Article View: comp.security.misc
Article #963Re: Why doesn't Sun provide the Crypt program in their OS?
From: Eric De Mund
Date: Fri, 22 Jan 1993 20:38
Date: Fri, 22 Jan 1993 20:38
25 lines
1565 bytes
1565 bytes
op@holmes.acc.Virginia.EDU (Olaf Pors) writes: ] pleticha@casc.math.uh.edu (Dennis Pleticha) writes: ] ] I've been trying to find out why I can't get the crypt application ] ] directly from Sun for months now. ] I'm in a similar situation. ] ... ] I finally realized that it is silly to waste any time on ] DES, since its 56-bit keys make it susceptible to brute-force ] attacks. sun has unbundled crypt(1) and des(1). anyway, forget crypt(1). it's weak. use archie(1) to find an anon ftp site that carries des source code (i use the des(1) found within the kit-2.0.14 package). as for des(1) being silly to use, the succeptibility of des to brute force attack is dwarfed by the key management problem on networked machines. if you want more security than des(1) provides, forward- and backward-encrypt multiple times using different keys. see the sci.crypt faq for more info. eric de mund <ead@netcom.com> p.s. the kit-2.0.14 distribution is archived at ftp.uu.net in the directories /usenet/comp.sources.unix/volume2[5-6]/kit.
Technical Details
Message-ID:
<1993Jan22.203818.26305@netcom.com>Path:
arc1-ca.pugleaf.net!sparky!uunet!cs.utexas.edu!sdd.hp.com!decwrl!csus.edu!netcom.com!eadShow Full Headers
Complete Article Headers
Newsgroups: comp.security.misc Path: arc1-ca.pugleaf.net!sparky!uunet!cs.utexas.edu!sdd.hp.com!decwrl!csus.edu!netcom.com!ead From: Eric De Mund <ead@netcom.com> Subject: Re: Why doesn't Sun provide the Crypt program in their OS? Message-ID: <1993Jan22.203818.26305@netcom.com> X-Reply-To: Eric De Mund <ead@netcom.com> Keywords: crypt Sender: ead@netcom.com (Eric De Mund) Reply-To: Eric De Mund <ead@netcom.com> Organization: Netcom Online Communication Services Date: Fri, 22 Jan 1993 20:38:18 GMT Lines: 25