RSA's comments on RC4 weak keys

Well, I seem to be falling into the role of spokesperson
for RSA on the net.  It gives me something to do other than
design reviews and programming.  Here is our response to the 
excellent work that Andrew Roos has been doing on RC4.  I am
glad that people are looking at RC4 critically.
                --Bob


-----------------------------
September 29, 1995 statement from RSADSI


RSA Data Security Inc. has been following the emerging
reports of a weakness in certain keys for the RC4 cipher.
RSADSI's researchers have been aware of this particular
property of the RC4 cipher for over a year.   Most ciphers
have a property whereby an enormous amount of known
plaintext will provide a slight reduction in exhaustive key
searching.  The linear cryptanalysis of the DES cipher is an
well known example of this.   Limitations like this in the
underlying ciphers are addressed by following sound advice
on the design of the overall cryptographic system.

Products that include RC4 from RSADSI are not compromised by
this attack.  Companies that license the BSafe cryptography
toolkit have always been given advice that overcomes this
limitation of the RC4 cipher, and this is true even for
products that were built >before< this specific problem was
discovered by the researchers at RSADSI.   These researchers
also monitor all developments in the field of cryptography
and cryptanalysis so they can keep RSADSI's customers
appraised relevant developments.

Robert W. Baldwin <baldwin@RSA.COM> wrote:

> Here is our response to the excellent work that Andrew Roos has been
> doing on RC4.  I am glad that people are looking at RC4 critically.

Oh really?  A year ago you didn't want anyone looking at RC4 at all!

But since you now seem to be for open review, we'd be happy to
cryptanalyze RC2 for ya also.  :)

-----BEGIN PGP SIGNED MESSAGE-----

On Sun Oct  1 01:37:01 1995: you scribbled...
> 
> Robert W. Baldwin <baldwin@RSA.COM> wrote:
> 
> > Here is our response to the excellent work that Andrew Roos has been
> > doing on RC4.  I am glad that people are looking at RC4 critically.

Hi.  This is a pretty intresting statement.  

Does this mean that RSA acknowledges the fact that RC4 can no longer claim
"Trade Secret" status, and therefore will stop trying to make people get a
license to use RC4?

Thanx.

...alex...


-----BEGIN PGP SIGNATURE-----
Version: 2.6.2
Comment: Alex Tang <altitude@umich.edu> or Alex Tang <altitude@cic.net>

iQCVAwUBMG5E9qNd+TOtm9v5AQGWbAP9EtKLfLsz5Vw1ltkyFxhFoTGCBmxngMzg
wlNQfDJ4Qp52HwKnVZGUgxeYYzH5SNT5xRnYzjITUd6tRBI5SRO+/5DQYYLcT1/N
GXYqT7nZ5R5+SXd4XGDmzqNweW42E0HD4QPpc1Qmr+QxoCpmFb9WJZ6Onh++rAu7
abH3sNIWQsk=
=FZer
-----END PGP SIGNATURE-----