 20 | 74 68 65 20 64 61 74 61 |encrypt |the data|
|000021f0| 20 6d 61 79 20 72 65 61 | 64 20 74 68 65 0a 20 20 | may rea|d the.  |
|00002200| 74 72 61 66 66 69 63 2e | 20 20 48 6f 77 65 76 65 |traffic.|  Howeve|
|00002210| 72 2c 20 6f 6e 63 65 20 | 73 6f 6d 65 6f 6e 65 20 |r, once |someone |
|00002220| 77 69 74 68 20 74 68 61 | 74 20 6b 65 79 20 67 65 |with tha|t key ge|
|00002230| 74 73 20 74 68 65 20 6d | 65 73 73 61 67 65 2c 20 |ts the m|essage, |
|00002240| 73 68 65 0a 20 20 6d 61 | 79 20 61 6c 77 61 79 73 |she.  ma|y always|
|00002250| 20 6d 61 6b 65 20 77 68 | 61 74 65 76 65 72 20 6b | make wh|atever k|
|00002260| 69 6e 64 20 6f 66 20 74 | 72 61 6e 73 66 6f 72 6d |ind of t|ransform|
|00002270| 61 74 69 6f 6e 73 20 73 | 68 65 20 77 69 73 68 65 |ations s|he wishe|
|00002280| 73 2e 20 20 54 68 65 72 | 65 20 0a 20 20 65 78 69 |s.  Ther|e .  exi|
|00002290| 73 74 20 6e 6f 20 63 72 | 79 70 74 6f 67 72 61 70 |st no cr|yptograp|
|000022a0| 68 69 63 20 62 61 72 72 | 69 65 72 73 20 74 6f 20 |hic barr|iers to |
|000022b0| 61 20 72 65 63 69 70 69 | 65 6e 74 2c 20 73 61 79 |a recipi|ent, say|
|000022c0| 2c 20 74 61 6b 69 6e 67 | 20 61 6e 0a 20 20 45 4e |, taking| an.  EN|
|000022d0| 43 52 59 50 54 45 44 20 | 6d 65 73 73 61 67 65 20 |CRYPTED |message |
|000022e0| 61 6e 64 20 63 6f 6e 76 | 65 72 74 69 6e 67 20 69 |and conv|erting i|
|000022f0| 74 20 74 6f 20 61 20 4d | 49 43 2d 4f 4e 4c 59 20 |t to a M|IC-ONLY |
|00002300| 6d 65 73 73 61 67 65 2c | 20 73 69 67 6e 65 64 20 |message,| signed |
|00002310| 62 79 0a 20 20 79 6f 75 | 20 61 6e 64 20 72 65 61 |by.  you| and rea|
|00002320| 64 61 62 6c 65 20 62 79 | 20 61 6e 79 6f 6e 65 2c |dable by| anyone,|
|00002330| 20 61 6c 74 68 6f 75 67 | 68 20 52 49 50 45 4d 20 | althoug|h RIPEM |
|00002340| 64 6f 65 73 20 6e 6f 74 | 20 70 72 6f 76 69 64 65 |does not| provide|
|00002350| 20 74 68 69 73 0a 20 20 | 66 75 6e 63 74 69 6f 6e | this.  |function|
|00002360| 61 6c 69 74 79 2e 20 20 | 49 6e 64 65 65 64 2c 20 |ality.  |Indeed, |
|00002370| 74 68 65 20 6c 61 74 65 | 73 74 20 50 45 4d 20 64 |the late|st PEM d|
|00002380| 72 61 66 74 20 49 20 68 | 61 76 65 20 73 65 65 6e |raft I h|ave seen|
|00002390| 20 73 70 65 63 69 66 69 | 63 61 6c 6c 79 0a 20 20 | specifi|cally.  |
|000023a0| 73 74 61 74 65 73 20 74 | 68 61 74 20 73 75 63 68 |states t|hat such|
|000023b0| 20 74 72 61 6e 73 66 6f | 72 6d 61 74 69 6f 6e 73 | transfo|rmations|
|000023c0| 20 73 68 6f 75 6c 64 20 | 62 65 20 70 6f 73 73 69 | should |be possi|
|000023d0| 62 6c 65 20 74 6f 20 61 | 6c 6c 6f 77 0a 20 20 66 |ble to a|llow.  f|
|000023e0| 6f 72 77 61 72 64 69 6e | 67 20 66 75 6e 63 74 69 |orwardin|g functi|
|000023f0| 6f 6e 73 20 74 6f 20 77 | 6f 72 6b 2e 0a 20 0a 20 |ons to w|ork.. . |
