full-disclosure - RC4 and Lotus Notes

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

From: cz at hykw.jp (HAYAKAWA Hitoshi)
Subject: RC4 and Lotus Notes

At Mon, 21 Apr 2003 08:42:21 -0600 (MDT),
aliver@...il.com wrote:

> 	While developing something boring using the Lotus C API for Linux.
> I noticed while using valgrind that functions like NSFNoteDecrypt()  and
> NSFNoteIsSignedOrSealed() are still making use of RC4 encryption with a
> 256 bit key even when I use "strong" encryption settings in it's lame
> windows MegaGUI. IIRC, RC4 is known to have some weaknesses in it's key
> scheduling that have yielded some interesting results (WEP, Winnt, etc..).

Which version are you using international version or USA version?
The latter uses more bits for keys.

-- 
HAYAKAWA, Hitoshi
cz@...w.jp