Simon Josefsson <[email protected]> writes:

> There are some keys which are even weaker, for example keys beginning
> with 00 00 FD and 03 FD FC, see this paper:
>
> http://impic.org/papers/WeakKeys-report.pdf

This still exploits statistical properties of the first few generated
bytes, right? So if you generate and discard the first 512 or 1024 bytes
or so of the keystream, the statistics for these keys shouldn't be much
different from any oter keys, right?

Regards,
/Niels

-- 
Niels Möller. PGP-encrypted email is preferred. Keyid C0B98E26.
Internet email is subject to wholesale government surveillance.
_______________________________________________
nettle-bugs mailing list
[email protected]
http://lists.lysator.liu.se/mailman/listinfo/nettle-bugs

Reply via email to