Phil Zimmermann did not use DES or the RSA-owned RC-2 as models for the Bass-O-Matic cipher.
For the basis of that symmetric cipher, he used the work of a man named Charlie Merritt. Zimmermann's strong suit was not mathematics but programming in C, so he needed help. Merritt had called Zimmermann by phone (at Metamorphic Systems, a 1980 startup by Zimmermann), and after that fortunate call, they talked more than once a week for several years.
Merritt, a computer programmer from Arkansas,
specialized in writing public-key cryptography implementations. Merritt wrote the
first commercially successful implementation of RSA for a personal
computer and taught Phil Zimmermann how to do arithmetic with
hundred-digit numbers on a personal computer. [1]
Merritt was an expert in assembly language. He had developed an implementation of RSA that was running on Z-80 computers with the CP/M operating system. It took, by the way, ten minutes to generate a 256-bit key. In 1980, Merritt's success in doing this inspired Zimmermann. They talked about Zimmermann putting crypto on his 8088 card for the Apple II, and everything else having to do with cryptography.
Merritt and Zimmermann, "PRZ," got along over the phone. Merritt said,
He began talking about protocols, in great detail. For hours, on the
phone. I hate protocols, that's for the Phone Company. But he needed a
brick wall. Then he began asking exactly how math was implemented on a
Z80. I mean detailed stuff about memory allocation, and adding two
giant numbers and what about the carry bit. We were back in my
territory. [2]
They finally met face-to-face in the summer of 1986.
Zimmermann labored in the wilderness for years. In November 1986, Merritt was working on a conventional cipher for the U.S. Navy, and this cipher was the basis for the Bass-O-Matic. Zimmermann then made it stronger by adding several rounds of substitution.
Time for the character in black to enter the stage: the NSA periodically threatened Merritt at this time. "They always travel in pairs," Merritt said. Unworried, Merritt started selling his encryption system, the DEDICATE/32, which used 256-bit keys.
Merritt's DEDICATE/32 was slow, and this convinced Zimmermann to create a hybrid system: slow RSA to exchange keys and something quicker for the bulk encryption.
The plot thickens: in 1991, a U.S. Senator sneaked this into a draft bill (S.266):
It is the sense of Congress that providers of electronic
communications services and manufacturers of electronic communications
service equipment shall ensure that communications systems permit the
government to obtain the plaintext contents of voice, data, and other
communications when appropriately authorized by law. [3]
Thank you, Senator Joe Biden.
Interestingly, Biden's clause in the draft bill got removed because of the outrage it caused. The furor pushed Zimmermann to release PGP 1.0. PRZ was angry.
Zimmermann let PGP 1.0 loose upon the word, but he said, "the Bass-O-Matic has not yet (in 89) been through a formal security review and has had only limited peer review."
Zimmermann needed to get an expert opinion on the Bass-O-Matic, so he attended Crypto '91 in Santa Barbara, California, in August. He and Eli Biham sat down in the UCSB cafeteria, and Biham told him that the Bass-O-Matic was vulnerable to differential cryptanalysis attack (Biham's specialty). Additionally, the most embarrassing error "prevented the last bit of each byte from being properly encrypted." So, the Bass-O-Matic was unceremoniously thrown into the trash.
Biham had destroyed the Bass-O-Matic in ten minutes over lunch.
Zimmermann then took up IDEA, added key certification, and PGP 2.0 was born.
[1] Garfinkel, Simson (December 1, 1994). PGP: Pretty Good Privacy. O'Reilly Media. p. 372, ISBN 978-1-56592-098-9.
[2] Ibid., 90.
[3] Ibid., 97.
