At 11:19 AM 3/31/97 -0500, Ray Arachelian forwarded:
---------- Forwarded message ---------- Date: Sat, 29 Mar 1997 14:37:43 -0800 From: Chris Plunkett <chris.plunkett@opensys.com> To: pmarc@cmg.FCNBD.COM Cc: Romulo Moacyr Cholewa <rmcholewa@poboxes.com>, Windows NT BugTraq Mailing List <NTBUGTRAQ@rc.on.ca>, "ntsecurity@iss.net" <ntsecurity@iss.net>, hughtay@microsoft.com Subject: Re: [NTSEC] Re: Internet Explorer Bug #4
[Amusing story deleted "486 with 'YMP' sticker on it]
I heard a story one time. It evolved around a college student in France doing some cyptography work in school, working nights as a backup operator at some large computer center. He didn't need a cray. A little knowledge and some creative programming, and a center full of computers (problably around the size of a Sparc 10). The story ended explaning how one of the encryption schemes that would tale a Cray week to break, was broken in one night, by a bunch of computers running backups.
This is almost certainly the RC4/40 crack in August 1995 by Damien Doligez in response to Hal Finney's challenge. It had actually been broken a few hours earlier by an English (Anglo-American?) team using a coordinated Internet attack, but Damien noticed his success before they noticed theirs. Much noise was made in the press by various people about "Using $10,000 worth of supercomputer time", but in fact the antique KSR-1 contributed far less crunching than the bunch of DEC Alpha workstations, and the amount of money per crack (if you'd been renting computer time) would have been far less. Subsequent cracks were run by the Internet team, which ran even faster, once they were organized. Various Cypherpunks were quoted in the press talking about how the US export laws were bogus, and how the maximum-strength crypto allowed by US law could be broken by a grad student over a weekend. Since then, there have been other cracks - the RC5/40 crack by Ian Goldberg took 3.5 hours on a Network of Workstations at Berkeley, winning the RSA challenge a few minutes before Germano Caronni's distributed Internet team, which subsequently broke the RC5/48 challenge. It's been popular in the press to refer to these talented researchers as "a grad student" when trying to make the point that "anybody could break this wimpy stuff" or as "a university research team with a room full of expensive supercomputers" when trying to pretend the export limits are reasonable for the real world. The news article below is from "NB", presumably "NewsBytes", and was posted without permission to the cypherpunks list by an anonymous remailer user. ====================================================== Date: Sat, 19 Aug 1995 00:01:18 +0200 Subject: WhiSSLing in the Dark To: cypherpunks@toad.com From: nobody@REPLAY.COM (Anonymous) Netscape Encrypted Data Cracked Tokyo, Japan, Aug. 18 (NB) -- Two computer users have managed to break Netscape's Secure Sockets Layer (SSL) encryption code in response to a challenge posted to the Internet. But far from scaring people away from using the system for online purchases, the results could reassure people of the safety. In mid July Hal Finney, a US computer user, posted data in an Internet message that he recorded when he sent an order, containing a fake name and credit card details, to Netscape's own computer. Setting a task for the hacking community, he wrote, "The challenge is to break the encryption and recover the name and address info I entered in the form and sent securely to Netscape." Early this week, news came from Damien Doligez, a French computer user, that he had cracked the code and revealed the contents of the message. Several hours later a message from an American team also claimed the same feat, actually cracking it two hours earlier than Doligez. While the results look damaging on the surface, Netscape, and Doligez, pointed out the amount of computer processing power needed to hack just one message and the difficulty in repeating the process. Roseanne Siino of Netscape told Newsbytes, "The real issue is whether this compromises security on the net. He used 120 computers for 8 days just to crack one message." Siino points out that to break into another message would require another eight days at the same 120 workstations and 2 parallel computers. In home computer terms, Doligez guesses a network of about 80 Intel Pentium-based machines would be equivalent to the system he had access to via his workplace, INRIA in Paris, and computers an Ecole Polytechnique and ENS. Netscape estimates the total cost of this computing time at around $10,000, meaning there are many more economical ways of getting credit cards numbers than hacking into Netscape SSL messages. Doligez agrees, writing on his home page: "The technical implications are almost zero. Everybody who understands the technical details knew perfectly well that this was do-able and even easy. You have to understand what happened exactly. I did not break SSL itself. I did only break one SSL session that used the weakest algorithm available in SSL. If I want to break another session, it will cost another 8 days of all my machines." The vulnerability of the encryption system is shown by its international use. The coding system available via Netscape software from the Internet makes use of a 40-bit encryption key. A stronger version, using a 128-bit key, is available to US citizens but restricted from export outside the United States by government regulations. Netscape's Siino explained the US government allows export of the lower security version "because they can break it." There are some hopes that this demonstration will help persuade the US government to lift export restrictions on some harder-to-crack versions of the code. Netscape is currently developing a new Secure Courier code which just encrypts the financial data in the messages using 56-bit keys. Siino explained, "You can export over 40-bit keys for a specific application." The new system should be available early next year. Many companies working on secure transaction systems hope the much more secure 128-bit code version of the system will be available for export eventually. This is said to be almost unbreakable, requiring a trillion times more processing power to crack than the 40-bit version. Internet users can view a copy of the original challenge, access Doligez's home page with details of his result, get copies of the program used to crack the code and read Netscape's response to the news through a special section at Netscape, http://home.netscape.com/newsref/std/key_challenge.html Press contacts : Roseanne Siino, Netscape, +1-415-528-2619 , Internet email roseanne@netscape.com; Damien Doligez, Internet email damien.doligez@inria.fr ; Hal Finney, Internet email hfinney@shell.portal.com) ========================================================================= # Thanks; Bill # Bill Stewart, +1-415-442-2215 stewarts@ix.netcom.com # You can get PGP outside the US at ftp.ox.ac.uk/pub/crypto/pgp # (If this is a mailing list, please Cc: me on replies. Thanks.)