Re: encryption


Subject: Re: encryption
From: Aaron Lehmann (aaronl@vitelus.com)
Date: Wed Apr 25 2001 - 18:38:45 CDT


On Wed, Apr 25, 2001 at 07:54:17PM +0100, Tomas Frydrych wrote:
> Not really, for AW is not guessing. AW needs to try each cipher it
> might support with the one key it is given, the brute force attack
> means trying each cipher with every possible key. In fact, not
> knowing what cipher you are dealing with does make any type of
> attack more difficult, but I am not saying so much that we should
> exclude plain text headers to increase security, but rather that
> there is no technical need for such headers.

An unnecessary requirement for brute force is ALWAYS a technical reason.



This archive was generated by hypermail 2b25 : Wed Apr 25 2001 - 18:38:56 CDT