Thread View: comp.security.misc
1 messages
1 total messages
Started by Eric De Mund
Fri, 22 Jan 1993 20:38
Re: Why doesn't Sun provide the Crypt program in their OS?
Author: Eric De Mund
Date: Fri, 22 Jan 1993 20:38
Date: Fri, 22 Jan 1993 20:38
25 lines
1565 bytes
1565 bytes
op@holmes.acc.Virginia.EDU (Olaf Pors) writes: ] pleticha@casc.math.uh.edu (Dennis Pleticha) writes: ] ] I've been trying to find out why I can't get the crypt application ] ] directly from Sun for months now. ] I'm in a similar situation. ] ... ] I finally realized that it is silly to waste any time on ] DES, since its 56-bit keys make it susceptible to brute-force ] attacks. sun has unbundled crypt(1) and des(1). anyway, forget crypt(1). it's weak. use archie(1) to find an anon ftp site that carries des source code (i use the des(1) found within the kit-2.0.14 package). as for des(1) being silly to use, the succeptibility of des to brute force attack is dwarfed by the key management problem on networked machines. if you want more security than des(1) provides, forward- and backward-encrypt multiple times using different keys. see the sci.crypt faq for more info. eric de mund <ead@netcom.com> p.s. the kit-2.0.14 distribution is archived at ftp.uu.net in the directories /usenet/comp.sources.unix/volume2[5-6]/kit.
Thread Navigation
This is a paginated view of messages in the thread with full content displayed inline.
Messages are displayed in chronological order, with the original post highlighted in green.
Use pagination controls to navigate through all messages in large threads.
Back to All Threads