From: Unprivileged user <nobody@www.video-collage.com>
Date: Sun, 20 Jul 1997 11:39:07 +0800
To: cypherpunks@Algebra.COM
Subject: Re: PGP 5.0 source available (but not online yet) 2nd Edition
In-Reply-To: <199707161413.HAA14531@cypherpunks.ca>
Message-ID: <97Jul19.233439edt.32257@brickwall.ceddec.com>
MIME-Version: 1.0
Content-Type: text/plain



For those with the source, (mine says july 9, 1997 and isbn 09649654-8-8
so it may be a variant - it also says second edition) check out page 1342
around the words "Key Recovery" near the top of the page in the pgpMakeSig
routine.  I know, it is only for future corporate key recovery ;).

Also, having 16 bytes for salt and iv fields which are supposed to be
"random" can hide a large amount of other data. 

On Wed, 16 Jul 1997, Ian Goldberg wrote:

> I received a copy of the latest source (12 volumes) from a PGP, Inc. rep
> at the July Bay Area Cypherpunks Open Meeting on US Soil (12 July on Stanford
> campus).
> 
> You can order your own copies through Printers, Inc.:
> 
>   Printers, Inc.
>   301 Castro St.
>   Mountain View, CA. 94041
>   (415) 961-8500
>   <http://www.pibooks.com>
> 
>   PGP 5.0 Platform Independent Source Code
>    Five Volumes, $94.00   ISBN 099649654-5-3
> 
>   PGP 5.0 Win95 Source Code
>    Three Volumes, $57.00  ISBN 099649654-6-1
> 
>   PGP 5.0 Mac Source Code
>    Four Volumes, $82.00   ISBN 099649654-7-X
> 
>    - Ian