Re: ARC4 algorithm

> Fact: The ARC4 algorithm is multiply and badly broken.

That's a crock of shit. No really. discard the first 256 bytes of output from ARC4, and tell me again what broken?

> So why is it still being used in OpenBSD and FreeBSD ?
>
> Here are two URLs which have free source code for CSPRNGs which are

Really? And how many years of cryptanalysis have they been through? Come to think of it, (since you're the author of the second package you note) what's your cryptography background? Do you have any papers to justify your claims that the algorithm is secure? Do you have any mathematical backing for the ridiculous claims you make on your web site? ("Perfect permutation algorithm"? Security through complexity? No weak keys?)

Stop wasting our time.

-kj Received on Wed Mar 12 02:15:02 2003