Re: Encryption algorithm used for the IBMi OS passwords.

On 04/07/2016 01:47 PM, Nathan Andelin wrote:

An encryption algorithm is good if and only if an "enemy" can not
recover any information about the original message from the encrypted
one, unless he has the key.

Raul, it sounds like you've swallowed the "marketing" - hook, line, and
sinker. I'm in favor of key-based algorithms, but keys can be compromised
in a number of ways.

Not marketing, my opinion, expressed here, is based on University
classes and articles read.

Knowing everything about the algorithm must not be of any help to
recover the original message or the key.

On the contrary, knowing how an algorithm is modified by a key provides
clues about keys.

Only if the algorithm is bad.

A secret "algorithm" is not completely secret, unless you kill the
author. :-)

Keys are not completely secret either. The question is whether you want
multiple layers of defense, or not. A secret algorithm is an additional
layer of defense.

A secret algorithm will be written by somebody that is probably not a
specialist, and beginners make a lot of mistakes that are well known by
professionals and hackers.
A good secret algorithm will cost a lot of money, a bad one can be
cracked easily.



-- Este e-mail fue enviado desde el Mail Server del diario ABC Color --
-- Verificado por Anti-Virus Corporativo Symantec --