On Thu, 13 Dec 2001, Jerome Etienne wrote: > is it correct ? do you have any reference where i could learn more > about it ? Yes, it is correct. The history of this attack is quite strange: it was known for a long time by a few crypto people (you can find a reference in Lars Knudsen's PhD thesis, written in 1994, for instance), but until quite recently, it was not known in a larger public. Now, everybody seems to know about it :-) See for instance http://lasecwww.epfl.ch/birthday.shtml for some details about its implementation. A+ Pascal -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ * Pascal Junod, pascal.junod@xxxxxxx * * Security and Cryptography Laboratory (LASEC) * * INF 240, EPFL, CH-1015 Lausanne, Switzerland ++41 (0)21 693 76 17 * * Montétan 13, CH-1004 Lausanne ++41 (0)79 617 28 57 * ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ - Linux-crypto: cryptography in and on the Linux system Archive: http://mail.nl.linux.org/linux-crypto/