On Saturday 25 June 2005 15:33, Itay Duvdevani wrote:
> Encryption method is known, and so is the encryption key (whether in
> the source code or anywhere on my hard drive).

No. If you ever used any of these applications, you must have noted
that they interactively ask you a "master" password for your keyring.
So this password is not stored on disk.

> My questions are these:
> 1. Is it so? Is stealing passwords from these application is as
> possible as I see it?

No. All known good encription algorithms are open in the broad
sense of the word (the algorithm is documented and there are
multiple open source implementations). They are strong because
of their mathematical properties. When these are challenged,
you have a very good chance to hear about it on time (c.f: the
latest MD5 and SHA1 problems).

Bye,

-- 
Oron Peled                             Voice/Fax: +972-4-8228492
[EMAIL PROTECTED]                  http://www.actcom.co.il/~oron
ICQ UIN: 16527398

Can you sum up plan 9 in layman's terms?
It does everything Unix does only less reliably - kt

=================================================================
To unsubscribe, send mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Reply via email to