Date: Tue, 21 Nov 1995 02:10:02 +0100 From: Tatu Ylonen <ylo@cs.hut.fi> To: ahupp@primenet.com Cc: cypherpunks@toad.com Subject: Re: NSA, ITAR, NCSA and plug-in hooks.

...

PKZIP allows encryption (other's ?). How about a hook to that?

PKZIP "encryption" is self-deception. A program for cracking it, PKCRACK, is widely available on the internet. See e.g. ftp.funet.fi:/pub/crypt/analysis.

[For information about internationally available cryptographic software, see http://www.cs.hut.fi/crypto.]

Tatu Ylonen <ylo@cs.hut.fi>

PKCRACK uses a dictionary attack. Anyway, my point was that you could use PKZIP's encryption as an excuse for passing a password.