Re: Error in RFC 3217

henrick@xxxxxxxxxxxx wrote:
> There is an error in the test vectors for RC2 Key Wrap given in RFC
> 3217. The specification states that RC2 should be used with a 128 bit
> key and 128 effective key bits. The test vectors are however generated
> using RC2 with a 128 bit key but only 40 effective key bits (which BTW
> was the default for MS CryptoAPI prior to Windows XP).
>
> I don't know if R. Housley is reading these groups, but clearly this
> is an error that should be corrected.

I've never known an RFC to be corrected. At best, they get replaced.

> The algorithms specified in RFC 3217 are primarily used for S/MIME. If
> you have ever used S/MIME for encrypting email using a certificate
> with a DH public key and the RC2-CBC encryption algorithm, chances are
> you only got 40 bits of security even if you opted for 128 bit
> encryption.

I used to send S/MIME from MS Outlook, and the Netscape e-mail client receiving it always said it had only 40-bit encryption.

--Mike Amling
.

Relevant Pages

  • Re: private key encryption - doubts
    ... >> Suppose I finally got the symmetric key decided by the originator. ... >> its just a key that will be used for encryption. ... > SSL2 from the netscape web site ... > slicking on the rfc number brings up the RFC summary. ...
    (comp.security.ssh)
  • Error in RFC 3217
    ... There is an error in the test vectors for RC2 Key Wrap given in RFC ... The specification states that RC2 should be used with a 128 bit ...
    (sci.crypt)
  • Re: [Full-disclosure] Security issue in Filezilla 3.0.9.2:passwordsare stored in plain text (sit
    ... Have you even *read* the RFC in question? ... The design goal of most compression algorithms is that *anybody* ... the compressed data and get back the original. ... encryption is that *only the intended recipient* can decrypt and ...
    (Full-Disclosure)
  • Re: Using SSPI to encrypt UDP messages
    ... that you are offering a 10-year-old encryption ... which uses outdated DES and MD5 as written in the RFC? ... RFC is simply the framework on which Windows AuthN is built. ... Kerberos encryption mechanisms introduced in Windows 2000. ...
    (microsoft.public.platformsdk.security)
  • Re: Help wanted with md2 hash algorithm
    ... >> in pure Pyhton. ... I thought I had build a proper implementation in Python. ... mention can be avoided by studying the C implementation in RFC 1319. ... Some of the test vectors failed. ...
    (comp.lang.python)