Gah. I should know better than to post before my sources give their official position. It will be a known plaintext attack. :-) I hope I'm not made regret jumping the gun again. Please DON'T bug RSA about this. Peter Trei ptrei at acm.org trei at process.com