From: liberty@gate.net (Jim Ray)
Date: Thu, 3 Aug 95 12:21:04 PDT
To: cypherpunks@toad.com
Subject: Re: There's a hole in your crypto...
Message-ID: <199508031918.PAA16067@bb.hks.net>
MIME-Version: 1.0
Content-Type: text/plain


-----BEGIN PGP SIGNED MESSAGE-----

- -----BEGIN PGP SIGNED MESSAGE-----

Andrew Spring wrote:

<snip>

>>How do I know PGP IS secure? I don't. That doesn't mean I don't use it or
>
>Doesn't the NSA certify the security of cryptosystems?
>I wonder what they'd say about PGP?

Their consultant, Prof. Dorothy Demming(sp?), has been asked this very
question about PGP, and she deftly avoided comment on both PGP and IDEA.
[I believe this was on NPR, but I'm not certain.] The emergence of NSA
from absolutely secret agency to semi-public status (writing letters,
P.R. concerns, opening a museum, etc.) at the same time as the general 
availability of what's considered by many [including me] to be strong, 
free, cryptography "for the masses" is interpreted by many [including me]
as an implicit NSA comment on the availability of strong crypto in 
general, and on the availability of PGP in particular.
JMR

<snip sig.>


- -----BEGIN PGP SIGNATURE-----
Version: 2.6.2
Comment: Freedom isn't Freeh

iQCVAwUBMCEc4m1lp8bpvW01AQG/xQP/YJDZekZBS2S9behLbFEVKdGcMgxagji7
r54EZa7mzQOObtGbi8ucnKZFm0ut7puxcNfJgaGcMmboEaeyo/vlOYeICDBaouLY
I5/RJQwLjiBPcSWeDTSVDbiH4dvszaKrwYo/xC5WA8pv2kbZFEdou5HpHiiof0dV
cTCvF4j90oo=
=sNKQ
- -----END PGP SIGNATURE-----
Regards, Jim Ray

"The people will again respect the law when the law again respects
the will of the people." Jim Ray, Campaign '92
- ------------------------------------------------------------------------
PGP key Fingerprint  51 5D A2 C3 92 2C 56 BE  53 2D 9C A1 B3 50 C9 C8 
Key id. #  E9BD6D35
- ------------------------------------------------------------------------
Support the Phil Zimmermann (Author of PGP) Legal Defense Fund! 
email:  zldf@clark.net or visit http://www.netresponse.com/zldf
________________________________________________________________________

- ---
[This message has been signed by an auto-signing service.  A valid signature
means only that it has been received at the address corresponding to the
signature and forwarded.]

-----BEGIN PGP SIGNATURE-----
Version: 2.6.2
Comment: Gratis auto-signing service

iQBFAwUBMCEg2CoZzwIn1bdtAQH2IQF/e+BP6NnoaQxHgm8bsZQpOLqW5rb4xcMa
aHrUYlP3bYDwv49HYRlz+GQMDTCm2OII
=QYNV
-----END PGP SIGNATURE-----