PGP Bug continued

[anonymous at extropia.wimsey.com]

-----BEGIN PGP SIGNED MESSAGE-----

>I wish there were some easy way for me to email you back, but
>since there is not, I have to do it this way.  

I posted this on alt.security.pgp, you can followup there and avoid 
annoying anyone. Sorry about that. Or just reply in clear if you think
anyone else would be interested.

>Anyways, I took the bug.c you sent me, and I built it against
>the mpilib and mpiio from my PGP 2.3a sources, including all the
>headers from those sources.  I did not attempt to build it against
>PGP Tools (its possible that you're changes to mpi for PGP Tools have
>caused this bug).

I didn't change mpilib one bit. The date is still 5-17-93. The .h file
date is 5-9-93, so it isn't changed either.

>Anyways, I tried this on two different platforms with two different
>byte orders.  In particular, I used a mips-ultrix and sun386i.  The
>results, below, are the same, and show that there is no problem
>with PGP 2.3a, or, at least, I cannot reproduce your bug.  Sorry.

I tried it again: if you use Upton's modmult, the problem goes away. If you
use Smith's modmult, the problem exists on both dos and unix/gcc. Try 
defining SMITH and rebuilding.

                                                Pr0duct Cypher


-----BEGIN PGP SIGNATURE-----
Version: 2.3a

iQCUAgUBLVndssGoFIWXVYodAQEwzQP4mvhPS9vXNvMOReWespw7TYrr/ifR4XZ0
snUKn+DPeMid/d63vCy/RFxs3ccPXSV4hzANmtLeLpTSnYLgNA4QX7R1bjq+I4wy
9gGvr5BlfkDQLUT5iPkp9mnBzuwIQzBxbcz6RKoEfQUbRRWr5AE+eI8+yA5ozjcZ
wJsE9IvCtw==
=ouxg
-----END PGP SIGNATURE-----