Is it really fair to call these such algorithms "security through obscurity"?

By that logic, wouldn't real symmetric crypto also be considered the same, since it's still just math that similarly swaps the data with other bytes, based on an "obscured" password or key?

▲

_def 9 hours ago | parent | next [-]

The obscured part was pretending the unlocker needs external information

▲

chungy 9 hours ago | parent [-]

I guess they could have done a public/private key pair in 1996, but doing that over a phone call was going to be painful. A simple password read over the phone and verified by the software was the best solution at the time.

Mind, this was also intended for a world where internet connectivity was not to be expected. The majority of PC owners were not online.

▲

ekelsen 9 hours ago | parent | next [-]

How would your scheme work? You use RSA to encrypt the entire thing? Or you use it to get a key for a block cipher and then use that?

I feel like either way, you'd need the key to be different for every CD, otherwise you could just share the shared key. But if the encryption of every CD is different, why not just share the block cipher key directly? They can have a list of CDs and the associated key(s).

What additional security or functionality does an RSA like step add here?

▲

smackeyacky 9 hours ago | parent | prev [-]

Which is true, so the distribution of the software cracker would have been fairly limited I would have thought.

▲

chungy 8 hours ago | parent | next [-]

Sneakernet was common also. Say you have a class of 30 kids, and one of them has access to Usenet to grab qcrack.zip. He'll put it on a floppy disk and share ;)

▲

soneil 6 hours ago | parent | next [-]

yeah, software travelled exactly the same way as rumours that such and such had a rib removed - remarkably effectively.

Also the same way we got viruses, long before anyone I knew had the Internet.

	▲	edg5000 6 hours ago \| parent [-]
		Haha, I remember that rumour being told to me by classmates back in the day. Great example.

▲

mikestorrent 8 hours ago | parent | prev [-]

Hells yeah qcrack.zip

▲

edoceo 7 hours ago | parent | prev | next [-]

BBS, zmodem

▲

mikestorrent 8 hours ago | parent | prev [-]

I was 12 years old and had qcrack on a floppy from a buddy. Everyone had it. Didn't even have to have internet.

▲

leni536 2 hours ago | parent | prev | next [-]

I think it is fair, as all the released CDs are identical. So all the symmetric keys used to encrypt the data are also necessarily identical.

▲

1970-01-01 9 hours ago | parent | prev [-]

I think you right, however they left all the right clues to decrypt it in days. You really don't want to do that.