Re: U.S. Export Control Compliance

For feature requests and bug reports RC15 RC16. Please use the forum at http://forum.ultravnc.net/

Hi Bob,

I'm afraid that you are mistaken.

The modifications to the DES implementation are to address some endianness
issues, not in any misguided effort to break compatibility with other
implementations.

DES is used both in the classic challenge-response VNC Password
Authentication scheme, and to obfuscate the password when it is stored, so
your comment regarding "crack tools" doesn't make sense.

Regards,

Wez @ RealVNC Ltd.


> -----Original Message-----
> From: [email protected] 
> [mailto:[email protected]] On 
> Behalf Of Bob Friesenhahn
> Sent: 06 July 2006 23:07
> To: Rudi De Vos
> Cc: [email protected]
> Subject: Re: [Ultravnc-list] U.S. Export Control Compliance
> 
> For feature requests and bug reports RC15 RC16. Please use 
> the forum at http://forum.ultravnc.net/
> 
> > UltraVnc is encryption free, encryption is done with plugins.
> > Use the plugins based on the MS crypto engine, thoose plugins do 
> > encryption, but don't contain
> > encryption code and i'm sure MS have a ECCN number.
> 
> This statement is not true.  Ultravnc *does* enclude encryption code 
> which is not done with a plugin.  The source for this encryption code 
> is in the rfb/d3des.c file, and is required in order to support VNC 
> authentication.
> 
> The code does not quite implment DES.  The VNC inventors were really 
> "smart" and made a minor source tweak so that the results are 
> different than true DES.  The VNC protocol specification fails to 
> mention this tweak.  Regardless, it did not take long for VNC crack 
> tools to emerge since the source code was readily available (i.e. it 
> was a bad idea).
> 
> Bob
> 
> Using Tomcat but need to do more? Need to support web 
> services, security?
> Get stuff done quickly with pre-integrated technology to make 
> your job easier
> Download IBM WebSphere Application Server v.1.0.1 based on 
> Apache Geronimo
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&
dat=121642
> 


Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642