|00002400| 20 49 6e 63 6c 75 64 69 | 6e 67 20 74 68 65 20 72 | Includi|ng the r|
|00002410| 65 63 69 70 69 65 6e 74 | 73 20 69 6e 20 74 68 65 |ecipient|s in the|
|00002420| 20 70 6c 61 69 6e 74 65 | 78 74 2c 20 61 73 20 6d | plainte|xt, as m|
|00002430| 65 6e 74 69 6f 6e 65 64 | 20 61 62 6f 76 65 2c 20 |entioned| above, |
|00002440| 77 69 6c 6c 0a 20 20 6d | 61 6b 65 20 69 74 20 70 |will.  m|ake it p|
|00002450| 6f 73 73 69 62 6c 65 20 | 66 6f 72 20 72 65 63 69 |ossible |for reci|
|00002460| 70 69 65 6e 74 73 20 6f | 66 20 61 20 72 65 64 69 |pients o|f a redi|
|00002470| 73 74 72 69 62 75 74 65 | 64 20 6d 65 73 73 61 67 |stribute|d messag|
|00002480| 65 20 74 6f 20 62 65 20 | 61 77 61 72 65 0a 20 20 |e to be |aware.  |
|00002490| 6f 66 20 69 74 73 20 6f | 72 69 67 69 6e 61 6c 20 |of its o|riginal |
|000024a0| 6e 61 74 75 72 65 2e 20 | 20 4e 61 74 75 72 61 6c |nature. | Natural|
|000024b0| 6c 79 2c 20 74 68 65 20 | 73 65 63 75 72 69 74 79 |ly, the |security|
|000024c0| 20 6f 66 20 74 68 65 20 | 63 72 79 70 74 6f 67 72 | of the |cryptogr|
|000024d0| 61 70 68 79 0a 20 20 63 | 61 6e 20 6e 65 76 65 72 |aphy.  c|an never|
|000024e0| 20 62 65 20 67 72 65 61 | 74 65 72 20 74 68 61 6e | be grea|ter than|
|000024f0| 20 74 68 65 20 73 65 63 | 75 72 69 74 79 20 6f 66 | the sec|urity of|
|00002500| 20 74 68 65 20 70 65 6f | 70 6c 65 20 75 73 69 6e | the peo|ple usin|
|00002510| 67 20 69 74 2e 0a 0a 54 | 52 41 46 46 49 43 20 41 |g it...T|RAFFIC A|
|00002520| 4e 41 4c 59 53 49 53 20 | 41 54 54 41 43 4b 53 0a |NALYSIS |ATTACKS.|
|00002530| 2d 2d 2d 2d 2d 2d 2d 2d | 2d 2d 2d 2d 2d 2d 2d 2d |--------|--------|
|00002540| 2d 2d 2d 2d 2d 2d 2d 2d | 0a 0a 2d 20 53 6f 6d 65 |--------|..- Some|
|00002550| 20 61 74 74 61 63 6b 73 | 20 61 72 65 20 6f 75 74 | attacks| are out|
|00002560| 73 69 64 65 20 74 68 65 | 20 73 63 6f 70 65 20 6f |side the| scope o|
|00002570| 66 20 74 68 65 20 50 45 | 4d 20 73 74 61 6e 64 61 |f the PE|M standa|
|00002580| 72 64 3b 20 74 72 61 66 | 66 69 63 0a 20 20 61 6e |rd; traf|fic.  an|
|00002590| 61 6c 79 73 69 73 20 69 | 73 20 61 20 70 72 6f 6d |alysis i|s a prom|
|000025a0| 69 6e 65 6e 74 20 6f 6e | 65 20 6f 66 20 74 68 65 |inent on|e of the|
|000025b0| 73 65 2e 09 20 50 45 4d | 20 64 6f 65 73 20 6e 6f |se.. PEM| does no|
|000025c0| 74 20 70 72 65 76 65 6e | 74 20 61 6e 20 65 6e 65 |t preven|t an ene|
|000025d0| 6d 79 0a 20 20 66 72 6f | 6d 20 70 6f 74 65 6e 74 |my.  fro|m potent|
|000025e0| 69 61 6c 6c 79 20 64 69 | 73 63 6f 76 65 72 69 6e |ially di|scoverin|
|000025f0| 67 20 77 68 6f 20 79 6f | 75 72 20 74 72 61 66 66 |g who yo|ur traff|
|00002600| 69 63 20 69 73 20 62 65 | 69 6e 67 20 65 78 63 68 |ic is be|ing exch|
|00002610| 61 6e 67 65 64 0a 20 20 | 77 69 74 68 20 61 6e 64 |anged.  |with and|
