-----BEGIN PGP SIGNED MESSAGE----- From: Jim choate <ravage@bga.com> Subject: Re: back to programming projects... Date: Sat, 11 Jun 1994 17:39:05 -0500 (CDT) > On a related note, should encrypting remailers have the keys changed > regularly? The RSA-IDEA combination isn't very suspectible to known > plaintext attacks, right? > > Zeke Personaly I think that is up to the individuals who are transmitting the messages. If they for some reason feel it is prudent then do it. Otherwise there are probably other more interesting things to work on. I wasn't asking about anything to do with what projects were interesting to anyone in particular. If I want to know what you're interested in working on, I'll ask directly. I was asking about something that might be equally interesting to users and maintainers. Is the RSA-IDEA combination known to be suspectible to any known/chosen plaintext attacks? Has anybody published a known/chosen plaintext attack that works against what PGP does better than a brute force attack? If a known/chosen plaintext attack works against PGP, then a PGP remailer's keys aren't as secure as other keys cuz an attacker can encrypt arbitrary text with them. If nobody's figured out a known/chosen plaintext attack, then remailer's keys are as good as anybody else's. Zeke -----BEGIN PGP SIGNATURE----- Version: 2.3a iQCVAgUBLftKjhVg/9j67wWxAQHiSwP/dop6udnScpvG6BfAG4Btn3ggGVxZ8DGO kJNEOpNYEEbhjqDjsnPq9ApXqcWaOIF+L6yO2nxleEwHQ8g9uE/YCSPzubr1WP6C priCJGeCB/vgjcMQul6/k13T97vHF3UkPlcVPwt0hqP/DV158wwnZMfwIOcMS3r5 5RyRWOCKxck= =LEN+ -----END PGP SIGNATURE-----