note 50046 deleted from ref.mcrypt by danbrown

Note Submitter: php at stock-consulting dot com ---- amiller of connext point net is correct. The 'one-time pad' is unbreakable, if used correctly. Correct use requires that: 1. the key length equals or exceeds the data length 2. the key must not be used more than once to encrypt data 3. the key must be truly random. The last point is a bit of a problem. "Random Number Generator" algorithms are only pseudo-random. Once the attacker finds out which PRNG was used, breaking the encryption becomes easy. Hardware solutions for the generation of random data (like, sampling noise via the sound card input and taking the LSB) have also proven to be of dubious quality. Violation of point 2 makes the encryption worthless. A known-plaintext attack will reveal the key at once.