lkml.org 
[lkml]   [1999]   [Aug]   [31]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    From
    SubjectRe: idea: MAC level compression & crypto
    Date
    >On Sun, Aug 29, 1999 at 03:04:02PM +0000, Marc Mutz wrote:
    >> Hooks for _strong_ encryption are, weak crypto (as rot13 _very_ clearly
    >> is) is exportable (see your netscape browser). The other question is
    >> whether the prohibition of crypto in e.g. France and Russia
    >> covers/covered rot13. I think not. Rot13 is nothing that can be
    >> considered _encryption_ anymore...?
    >
    >Netscape has to get a license to export their browsers because they
    >contain crypto code.

    I find it difficult to agree that Netscape is an example for anything
    interesting to this discussion.

    There is no ROT13.DLL, no ROT13 API, and you cannot trivially replace
    the ROT13 algorithm in Netscape with a significantly better one.
    There's nothing hook-like about the way Netscape does ROT13. It's very
    firmly hard-coded, and due to the tiny size of the algorithm, probably
    very difficult to actually _find_ in the code unless there's actually
    something like "rot13_decrypt()" in the symbol table.

    ROT13 (in Netscape) has no key management API, or parameters of any kind.
    It's difficult to see how it could be used for practical cryptography
    given a key length of zero bits. You can get export licenses for
    cryptosystems that only support one key that is already known to
    the general public fairly easily; easily enough that I suspect even
    U.S. bureaucrats will simply waive the usual paperwork, as long as you
    don't advertise your product as a cryptosystem. If this were not true,
    error-correcting codes and data compression would be cryptography too, as
    would an ASCII-to-EBCDIC translator.


    --
    I don't speak for Corel, I just work for them. Use zygob@corel.ca for work,
    zblaxell@furryterror.org for play, and zblaxell@feedme.hungrycats.org for PGP.
    PGP fingerprint: 01 94 0F B3 46 B7 71 C3 D4 98 39 99 1B 34 45 A1
    PGP public key: http://www.hungrycats.org/~zblaxell/pgp-public.txt

    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.rutgers.edu
    Please read the FAQ at http://www.tux.org/lkml/

    \
     
     \ /
      Last update: 2005-03-22 13:53    [W:0.027 / U:2.032 seconds]
    ©2003-2016 Jasper Spaans. hosted at Digital OceanAdvertise on this site