From: "Pat Farrell" <pfarrell@netcom.com>
Date: Tue, 5 Sep 95 19:33:24 PDT
To: jsimmons@goblin.punk.net
Subject: Re: NSA says Joe Sixpack won't buy crypto
Message-ID: <80607.pfarrell@netcom.com>
MIME-Version: 1.0
Content-Type: text/plain


  Black Unicorn <unicorn@access.digex.net>  writes:
> On Tue, 5 Sep 1995, Jeff Simmons wrote:
>>   So what form of GAK or trap-doorodoes lotus notes contain?
> No, it's just been so weak before the current implementation of RC4 (and
> note the export version still has 40 bits) that it might as well be
> nothing.

Uni is right. Notes used RSA, which starts out fine. but it has
nothing  like PGP's passphrase to protect the private key. You can
simply copy the "username.ID" file, and you can sign and encrypt
messages with "username"'s nym.

Of course, Corporate america loves Notes, which is why IBM bought it.

Weak encryption for weak minds.

Pat

Pat Farrell    Grad Student      http://www.isse.gmu.edu/students/pfarrell
Info. Systems & Software Engineering, George Mason University, Fairfax, VA
PGP key available on homepage               #include <standard.disclaimer>