| |
| | Re: "PGP Encryption Proves Powerful" |
 | | PGP doesn't have back doors, but it has two major weaknesses, which are weak user-chosen passphrases, combined with a secret key file format that makes it easy to verify whether a key has been guessed correctly, and human-rememberable passphrases, combined with rubber-hose cryptanalysis and a captured agent. |
 | | "If the device is running PGP it will not be possible > to break it with cryptanalysis alone." |
 | | If you're doing good operational security, and the Red Brigades probably are, your passphrases have good enough entropy that they're hard to crack, but if they got sloppy, and someone wants to feed all the information that's known about them to pgpcrack, it's possible that they'll find something. |
| www.mail-archive.com /cryptography@metzdowd.com/msg00082.html (319 words) |
|