August 1993 - cypherpunks-legacy

Re: What, Me Worry?
by Duncan Frissell 28 Aug '93

28 Aug '93

To: cypherpunks(a)toad.com Since I received 3 or 4 requests to explain my earlier signature line... C.>>"In his first three months in the White House, President Clinton C.>killed C.>>more people in the United States than during the 12 years of C.>Reagan-Bush." C.> C.>Could you expand on this? I'm curious. C.> Sorry, I was rushed. The "improved" version: During the first three months of the Clinton Administration, federal enforcement agencies killed more Americans than they killed during the entire 12 years of the Reagan and Bush Administrations. Waco! This is true because usually the Feds kill few Americans directly (fewer than 1 a month). DCF --- ~ WinQwk 2.0b#0 ~ Unregistered Evaluation Copy

1 0

Key Escrow Anecdote...
by wayner＠cs.cornell.edu 27 Aug '93

27 Aug '93

I was speaking with an international crypto consultant who told me this story about a business with an office in a South American country. They decided to start encrypting their link. Within a week, a team of soldiers burst through the door and smashed the encryption hardware to bits. On the way out, they asked, "What are you trying to hide from us?" -Peter

2 1

What, Me Worry?
by Duncan Frissell 27 Aug '93

27 Aug '93

To: cypherpunks(a)toad.com >From Thursday's WSJ news that suggests that the competition may be a tad busy to worry about suppressing strong crypto: Poor Man's Cruise Airliners Can Exploit U.S. Guidance System But So Can Enemies --------- Global Positioning Satellites Could Be Used to Direct Cheap, Accurate Missiles ---------- Defense Aide:It's a Quandry Washington--At the Pentagon, they call it "the poor man's cruise missile." It is a low-flying guided missile or robot aircraft that is relatively cheap to produce, but capable of hitting targets with a precision the U.S. once monopolized... (you can fill in the rest of the story) Reminded me of the late 60's early 70's with VonuLife and the gypsies and the troglodytes arguing that high-tech weapons would render large cities (aka target-rich environments) uninhabitable and people would have to spread out into communities too small to waste hardware on. Also, Vinge's "The Ungoverned" in which tornado-killer missiles are retargeted at the government baddies. This is an example of what I call the Sack-Full-Of-Cats-Thrown-In-The-River effect. As things get dicey for large "target-rich" institutions like governments, and their revenues drain away to the nets, internal and external struggles for fading influence begin. It ends up like a sack full of cats thrown into a river. Noisy, but fun if you don't like the cats. Duncan Frissell Who likes cats himself and could almost feel sorry for the rulers of others if they hadn't quite killed so many people. "In his first three months in the White House, President Clinton killed more people in the United States than during the 12 years of Reagan-Bush." --- WinQwk 2.0b#0

2 1

Re: Digital Coin Claim
by nobody＠pmantis.berkeley.edu 27 Aug '93

27 Aug '93

At 10:24 PM 8/25/93 -0400, Paul L. Moses wrote: >I think that creating a chain of title for digicoins would defeat the whole >purpose of the exercise. Creating a history of ownership is done in order to >increase accountability, not privacy. And such a history is necessary only to >clarify disputes over ownership, liens, defects....things which are simply not >problems with currency and bearer instruments. > >The question is, what is the end to which this chain of title is being put? >To verify that the holder is a "valid" holder? THIS IS IRRELEVANT. He who >holds, owns. Yes, but holds what? I think you missed the point. You're thinking that people use their identity-revealing keys to sign these public documents. I think Hnash intended that people use anonymous or even one-time-only keys. The bearer instrument is not the thing that gets publicized, it is the private key corresponding to the public key in the public document. When you generate that key, you put no identifying info in it. You use it only once, to transfer ownership. Hence, your true identity is not tied in to the history of ownership. This leads back to the question about settling disputes - if the keys associated with the owner of the coin do not identify him, he could attempt to use the same coin more than once. This could perhaps be circumvented by having a single registry. The merchant would wait until the registry showed her (her key) to be the owner before handing over the goods.

