-----BEGIN PGP SIGNED MESSAGE----- In list.cypherpunks, byrd@ACM.ORG writes:
This just appeared in alt.security.pgp. Is there anything to it? I'm dubious.
[snippo...]
Announcement: No longer is PGP uncrackable. A new software program has been released that cracks PGP encrypted messages. Find out more at: http://www.fix.net/~kwyatt/pgpcrack.html
So you didn't have time to go check out the URL? - ----- begin 'lynx -dump' output ----- Welcome to the PGP Cracker home page. As system administrator you know the frustration in reading your users Email if they use PGP. Or if your lover is receiving encrypted messages you would be interested in reading that encrypted email. Of course, government agencies will be greatly interested in this new tool also. The program is free for non-commercial users! For government and commercial applications the cost is $500.00 per site. The program only runs on UNIX machines. How does it work? To decrypt any message that uses PGP you need the Public Key and the random number generated to encrypt the message. Commands: Crack -d filename.ext Decrypts any encrypted message less than 2047 bytes. Crack -p secring.pgp Lets you modify a keys password so the owner can no longer decrypt messages. Crack -s PUBKEY.EXT Lets you modify the public key ID information. Crack -h The crack help file PGP Cracker is Copyright 1996 by Keith Wyatt, All Rights reserved. Download PGP Crack - ----- end 'lynx -dump' output ----- The "Download PGP Crack" is a link. Follow it and you get the following text: - ----- begin 'lynx -dump' output ----- APRIL FOOLS! - ----- end 'lynx -dump' output ----- Of course, if you have "the random number generated to encrypt the message", you have the session key. No further magic is necessary, and no public key required. But I bet a lot of newless cluebies bite. - -- Roy M. Silvernail -- roy@cybrspc.mn.org will do just fine, thanks. "Does that not fit in with your plans?" -- Mr Wiggen, of Ironside and Malone (Monty Python) PGP public key available upon request (send yours) -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMVzfnBvikii9febJAQFeGwQAr3/U2WUSZ05z5oiE07f4NrUHEDxNFdSb nVHDn9dnY7+e2mKy1rJJPZb8b+gaQEzig3WPbM4SO+loIJkoRmXq1xqKz46sBNON nunJAQfgUuGBq36i3YBjy2bH+LSrgu5jvDd/Nqc+9Rfqu9kFV4kxxnpCuSi2nwUf bbB6vJr9WRg= =6ejG -----END PGP SIGNATURE-----