PGP的安全



■内容提要■

◎ 前言

◎ IDEA 的安全性问题

◎ RSA 的安全性问题

● 选择密文攻击

● 过小的加密指数 e

● RSA的计时攻击法

● 其他对RSA的攻击法

◎ MD5 的安全性问题

● 对MD5的普通直接攻击

● 对MD5的生日攻击

● 其他对MD5的攻击

● 口令长度和信息论

◎ 随机数的安全性问题

● ANSI X9.17 PRNG

● 用户击键引入随机性

● X9.17 用MD5进行预洗

● randseed.bin 的后洗操作

-PGP security Summary ■ ■ ◎ ◎ IDEA foreword security issue ◎ RSA security issue chosen ciphertext attack ● ● too small e ● RSA encryption index of the timing attack ● Other attacks on the RSA method ◎ MD5 security ● MD5 issues common to a direct attack on the MD5 ● ● birthday attack other attacks on the MD5 password length and information theory ● ◎ random number of security issues ● ANSI X9.17 PRNG ● user keystrokes to introduce randomness ● X9.17 MD5 pre-washed with ● randseed.bin post-wash operation