Re: PLEASE HELP - How do I include OpenSSL in my code? <OT: Cryptographic laws>

On 2006-05-18, Andrew Poelstra <apoelstra@xxxxxxxxxxxxxxxxxxxxx> wrote:
On 2006-05-17, Malcolm <regniztar@xxxxxxxxxxxxxx> wrote:
"Richard Heathfield" <invalid@xxxxxxxxxxxxxxx> wrote in message
True; of course, most people who hear that believe that ciphertext[i] =
plaintext[i] ^ 5 is a "reasonably secure cryptosystem".

And so it is, provided nobody actually tries to crack it (which, again, is
true of most cryptosystems!).

When people do try to roll their own, it is sometimes embarrassing to see
just how quickly they can be broken. A guy I used to work with came up
with
what he thought was an uncrackably complex scheme. He had spent several
days designing it. He gave me no algorithm, just some ciphertext, and it
took me about ten minutes. <sigh>

But if you are scanning every email sent in the country, for the string "Mr
Vladimir orders three quarts of cheese", then those ten minutes are
prohibitive.
Don't cut attribution lines; it took me five minutes to figure out that I
had made the post Richard replied to.

Once you crack a message, you can figure out the algorithm, and from there it
no longer takes 10 minutes per message.

Assuming the secret is also the same for all the other messages - an
algorithm on its own buys you very little.
.

Relevant Pages