July 1993 - cypherpunks-legacy

RE: unsub (request-cypherpunks not working)
by dante＠microsoft.com 15 Jul '93

15 Jul '93

Please unsubscribe me too. I mailed cypherpunks-request twice to no avail. dante(a)microsoft.com

1 0

<sigh> Can *somebody* remove "bobs@ingres.com" from this list?
by Barry Evans 15 Jul '93

15 Jul '93

I've been trying all week to get someone to remove "bobs(a)ingres.com" from this list. Really, we are tired of seeing all the bounced emails that this mailing list is trying to send here. Who's *responsible* for this mailing list? Any why haven't they responded to my requests? ------- Forwarded Message >From Mailer-Daemon(a)ingres.com Thu Jul 15 13:57:02 1993 Date: Thu, 15 Jul 93 13:56:33 PDT From: Mailer-Daemon(a)ingres.com (Mail Delivery Subsystem) Subject: Returned mail: User unknown To: Postmaster@pony Content-Length: 891 X-Lines: 22 ----- Transcript of session follows ----- Connected to pony: >>> RCPT To:<bobs(a)ingres.com> <<< 550 <bobs(a)ingres.com>... User unknown 550 <bobs(a)ingres.com>... User unknown ----- Message header follows ----- Received: from relay2.UU.NET by ingres.com (4.1/SMI-4.1/INGRES/zool/06.06.93) id AA00149; Thu, 15 Jul 93 13:56:33 PDT Received: from toad.com by relay2.UU.NET with SMTP (5.61/UUNET-internet-primary) id AA10455; Thu, 15 Jul 93 16:47:29 -0400 Received: by toad.com id AA24885; Thu, 15 Jul 93 12:06:56 PDT Return-Path: <wet!naga> Received: from wet.UUCP by toad.com id AA24881; Thu, 15 Jul 93 12:06:54 PDT Received: by wet.uucp (/\=-/\ Smail3.1.18.1 #18.2) id <m0oGYY0-000Er3C(a)wet.uucp>; Thu, 15 Jul 93 12:00 PDT Message-Id: <m0oGYY0-000Er3C(a)wet.uucp> Date: Thu, 15 Jul 93 12:00 PDT From: wet!naga(a)uunet.UU.NET (Peter Davidson) To: cypherpunks(a)toad.com Subject: Reply to Perry ------- End of Forwarded Message

1 0

Looking for fastest Legendre/Jacobi algorithm
by Derek Upham 15 Jul '93

15 Jul '93

In 1991, Tygar and Yee published a paper describing an authentication and security system for Mach. At least two of the techniques described in the paper can be used elsewhere; one is a zero-knowledge proof of identity algorithm, and the other is a public-key algorithm for exchanging arbitrary data (i.e., private encryption keys). The security of the scheme is based on the intractability of determining quadratic residuosity. Variable $a$ is a quadratic residue on $n$---it has the Jacobi value of 1---if and only if there exists some $x$ such that $(x^2\mod n)=a$; otherwise it is not a residue and has Jacobi value -1. (If $n$ is prime, the Jacobi value is also the Legendre value). Rabin(???) has proven that working backwards from $a$ and $n$ to find $x$ is equivalent to factoring $n$, so only the person who generated $n$ will be able to check the residuosity of $a$ (if factoring $n$ is difficult, of course). In the private key exchange algorithm, for example, the Sender generates a series of quadratic residues and non-residues $a$ over $n$ and passes these values on to the Receiver. The Receiver calculates the (non-)residuosity for each and assigns it a bit value, thus building up a string of bits that determine the key. Any Tapper will be unable to calculate the residuosities from the data stream, and so will not intercept the key. I've written a bunch of programs to generate keys and run an encrypted bit exchange, but the performance is lacking. Decoding time seems to grow at $O(\el^2)$ with the length of $p,q$, which makes using any sort of secure public-key $n$ quite infeasible--- especially if people want to use these algorithms on small home boxes for dialup security. On a 386/40, receiving 56 bits encoded with a 512 bit public key takes twenty-two minutes... So: anyone know tricks to bum as much speed as possible out either the Jacobi or Legendre algorithms? For our purposes, they are equivalent. If the Tygar and Yee algorithms ever run efficiently, they could be very nice alternatives to RSA. Derek Derek Lynn Upham University of British Columbia upham(a)cs.ubc.ca Computer Science Department ============================================================================= "Ha! Your Leaping Tiger Kung Fu is no match for my Frightened Piglet Style!"

