Path: utzoo!utgpu!jarvis.csri.toronto.edu!clyde.concordia.ca!uunet!lll-winken!uwm.edu!cs.utexas.edu!rutgers!netnews.upenn.edu!vax1.cc.lehigh.edu!sei.cmu.edu!krvw From: XRAYSROK@SBCCVM.BITNET (Steven C Woronick) Newsgroups: comp.virus Subject: DES Availability Message-ID: <0007.8912201621.AA09547@ge.sei.cmu.edu> Date: 20 Dec 89 02:14:24 GMT Sender: Virus Discussion List Lines: 34 Approved: krvw@sei.cmu.edu IA96000 (name unknown, employee of "SWE"?) writes: >SWE first suspected and tested for the public key encryption method >for several reasons. The major reason was the lack of access people >outside of the United States would have to the DES encryption formula. > >For those not aware, the U.S. Government guards the DES formula, and >software which makes use of this formula may not be exported out of >the United States. Should it turn out that the DES formula was also >used, the authors of the AIDS "trojan", could possibly be prosecuted >under United States statutes pertaining to national security. Please correct me if I'm wrong, but isn't DES or DES-like encryption algorithms readily available? For example, the book "Numerical Recipes, The Art of Scientific Computing," by W.H. Press, B.P. Flannery, S.A. Teukolsky, and W.T. Vetterling, published by Cambridge University Press, (c)1986, p. 214-220 gives an algorithm for DES (two and one half pages of highly-inefficient FORTRAN-like code). Admittedly, the authors state that their program is not genuinely DES (since the standard itself explicitly states that any implementation in software is not secure and therefore not DES), but it does in software the same thing real DES hardware would do, so it is for all practical purposes DES. (Also, how does the claim that software versions of DES are technically not DES affect legal issues raised by IA96000@PACE about exporting DES?). Also, in my opinion, there is nothing special about DES except that it is a kind of "standard" algorithm (i.e. I think one can easily imagine other equally-difficult- to-decrypt algorithms). Steven C. Woronick | Disclaimer: These are my own opinions. Physics Dept. | Always check it out for yourself... SUNY at Stony Brook | Stony Brook, NY 11794 | Acknowledge-To: