On Thu, 26 Mar 1998, Andy Kunz wrote:

> >(*) There's no proof that the cyrptographic algorithms used in PGP are
> >secure.  However, there is no publicly known method for attacking it that
> >is significantly better than a brute force attack.  It is possible (but
> >unlikely) that better methods exist but are being kept secret.
>
> As in all security areas, the ILLUSION of security is what sells it.
> Lehigh University cracked RSA several years ago during summer break.  I

  I can't find anybody at Lehigh that knows about this,
  who is your contact for this information?

> believe it was a brute-force attack, because they used all the X boxes on
> campus to do it.
>
> The fact that the gov't is pushing so hard for a known back door for police
> leads me to believe that there is a generic solution that exists but they
> wish for hostiles to feel it's 100% and therefore have all our enemies
> using our key.  Pretty slick.
>
> Andy
>
>
> ==================================================================
>                      Andy Kunz - Montana Design
>           Go fast, turn right, and keep the wet side down!
> ==================================================================
>