1 0

Sci-fi needs your help!
by Francis.Toy＠f28.n125.z1.FIDONET.ORG 15 Jul '93

15 Jul '93

I know that this is probably not the appropriate time or place to post, however, if you are a true lover of Science Fiction literature, please access the FIDONET SCI-FI LIT conference on your local BBS(if available). Things are more or less dead over there, and stand a chance of disappearing altogether without your support(posting messages)! F. --- * SLMR 2.1a * Press any key to continue or any other key to quit -- Francis Toy - via FidoNet node 1:125/1 UUCP: ...!uunet!kumr!shelter!28!Francis.Toy INTERNET: Francis.Toy(a)f28.n125.z1.FIDONET.ORG

2 1

query
by pmetzger＠lehman.com 15 Jul '93

15 Jul '93

This is slightly off topic: I know that several cypherpunks are using automated tools to download their mail from Unix hosts to their PCs at home. Could anyone doing this please send me some mail on what package you are using? Perry

1 0

Final flyer
by crunch＠netcom.com 15 Jul '93

15 Jul '93

Thanx to the wonderful fast action on the part of the Cypherpunks and SFRavers I now have the final copy and flyer printed up to hand out at raves, and other social events. The flyer has following information... Keep "Big Brother" out of your face If you have a computer and modem, use Electronic mail, or keep personal data on your computer, it may soon be illegal for you to protect it by using personal encryption programs, if our snoopy government has their way. Last April, the Clinton Administration proposed a new Encryption chip called the "Clipper chip" which permits authorities with a "Master key" which unlocks encrypted data. Would you trust your authorities with a key to your house? Of course not!! Ravers should take note that our group of "Freedom fighters" called "Cypherpunks" are making important tools available you can use now to protect your sensitive mail and data that cannot be unlocked using this so called "Master key" scheme. The Electronic Frontier Foundation (EFF), and Computer Professionals for Social Responsibility (CPSR), are important lobby organizations dedicated to keeping our government in check and preserving our privacy. They need your support. Please contact them at address below. Our goals are to get the word out, and get as many people as possible to use simple encryption tools like PGP (Pretty Good Privacy) so our government cannot make their use illegal. This program PGP, is available on PC-DOS, Macintosh, and UNIX computer systems free of charge. Look for PGP distribution booths at future raves, and spread the word. For more information, contact: CPSR PO Box 717 Palo Alto, Ca. 94301 (415) 322-3778 cpsr(a)cpsr.org EFF 1001 G. Street NW suite 950 E. Washington DC, 20001 (202) 347-5400 eff(a)eff.org Cypherpunks cypherpunks-request(a)toad.com --- end ---

1 0

Information-content of ciphertext
by wet!naga 15 Jul '93

15 Jul '93

>From: Mike Johnson <exabyte!smtplink!mikej(a)uunet.uu.net> >To: cypherpunks(a)toad.com >Subject: Information theory and cryptography > >Robert W. Clark asks: >> ... >> Is this affected by whether or not the key is known? If the >> key has been irretrievably lost, does this lessen the amount >> of information, or does the 'potential' informational content >> remain the same? > >If you have the proper algorithm and key, then the same information can be >derived from both. ... >the information in the plain text is conveyed by the combination of >the ciphertext, the key, and the algorithm used. Take any of these away, and >you lose information. In most cases, loss of the algorithm is not an issue, >but if you forget, lose, or damage either the key or the ciphertext, you have >reduced the useful information content, possibly to zero. Yes. Remember what information is (in the real world): it is what reduces our uncertainty about things, it is what allows us to exclude some things from the realm of what we take to be the case. An object contains information only in the context of some method to use that object to reduce uncertainty. Thus a piece of ciphertext may contain information for Joe if he knows how to convert it to plaintext. If Fred does not know this then for Fred the ciphertext contains no information, since he is just as uncertain about the world after receiving the ciphertext as he was before. Information is information only if you can access it. What was not informative may become informative, and vice-versa. It makes no sense to think of information independently of a representational agent (something which represents a state-of-affairs to itself) who is or can be informed by it. Mathematicians have a mathematical definition of information, but mathematicians live in an ideal world, so their definition of information is different from that of the rest of us.

