For those with the source, (mine says july 9, 1997 and isbn 09649654-8-8 so it may be a variant - it also says second edition) check out page 1342 around the words "Key Recovery" near the top of the page in the pgpMakeSig routine. I know, it is only for future corporate key recovery ;). Also, having 16 bytes for salt and iv fields which are supposed to be "random" can hide a large amount of other data. On Wed, 16 Jul 1997, Ian Goldberg wrote:
I received a copy of the latest source (12 volumes) from a PGP, Inc. rep at the July Bay Area Cypherpunks Open Meeting on US Soil (12 July on Stanford campus).
You can order your own copies through Printers, Inc.:
Printers, Inc. 301 Castro St. Mountain View, CA. 94041 (415) 961-8500 <http://www.pibooks.com>
PGP 5.0 Platform Independent Source Code Five Volumes, $94.00 ISBN 099649654-5-3
PGP 5.0 Win95 Source Code Three Volumes, $57.00 ISBN 099649654-6-1
PGP 5.0 Mac Source Code Four Volumes, $82.00 ISBN 099649654-7-X
- Ian