// COMPLETE THREAD

Is it true that PGP 5.X is not secure?

3 expanded posts · every known parent and child

NODE 8dd346a9Is it true that PGP 5.X is not secure? "Lars Weitze" <chromedemon@netcologne.de>Tue, 1 Sep 1998 04:06:36 -0700 (PDT)

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

There are still rumors about that...
ChromeDemon
- -- 
"One dead is a tragedy, thousand deads are a statistic."
        Karl Marx

e-mail: chromedemon@netcologne.de
http://chromedemon.home.pages.de
http://www.netcologne.de/~nc-weitzela2
-----BEGIN PGP SIGNATURE-----
Version: PGP 5.5.5

iQA/AwUBNevU0XnCsKPabtOfEQILcACfZ097WlD1pyA+2c7qv5RcyuYQJaEAoOmf
mvg3B9F9NNv7qrHljjgC1T+B
=J/8j
-----END PGP SIGNATURE-----

NODE 6dd17ec7Re: Is it true that PGP 5.X is not secure? Mok-Kong Shen <mok-kong.shen@stud.uni-muenchen.de>Tue, 1 Sep 1998 05:45:13 -0700 (PDT)

Lars Weitze wrote:
>  
> There are still rumors about that...

My humble knowledge does not permit my answering your question.
However, I suppose your question is problematical. It is difficult
to define security, or more precisely a scientifcally rigorous
measure of security. I don't think that it is sensible to talk about 
absolute security without reference to a context (environment). In 
my view there is no 'perfect' encryption system in the practical
world. If by 'not secure' you meant something that malicious persons 
have secretely manipulated to cause you damage, then I also don't 
know but I guess that to be highly unlikely, given the good historical 
record of PGP. 

M. K. Shen

NODE ceda4f69Re: Is it true that PGP 5.X is not secure? Steve Bryan <sbryan@vendorsystems.com>Tue, 1 Sep 1998 07:20:37 -0700 (PDT)

>-----BEGIN PGP SIGNED MESSAGE-----
>Hash: SHA1
>
>There are still rumors about that...
>ChromeDemon
>- --
>"One dead is a tragedy, thousand deads are a statistic."
>        Karl Marx
>
>e-mail: chromedemon@netcologne.de
>http://chromedemon.home.pages.de
>http://www.netcologne.de/~nc-weitzela2
>-----BEGIN PGP SIGNATURE-----
>Version: PGP 5.5.5
>
>iQA/AwUBNevU0XnCsKPabtOfEQILcACfZ097WlD1pyA+2c7qv5RcyuYQJaEAoOmf
>mvg3B9F9NNv7qrHljjgC1T+B
>=J/8j
>-----END PGP SIGNATURE-----

Why pay attention to ill-supported rumors? The source code is publicly
available at www.pgpi.com. If there is a security issue then it can be
critiqued with reference to the places in the source code that are the
cause of the problem. If someone has done this, I haven't been paying close
enough attention and I apologize for ranting. If not, then I would dismiss
such claims as almost certainly baseless.

Steve Bryan
Vendorsystems International
email: sbryan@vendorsystems.com
icq: 5263678
pgp fingerprint: D758 183C 8B79 B28E 6D4C  2653 E476 82E6 DA7C 9AC5