1 0

Reply to Perry
by wet!naga 15 Jul '93

15 Jul '93

In reply to: > >Date: 14 Jul 93 19:50:26 EDT > >From: Michael Glazer <72440.2236(a)CompuServe.COM> > >Subject: PGP > > > >Folks, > > > > I'm trying to learn more about practical cryptography in general > > and PGP and similar programs in particular. Any advice? > > @article{Nathan92, > author = {Paco Xander Nathan}, > journal = {Fringeware Review}, > month = {July}, > number = {1}, > pages = {17--18}, > title = {Tutorial: PGP}, > volume = {1}, > year = {1992} BTW the year should be 1993. This issue of Fringeware Review has just been released. > > Fringeware Review is available for $3.50 from > Fringeware Inc., P. O. Box 49921, Austin, TX 78765 > (512-477-1366, fringeware(a)wixer.bga.com) > > This issue also has articles on inter-experiential snorkeling, > cruzin' the internet, email lists, tom jennings, the abolition > of work, mind control, cyborganics, melt-o-media and even cypherpunx. Perry Metzger writes: >Rather than pointing people to strange publications we've never heard >of written by authors without credentials, might I suggest... > >1) The PGP docs themselves are very good and far better as a tutorial > on cryptography than any of the "PGP tutorials" that have appeared > in the fringe literature. They are also free. > >2) Read a real text on cryptography. It isn't a childrens game. Its a > real branch of math and computer science, and really bright people > devote their lives to it. If you wanted to learn about medicine, > would you pick up a professional medical text, or something written > in a 'zine by people you hadn't heard of? Over the last few months I have noticed that Perry loses no opportunity to say something negative. It looks like you have a personality problem, Perry. Have you talked with your therapist lately? Since you saw fit to post this criticism in public, I'll reply here. 1. Many cypherpunks, being cypherpunks, are interested in "strange publications" - especially those containing reports on the emerging alternative culture - which you are apparently contemptuous of (as of much else). 2. If you've never heard of Fringeware then why display your ignorance? 3. If you've never seen the article mentioned, and know nothing of the author, on what basis do you claim that the author is without credentials? Because he publishes in a magazine with "Fringe" in the title? You're obviously prejudiced, Perry. 4. Does it require an advanced degree in mathematics to write a clear and lucid tutorial for those interested in using PGP? 5. Is reading "a real text on cryptography" necessary in order to learn to use PGP? Your remark suggests it is, which is likely to discourage people from using PGP rather than encourage them. 6. Is the exchange of encrypted messages a branch of computer science? Why suggest that one has to study math to use PGP? 7. Why don't you try to make a positive contribution to cypherpunks instead of being continuously obnoxious? I'm probably not the only one here who thinks you're an asshole.

1 0

Re: Need info ASAP
by dmandl＠lehman.com 15 Jul '93

15 Jul '93

> From: crunch(a)netcom.com (John Draper) > > I am putting final touches on the Cypherpunks flyer, and need the > following information. > > The address, phone number, and Email adddess of: > > a) CPSR > b) EFF > c) Cypherpunks [...] Don't forget to make it clear that people should email to cypherpunks-request(a)toad.com for administrative business (like joining the list). Lots of people give the address sans "-request," and then everyone's got to see dozens of "Subscribe me" messages posted to the list itself. Good luck. --Dave.

1 0

Re: Relation between number theory and cryptography
by peb＠PROCASE.COM 15 Jul '93

15 Jul '93

>Maxwell's Daemon and Data Compression. I'm still looking...sorry, my WAIS index to postscript files isn't working yet...too bad most tech reports have names like tr93.21.ps and are not grep-able due to kerning, and I always compress them with gzip -9. For all the theoretical types out there, see quantum crypto abstract below. Paul E. Baclace peb(a)procase.com ----- Begin Included Message -----

1 0