in reply to Re: Low-Impact Symetric Cypher for Perl Programs?
in thread Low-Impact Symetric Cypher for Perl Programs?

This just came in on a mailing list, and I thought it was pertinent, though I'm in no position to have an opinion one way or the other.

>From: "Young, Mike" <myoung@rsasecurity.com>     
>To: "'farber@cis.upenn.edu'" <farber@cis.upenn.edu>
>Subject: RE: Wired: Wireless Networks in Big Trouble
>Date: Wed, 22 Aug 2001 10:14:22 -0400
>   
>Dave,
>   
>Some people have been spreading the rumour that since WEP is not secure, RC4
>( the underlying symmetric encryption algorithm, is not secure either). WEP
>is a poorly implemented solution using RSA patented and trade secret
>algorithms, key material is sent lightly encryption and re-used, which is
>not secure. RC4 is still the most used algorithm today, along with the RSA
>asymmetric algorithm, makes up SSL technology. RC4 has been used over a
>billion times, more than any other piece of software, even Microsoft. Its 
>security is proven day after day.
>   
>Ron Rivest (the R in RSA, the R in RC4, The R in RC6) has written a
>preliminary response to WEP insecurity. Once the lawyers approve it, it will   
>be posted on www.rsasecurity.com/rsalabs
>   
>BTW, my email is now myoung@rsasecurity.com  Xcert was bought by RSA several   
>months ago.
>   
>MJY
>   
>   
>Michael J. Young
>Sr. Systems Engineer
>OEM and Developer Solutions
>Worldwide Plaza, Mezzanine West
>825 Eighth Avenue (at 50th St.)
>New York, NY 10019 USA

-Blake

  • Comment on Re: Re: Low-Impact Symetric Cypher for Perl Programs?