Well if you remember, Jon Johanson was aided in hacking CSS by the fact that US crypto export laws in the 90s prevented exporting encryption higher than 40 bit. CSS was developed with the international market in mind and thus could be brute forced in a much more reasonable amount of time than if it had used 128 bit encryption. I think that's was a flaw in the implementation too.
Reader Comments (Page 1 of 1)
Brendor @ Feb 13th 2007 1:43PM
Well if you remember, Jon Johanson was aided in hacking CSS by the fact that US crypto export laws in the 90s prevented exporting encryption higher than 40 bit. CSS was developed with the international market in mind and thus could be brute forced in a much more reasonable amount of time than if it had used 128 bit encryption. I think that's was a flaw in the implementation too.