Tag Info

New answers tagged

1

According to CryptDeriveKey() documentation, upper WORD of dwFlags parameter specifies desired key size in bits. In your case it should generate 40-bit (0x28) keys, effectively discarding all but first five bytes of the MD5 output. To achieve similar behavior with CommonCrypto you can try this: CCCryptorCreate(kCCDecrypt, kCCAlgorithmRC4, 0, ...


6

As Matthew Green puts it, the attack "is just on the edge of feasibility". It conceptually applies to any protocol that uses RC4, although some are more vulnerable than others. The weakness of RC4 is a bias in the first bytes of output. From the key, RC4 generates a long stream of pseudorandom bytes, and encryption is just a byte-per-byte XOR of the data to ...



Top 50 recent answers are included