6 ms·

I thought the 40-bit keys were used due to cryptographic export restrictions, and not lack of randomness? http://en.wikipedia.org/wiki/40-bit_encryption http:/

I thought the 40-bit keys were used due to cryptographic export restrictions, and not lack of randomness? http://en.wikipedia.org/wiki/40-bit_encryption http://en.wikipedia.org/wiki/40-bit_encryption Seems to agree with me.

deleted 15y ago
[deleted]
oasisbob 15y ago
The authors didn't cite Netscape because the 40-bit key is too short, they cited it because the the PNRG in the SSL implementation was faulty. They link to this page with more details: http://www.cs.berkeley.edu/~daw/papers/ddj-netscape.html http://www.cs.berkeley.edu/~daw/papers/ddj-netscape.html