John Halleck wrote: > On Thu, 26 Mar 1998, Andy Kunz wrote: > > > >(*) There's no proof that the cyrptographic algorithms used in PGP are > > >secure. However, there is no publicly known method for attacking it > > >that is significantly better than a brute force attack. It is possible > > >(but unlikely) that better methods exist but are being kept secret. > > > > As in all security areas, the ILLUSION of security is what sells it. > > Lehigh University cracked RSA several years ago during summer break. I > > I can't find anybody at Lehigh that knows about this, > who is your contact for this information? > Could he be confusing this with the recent brute force crack of 48 bit DES? Oh, and as to the question about a psuedo primes, there are several quick tests that can verify wether a large number is prime (since attempting to factor a large number can be extrememly time consuming.) Unfortunately they aren't perfect, so it is possible for a non-prime to slip through the verification procedure. My understanding is this is extremely rare. Roger