NODE 42d12919Re: "Strong" crypto and export rule changes.
azur@netcom.com (Steve Schear)Sat, 1 Feb 1997 20:14:17 -0800 (PST)
> What the US government will allow to be exported is not "strong
>encryption." It is encryption only slightly too strong to be broken
>by an amateur effort. For the right investment in custom hardware, it
>falls quickly. (500,000 $US = 3.5 hour avg break).
>
Considering Ian's feat you certainly seem to have had your crystal ball in hand.
--Steve
NODE f44e81efRe: "Strong" crypto and export rule changes.
Adam Shostack <adam@homeport.org>Sat, 1 Feb 1997 20:59:53 -0800 (PST)
Steve Schear wrote:
| > What the US government will allow to be exported is not "strong
| >encryption." It is encryption only slightly too strong to be broken
| >by an amateur effort. For the right investment in custom hardware, it
| >falls quickly. (500,000 $US = 3.5 hour avg break).
| >
|
| Considering Ian's feat you certainly seem to have had your crystal
| ball in hand.
I wear three around my neck. Its a new age thing.
More seriously, that estimate is the cost of breaking DES on
custom hardware, based on Wiener's figures. Ian got RC4-40 in 3.5
hours on I don't know how much hardware, not a lot of it custom,
AFAIK.
Adam
--
Pet peeve of the day: Security companies whose protocols dare not
speak their name, because they don't have one. Guilty company of the
day is now V-One.