|00002620| 20 68 6f 77 20 6f 66 74 | 65 6e 2f 6c 65 6e 67 74 | how oft|en/lengt|
|00002630| 68 79 20 74 68 65 73 65 | 20 6d 65 73 73 61 67 65 |hy these| message|
|00002640| 73 20 61 72 65 2e 20 20 | 54 68 69 73 20 63 61 6e |s are.  |This can|
|00002650| 20 62 65 20 61 0a 20 20 | 70 72 6f 62 6c 65 6d 20 | be a.  |problem |
|00002660| 66 6f 72 20 73 6f 6d 65 | 20 70 65 6f 70 6c 65 2c |for some| people,|
|00002670| 20 74 68 6f 75 67 68 20 | 74 68 65 20 70 6f 74 65 | though |the pote|
|00002680| 6e 74 69 61 6c 20 66 6f | 72 20 69 6e 76 61 73 69 |ntial fo|r invasi|
|00002690| 6f 6e 20 6f 66 0a 20 20 | 70 72 69 76 61 63 79 20 |on of.  |privacy |
|000026a0| 6d 61 79 20 62 65 20 6d | 6f 72 65 20 61 20 63 6f |may be m|ore a co|
|000026b0| 6c 6c 65 63 74 69 76 65 | 20 74 68 61 6e 20 61 6e |llective| than an|
|000026c0| 20 69 6e 64 69 76 69 64 | 75 61 6c 20 6f 6e 65 2e | individ|ual one.|
|000026d0| 20 20 41 6e 0a 20 20 69 | 6e 74 65 72 65 73 74 69 |  An.  i|nteresti|
|000026e0| 6e 67 20 70 61 70 65 72 | 20 6f 6e 20 61 20 70 6f |ng paper| on a po|
|000026f0| 74 65 6e 74 69 61 6c 20 | 61 70 70 6c 69 63 61 74 |tential |applicat|
|00002700| 69 6f 6e 20 6f 66 20 74 | 72 61 66 66 69 63 20 61 |ion of t|raffic a|
|00002710| 6e 61 6c 79 73 69 73 20 | 69 73 0a 20 20 6d 65 6e |nalysis |is.  men|
|00002720| 74 69 6f 6e 65 64 20 62 | 65 6c 6f 77 2e 0a 0a 20 |tioned b|elow... |
|00002730| 20 54 68 65 20 74 72 61 | 64 69 74 69 6f 6e 61 6c | The tra|ditional|
|00002740| 20 77 61 79 20 74 6f 20 | 70 72 65 76 65 6e 74 20 | way to |prevent |
|00002750| 74 72 61 66 66 69 63 20 | 61 6e 61 6c 79 73 69 73 |traffic |analysis|
|00002760| 20 69 73 20 74 6f 20 74 | 68 72 6f 77 20 61 20 6c | is to t|hrow a l|
|00002770| 6f 74 20 6f 66 0a 20 20 | 62 6f 67 75 73 20 74 72 |ot of.  |bogus tr|
|00002780| 61 66 66 69 63 20 69 6e | 74 6f 20 74 68 65 20 63 |affic in|to the c|
|00002790| 68 61 6e 6e 65 6c 20 74 | 6f 20 6f 62 73 63 75 72 |hannel t|o obscur|
|000027a0| 65 20 74 68 65 20 72 65 | 61 6c 20 73 74 75 66 66 |e the re|al stuff|
|000027b0| 3b 20 74 68 69 73 20 63 | 6f 75 6c 64 0a 20 20 62 |; this c|ould.  b|
|000027c0| 65 20 64 6f 6e 65 20 62 | 75 74 20 77 6f 75 6c 64 |e done b|ut would|
|000027d0| 20 62 65 20 72 61 74 68 | 65 72 20 64 65 74 72 69 | be rath|er detri|
|000027e0| 6d 65 6e 74 61 6c 20 74 | 6f 20 6e 65 74 77 6f 72 |mental t|o networ|
|000027f0| 6b 20 6c 6f 61 64 20 61 | 6e 64 20 62 6f 67 75 73 |k load a|nd bogus|
|00002800| 0a 20 20 6d 65 73 73 61 | 67 65 20 72 65 63 69 70 |.  messa|ge recip|
|00002810| 69 65 6e 74 73 2e 20 20 | 54 72 75 73 74 65 64 20 |ients.  |Trusted |
|00002820| 74 68 69 72 64 2d 70 61 | 72 74 79 20 72 65 2d 6d |third-pa|rty re-m|
|00002830| 61 69 6c 65 72 73 20 74 | 68 61 74 20 68 61 6e 64 |ailers t|hat hand|
