IPG cracked with known plaintext

Ted Garrett teddygee at visi.net
Thu Mar 21 09:15:35 PST 1996


-----BEGIN PGP SIGNED MESSAGE-----

At 05:32 PM 3/19/96 GMT, you wrote:
>First let us describe the IPG system in more conventional C:

[snip]

>So this algorithm is easily broken with known plaintext.

I seem to remember some sales named daemon stating that if anyone could break their system, the prize would be the company.  I imagine that the continuing rants from IPG are a means of devaluing the company beyond it's already measly worth, thus making the company unworth claiming.  It's obvious that the system has been trivially broken after a day and a half of being semi-published.

Is there any other point to this?

I could as easily generate an OTP pulling pages at random from the New England Journal Of Medicine or the Microsoft Visual C++ Programmer's Guide and XORing the text with my plaintext...

But that still leaves me in the cipher.obscurity = cipher.security realm, doesn't it?  Think we could sell it???  Of course, as long as it was someone else choosing the pages, I could trust it, right?  (Damn, which smiley is it for sarcasm?)



-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQEVAwUBMVCqic1+l8EKBK5FAQHLsgf/SnREwZgJa+mDGgeBi5GsMMyBxheWz0n2
Gl6CfPJ8KlSo80a4o+uQEXXVOw4di0T2zC4swXA8OJ0IvtOaIV0fYSYU0fpjZ4JG
yxAfcg/NDkbP6G8WBUC/29JG4p29EyKsZHDVu68SNlyJp6BqWCzBa5WSRrtPd0b7
NLwAnMozdYpV67Q7/uldddm5esIESxHJduCumqlvmOWcP/n3T4IL/B4O9RhC6wXJ
2wa3QO7OMqugl/vJ7WwDLhCDqaHwVDF+wC4r8T25E0LrFuEEFO39otOIebVZF1y6
o16M+UoDZzxASmSTUcyNsT1GohF4ZgSS5FODYGgMYAc/CDzE6jQq1Q==
=TVwd
-----END PGP SIGNATURE-----

---------------------------------------------------------------------------------------------------------
Ted Garrett <teddygee at visi.net>  http://www.visi.net/~teddygee
"Those who desire to give up Freedom in order to gain
  Security will not have, nor do they deserve, either one."
					Thomas Jefferson






More information about the Testlist mailing list