Path: utzoo!utgpu!news-server.csri.toronto.edu!rpi!zaphod.mps.ohio-state.edu!wuarchive!csus.edu!ucdavis!csusac!croft
From: croft@csusac.csus.edu (Steve Croft)
Newsgroups: comp.unix.wizards
Subject: Re: WARNING!
Message-ID: <1991Apr20.150213.23439@csusac.csus.edu>
Date: 20 Apr 91 15:02:13 GMT
References: <26512@adm.brl.mil> <1991Apr14.093305.12559@thunder.mcrcim.mcgill.edu>
Organization: cso
Lines: 13


Leong and Tham presented a paper at winter Usenix where they claimed a
hardware based encyrpter could determine a lower case password in 15
days.  On the basis of this, they claimed that UNIX password encryption
is insecure.

They claim the board would cost about $2000 to build and consist of about
100 ECL chips.

The paper is in the proceedings; sorry if this has been mentioned earlier.

Steve Croft
stevec@water.ca.gov