|00002840| 6c 65 0a 20 20 61 6c 69 | 61 73 65 73 20 63 61 6e |le.  ali|ases can|
|00002850| 20 68 65 6c 70 20 73 6f | 6d 65 2c 20 74 68 6f 75 | help so|me, thou|
|00002860| 67 68 20 61 6c 69 61 73 | 65 73 20 74 68 61 74 20 |gh alias|es that |
|00002870| 61 72 65 20 66 72 65 71 | 75 65 6e 74 6c 79 20 75 |are freq|uently u|
|00002880| 73 65 64 20 63 61 6e 0a | 20 20 73 74 69 6c 6c 20 |sed can.|  still |
|00002890| 62 65 20 61 6e 61 6c 79 | 7a 65 64 20 28 69 6e 64 |be analy|zed (ind|
|000028a0| 65 65 64 2c 20 74 72 61 | 66 66 69 63 20 61 6e 61 |eed, tra|ffic ana|
|000028b0| 6c 79 73 69 73 20 6d 69 | 67 68 74 20 64 65 74 65 |lysis mi|ght dete|
|000028c0| 72 6d 69 6e 65 20 77 68 | 69 63 68 0a 20 20 61 6c |rmine wh|ich.  al|
|000028d0| 69 61 73 65 73 20 67 6f | 20 77 69 74 68 20 77 68 |iases go| with wh|
|000028e0| 69 63 68 20 72 65 61 6c | 20 70 65 6f 70 6c 65 2e |ich real| people.|
|000028f0| 29 0a 0a 20 20 49 6e 74 | 65 72 65 73 74 69 6e 67 |)..  Int|eresting|
|00002900| 20 72 65 66 65 72 65 6e | 63 65 3a 0a 20 20 53 63 | referen|ce:.  Sc|
|00002910| 68 77 61 72 74 7a 20 61 | 6e 64 20 57 6f 6f 64 2e |hwartz a|nd Wood.|
|00002920| 20 20 60 60 44 69 73 63 | 6f 76 65 72 69 6e 67 20 |  ``Disc|overing |
|00002930| 73 68 61 72 65 64 20 69 | 6e 74 65 72 65 73 74 73 |shared i|nterests|
|00002940| 20 75 73 69 6e 67 20 67 | 72 61 70 68 0a 20 20 61 | using g|raph.  a|
|00002950| 6e 61 6c 79 73 69 73 2e | 27 27 20 20 43 41 43 4d |nalysis.|''  CACM|
|00002960| 2c 20 41 75 67 75 73 74 | 20 31 39 39 33 2e 0a 20 |, August| 1993.. |
|00002970| 20 0a 20 20 50 6c 61 69 | 6e 20 74 65 78 74 20 76 | .  Plai|n text v|
|00002980| 65 72 73 69 6f 6e 20 69 | 73 20 69 6e 3a 0a 20 20 |ersion i|s in:.  |
|00002990| 20 20 66 74 70 2e 63 73 | 2e 63 6f 6c 6f 72 61 64 |  ftp.cs|.colorad|
|000029a0| 6f 2e 65 64 75 3a 2f 70 | 75 62 2f 63 73 2f 74 65 |o.edu:/p|ub/cs/te|
|000029b0| 63 68 72 65 70 6f 72 74 | 73 2f 73 63 68 77 61 72 |chreport|s/schwar|
|000029c0| 74 7a 2f 41 53 43 49 49 | 2f 45 6d 61 69 6c 2e 53 |tz/ASCII|/Email.S|
|000029d0| 74 75 64 79 2e 74 78 74 | 2e 5a 0a 20 20 50 6f 73 |tudy.txt|.Z.  Pos|
|000029e0| 74 73 63 72 69 70 74 20 | 76 65 72 73 69 6f 6e 20 |tscript |version |
|000029f0| 69 73 20 69 6e 3a 0a 20 | 20 20 20 66 74 70 2e 63 |is in:. |   ftp.c|
|00002a00| 73 2e 63 6f 6c 6f 72 61 | 64 6f 2e 65 64 75 3a 2f |s.colora|do.edu:/|
|00002a10| 70 75 62 2f 63 73 2f 74 | 65 63 68 72 65 70 6f 72 |pub/cs/t|echrepor|
|00002a20| 74 73 2f 73 63 68 77 61 | 72 74 7a 2f 50 6f 73 74 |ts/schwa|rtz/Post|
|00002a30| 53 63 72 69 70 74 2f 45 | 6d 61 69 6c 2e 53 74 75 |Script/E|mail.Stu|
|00002a40| 64 79 0a                |                         |dy.     |        |
+--------+-------------------------+-------------------------+--------+--------+