HP & Export of DCE

[Dana W. Albrecht]

> Adam Shostack writes:
> > Well, if Leahy passes, DCE is exportable.  Anyone know if the
> > 'SecureRPC' in  DCE is the one BAL broke years back?
> 
> No, they broke Sun's Secure RPC, which is different.
> 
> I must admit that I've never done a serious security analysis of DCE
> RPC, though...
> 
> Perry

Where can one find detailed information regarding the (in)security of
Sun's "Secure" RPC?

Specifically, pointers to actual papers by those who have compromised
it (both in theory and practice as relevant) would be appreciated.

Thanks!

Dana W. Albrecht
dwa at corsair.com