1 0

Re: Viacrypt PGP source code unavailable
by peter honeyman 27 Aug '93

27 Aug '93

> Yet still some people pay for software because > they feel better using a legal version. People who feel this way would > perhaps also prefer a legal version of PGP. i remind you (all) that the courts have long recognized an exemption from patent infringement liability for research and experimental use. this exemption makes my use of pgp legal, maybe yours, too peter

1 0

Matrix extensions of the rsa algorithm.
by Timothy Newsham 27 Aug '93

27 Aug '93

I have posted this before and never saw any reply. The following sounded appealing to me because it gives public key features with private key cryptosystem speeds. Matrix Extensions of the RSA Algorithm Chih-Chwen Chuang and James George Dunham CRYPTO '90 Abstract A new matrix extension of the RSA algorithm is proposed which is based on the Cayley-Hamilton theorem and a one-way function. The security of this algorithm rests on that of the RSA algorithm and the one-way function. The computational efficiency of the new algorithm depends on the dimension of the marix. The most efficient implementation is the 2x2 case in which both the encryption and decryption use a single modulo arithmetic multiplication and single evaluation of the one-way function. later in the paper.. 'Under a chosen plaintext attack on the key, the security of the new algorithm is equivalent to that of the RSA algorithm. Under a known plaintext attack on the message, the security of the system rests upon that of the one-way function.' '..theyse public key cryptosystems hvae the potential of a fast implementation.' Has anyone looked into this paper? Has anyone implemented the cryptosystem explained in it?

1 0

Re: Commercial PGP: Verifying Trustworthiness
by peter honeyman 27 Aug '93

27 Aug '93

> This means that I am trusting the "pseudo-random" stuff not to be > some secrets that PGP has read from my disk. trust? you could read the code, starting at about line 550 of crypto.c. of course, you have to trust your eyes, your editor (if you use one), and your operating system not to deceive you. (i think i've carried this too far.) > The only benefit > that I see to the pseudo-random stuff is to send the same message > to several people without revealing the fact that the messages are > the same except to those that can decode the messages. that is a big win, in my view, but the random prefix also also helps defeat chosen plaintext attacks, does it not? peter

1 0

Re: What, Me Worry?
by peb＠PROCASE.COM 27 Aug '93

27 Aug '93

The WSJ article about GPS has a familiar cypherpunk ring to it...the commercial GPS signal is weakened (millitary 10ft accuracy signal is encrypted), the "enemies" are using it for missile guidance anyway (better than gyroscopes), and the hegemony of the US is wanning as perfectly predicted in The Great Reckoning (James Davidson and Rees-Mogg): defensive technology is improving over destructive technology and information technology eventually leaks out. Paul E. Baclace peb(a)procase.com

2 1

Another "fan"
by ferguson＠icm1.icp.net 27 Aug '93

27 Aug '93

On Fri, 27 Aug 93 13:25:39 -0500, Anonymous <nowhere(a)bsu-cs.bsu.edu> wrote - > Being new to this list, I've got a ways to go before I understand > everything I'm reading. But one thing I'd like to know today, is > JUST WHO IS DAVID STERNLIGHT? I've seen his name mentioned here > for the first time, and many times since. <chuckle> You must not follow the Usenet nesgoups sci.crypt, alt.privacy, alt.privacy.clipper, comp.eff.org.talk (etc, etc, ad nauseam) which Sternlight frequents. He even has a news.group named for him (by his detractors), alt.fan.david.sternlight. ,-) Paul

1 0

Whois Sternlight?
by ferguson＠fiber.sprintlink.net 27 Aug '93

27 Aug '93

On Fri, 27 Aug 93 13:25:39 -0500, Anonymous <nowhere(a)bsu-cs.bsu.edu> wrote - > Being new to this list, I've got a ways to go before I understand > everything I'm reading. But one thing I'd like to know today, is > JUST WHO IS DAVID STERNLIGHT? I've seen his name mentioned here > for the first time, and many times since. <chuckle> You must not follow the Usenet nesgoups sci.crypt, alt.privacy, alt.privacy.clipper, comp.eff.org.talk (etc, etc, ad nauseam) which Sternlight frequents. He even has a news.group named for him (by his detractors), alt.fan.david.sternlight. ,-) ---------------------------- ----------------------------- Paul Ferguson Minbank Consulting Group ferguson(a)fiber.sprintlink.net Fairfax, Virginia USA ferguson(a)icm1.icp.net

1 0