From: Sten Drescher <stend@grendel.texas.net>
Date: Fri, 19 Jan 1996 23:23:05 +0800
To: Rich Graves <llurch@networking.stanford.edu>
Subject: Re: Single computer breaks 40-bit RC4 in under 8 days
In-Reply-To: <Pine.ULT.3.91.960118191503.25375E-100000@Networking.Stanford.EDU>
Message-ID: <55buo0z0bc.fsf@galil.austnsc.tandem.com>
MIME-Version: 1.0
Content-Type: text/plain


Rich Graves <llurch@networking.stanford.edu> said:

>> workstations, Doligez averaged 850,000 keys per second.ICE used the
>> following formula to determine its $584 cost of computing power: the
>> total cost of the computer divided by the number of days in a
>> three-year lifespan (1,095), multiplied by the number of days (7.7)
>> it takes to break the code.

RG> This assumes, of however, that collecting encrypted communications,
RG> feeding them to the computer with 100% efficiency, electricity,
RG> labor, etc. are completely free.

RG> I hope everyone recognizes this as more old news and ICE
RG> marketing. In a fantasy world, the press et al would see this and
RG> clamor for the revocation of ITAR.

	This is old news to those of us who understand it.  But this new
way of presenting the information is newsworthy.  Yes, it
over-simplifies the costs of collecting the transactions to force, but
the sound bite nature of reporting today requires that.  The government
is trying to give people warm fuzzies about the 'security' of 40-bit
encryption, and we, unfortunately, need to be spreading FUD about that.
This helps to do that.

-- 
#include <disclaimer.h>				/* Sten Drescher */
1973 Steelers    About Three Bricks Shy of a Load    1994 Steelers
1974 Steelers         And the Load Filled Up         1995 Steelers?
To get my PGP public key, send me email with your public key and
	Subject: PGP key exchange
Key fingerprint =  90 5F 1D FD A6 7C 84 5E  A9 D3 90 16 B2 44 C4 F3
Unsolicited email advertisements will be proofread for a US$100/page fee.