Re: U.S. Export Control Compliance

For feature requests and bug reports RC15 RC16. Please use the forum at http://forum.ultravnc.net/

On Fri, 7 Jul 2006, James Weatherall wrote:
>
> DES is used both in the classic challenge-response VNC Password
> Authentication scheme, and to obfuscate the password when it is stored, so
> your comment regarding "crack tools" doesn't make sense.

My comment about "crack tools" pertains to tools which attempt to 
batter their way in by trying permutations from a dictionary.  Such 
attacks won't work with the RealVNC server since it rejects more than 
a few attempts from the same address.

It may be that I was wrong about the VNC modification to 3DES.  I was 
believing the comment associated with the change in the code, but 
maybe the comment is wrong.

Bob

Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642