gcry_cipher_setkey(h,k,l)

[Rüdiger Sonderfeld]

Am Montag, 22. April 2002 21:17 schrieb Timo Schulz:
> On Mon Apr 22 2002; 19:52, Rüdiger Sonderfeld wrote:
> > > digest) is derrived from the passphrase. So you don't need to remember
> > > the randomly chosen key.
> >
> > Okay I think I understand it now. But isn't there the danger of
> > cracking the encrypted passphrase?
>
> There is no encrypted passphrase. But it's possible that somebody
> crack the passphrase with a dictionary attack. Then he could decrypt
> the encrypted session key...

I meant the encrypted session key because it is crypted with a too short key 
(the MD5 sum)