----- Original Message -----
From: "Aaron P Ingebrigtsen" <[EMAIL PROTECTED]>

> On Thu, 31 May 2001 02:14:53 -0500 "Mathew Ryden" <[EMAIL PROTECTED]>
> writes:
> > Are we talking about PGP or UC2 here? If pgp, you either have a very
> > slow
> > computer or I'm shocked at norton for having such an unoptomized
> > algorithm.
>
> I was talking about UC2 which uses MD5 hash.

then you are seeing the effect of someone who didn't use an algorithm
optomized for speed. if you do a similar thing with PGP you'll notice it's
much faster - pgp also has installed things to make finding the password
more difficult and from knowing how full an archive is -- I doubt UC2 has
such stringent standards.

> > it's fairly strong for documents you don't mind being readable quite
> > soon. a
> > triple-des encrypted file is still only as secure as the key that
> > encrypts
> > it - in this case the key is Rand1 . Rand2. Assuming that they are
> > both 56
> > bit keys (as are all DES keys if memory serves) then Triple-DES gives
> > you
> > 112 bits of security (becuase you reuse a key it doesn't make the
> > security
> > any stronger on key attacks).
>
> Well I don't know how many bits Rand1 and Rand2 are, but I do know that
> they are generated by MD5 based on the password and the archive being
> encrypted.

well, I'm 95% sure that each of Rand1 and Rand2 are 56 bits but I can't be
bothered to double check for sure.


_______________________________________________
Chat mailing list
[EMAIL PROTECTED]
http://lists.freenetproject.org/mailman/listinfo/chat

Reply via email to