!! Point 'n Crypt -- Win95 Privacy for Everyone !!

[Walt Armour]

Security through obscurity is no security at all.

As for PnC (actually, the scCryptoEngine beneath it), we get the 40 bits 
from the 56 bits by nulling out the high nybble of every other byte.

walt

----------
From: 	Peter Trei[SMTP:trei at process.com]
Sent: 	Monday, December 16, 1996 2:02 AM
To: 	walt at blarg.net; cypherpunks at toad.com
Subject: 	RE: !! Point 'n Crypt -- Win95 Privacy for Everyone !!

> From:          Walt Armour <walt at blarg.net>
> To:            "'Matthew Ghio'" <ghio at myriad.alias.net>
> Cc:            "cypherpunks at toad.com" <cypherpunks at toad.com>
> Subject:       RE: !! Point 'n Crypt -- Win95 Privacy for Everyone !!
> Date:          Fri, 13 Dec 1996 22:30:23 -0800

> There is no arguing that 40 bits is strong security.  I agree with that.
[...]

Would you mind telling us just how you expand the 40 key to the 56
bits needed for DES? (Security through obscurity has a bad rep on
this list). For many  methods of doing so, 40bit DES is NOT
secure against a motivated individual's attack.

Peter Trei
trei at process.com