September 1993 - cypherpunks-legacy

Waco Raid: Justice Dept. requests FOIA IMMUNITY!
by L. Detweiler 10 Sep '93

10 Sep '93

Just what we need -- a whole new field day for the disconsolate Kennedy conspiracy theorist industry! Maybe they'll let us see *these* documents in 2050 or so! (Disclaimer: of course, this has only tangential relevance to the list, but it has formed one of the hottest, most recurring, and emotional topics on the list, and hopefully everyone who would flame me for posting it here has already deleted the message based on the subject line! so NYAAHH!) ------- Forwarded Message From: Richard Ginn <rlg1(a)cornell.edu> Subject: Waco, Texas [Branch Davidians] Raid and the Freedom of Information Act Exemption Request by Justice Dept. of the US. Date: Thu, 9 Sep 1993 18:21:21 -0400 By Richard Ginn <rlg1(a)cornell.edu>, Ithaca, New York, USA - 9 Sept. 1993 - The United States Justice Department has requested that all files relating to the Waco, Texas [Branch Davidian - David Koresh and friends] raid by U.S. Government forces and the resulting deaths be exempted from all Freedom of Information Act (FOIA) inquiries and that the files be sealed so that no one may make any further inquiries into the Waco incident. The full text of the request can be found in the United States Federal Register, Volume 58, Number 156, on Monday August 16, 1993, page 43312. The period for comment on this action expires on September 15, 1993 (six days from the date of this message), after which the files will be sealed if there is no opposing comment by the public. - - 30 - <end of message> ------- End of Forwarded Message

1 0

ViaCrypt PGP Announcement clarifications
by L. Detweiler 10 Sep '93

10 Sep '93

- using their own cryptographic routines DigiSig+ (by necessity) - first release scheduled early Nov. 1993 - Windows & Mac versions in 1994 - source code *not* released - no indication of `reviews' or QA by PRZ etc. ------- Forwarded Message Date: Thu, 09 Sep 93 13:59:41 -0700 From: "Tom Jones" <wk01965(a)worldlink.com> Subject: ViaCrypt PGP Announcement Internet messages pertaining to ViaCrypt(tm) PGP(tm) have been very positive but somewhat overwhelming. With dozens of messages received by Phil and passed on to ViaCrypt, this general response will have to suffice until we can get back with more personalized messages. First, ViaCrypt (a division of 17-year-old Lemcom Systems, Inc.) presently has a PKP patent sublicense for its line of DigiSig+(tm) software and hardware cryptographic engines. By using ViaCrypt's licensed DigiSig+ software cryptographic engine for the RSA technology, and marrying it to most of the PGP code, we will produce a totally compatible and legal commercial product which is called ViaCrypt PGP. Second, there is a little work required before we can start shipping. Most significantly, PGP is being modified to substitute the DigiSig+ cryptographic engine in the ViaCrypt PGP product. With the more generalized interface of the DigiSig+ cryptographic engine, ViaCrypt PGP may run slightly slower than PGP but otherwise you won't notice any difference. ViaCrypt will attempt to minimize any performance differences in future releases. ViaCrypt's patent sublicense from PKP only permits object code to be distributed. That may create uneasiness for some people, but is necessary to market ViaCrypt PGP. Following are excerpts from the press release for ViaCrypt PGP dated 3 September 1993: "ViaCrypt PGP will be available in object code for the DOS environment in early November, 1993. ViaCrypt intends to make the program available on a wide range of additional platforms. UNIX versions will soon follow. To provide a high degree of interoperability, the company expects to announce a Windows version, Macintosh version, and ports to several other platforms in 1994. ViaCrypt PGP for DOS prices are $199.95 for a single user license, $599.95 for a five user license, and $1,649.95 for a 20 user license. Shipping and handling are extra. As an introductory promotional offer, these prices are discounted 50% for orders received through the end of 1993. Multiple-user licenses for 50 or more are also available from ViaCrypt. Prices for ViaCrypt PGP on other platforms may vary and will be established at announcement time." ------- End of Forwarded Message

1 0

Cryptography Conference (Austin, Tx)
by Zeek 10 Sep '93

10 Sep '93

----------------------------------------------------------- Please forward this announcement to appropriate mailing lists, newsgroups, bbs, and individuals. Sincere apologies to those who have seen this announcement too many times. ----------------------------------------------------------- EFF / EFF-Austin Cryptography Conference Wednesday, September 22, 1993 Ramada Inn North, Austin 9220 N. IH-35 at Rundberg Admission is free. Please arrive at 12:3o p.m. to find seating. 1:oo - 1:3o p.m. *INTRODUCTORY REMARKS* Steve Jackson - WELCOME [5 minutes] Bruce Sterling - KEYNOTE [20 minutes] PANEL #1 [1:45 - 3:oo] *POLICY* Mitch Kapor Jerry Berman Dave Farber PANEL #2 [3:15 - 4:3o] *LAW ENFORCEMENT* Esther Dyson Mike Godwin PANEL #3 [4:45 to 6:oo] *CYPHERPUNKS* John Perry Barlow Eric Hughes John Gilmore DINNER [6:oo to 8:oo] No dinner arrangements have been made. However, a buffet dinner will be offered by the Ramada or you may order from their menu. Good dining is also available within the area. RECEPTION [8:oo to 10:oo] A cash bar will be available and everyone is invited. Hopefully those of you unable to make the daytime events can attend the reception. ------------------------------------------------------------------ For more information please contact zeek(a)bongo.cc.utexas.edu, jonl(a)wixer.bga.com, or call (512) 453-4483 [leave a message for zeek].

1 0

IETF + PEM = Internet Commerce
by L. Detweiler 10 Sep '93

10 Sep '93

Report: the IETF (Internet Engineering Task Force) is very pro-commerce and recently met in Amsterdam for a session to discuss Internet Mercantile Protocols (IMP). It would allow consumers & companies on the Internet to combine PEM and MIME to complete and automate commercial transactions. J. C. Davin, previously of Bellcore helped initiate the IMP project. He envisions a standard that would allow companies to sell data such as image files or software. Another approach being considered would allow a sort of `home shopping network' approach. Meeting m Amsterdam minutes can be found at thumper.bellcore.com. Directory path: pub/devetzis/imp. Get: imp-archive. Mail me for more information. - - - On a related note, Bob Metcalf of IETF and columnist for InfoWorld was on NPR recently and talked about the `pampered elite' of people with Unix machines that are currently using the internet. The comment was clarified to mean that a vast audience of people with PCs and Macs and other low-end computers are mostly unconnected. IETF membership info appended. He shows a strong commitment to: 1) increasing address space for participants of the next century - `upgrading in one of the biggest cutovers since Great Britain decided to drive on the right side of the road' 2) exploiting ATM with ``cell-based protocols, operating systems, and applications. Otherwise, the Internet stays stuck in its current 20-year-old ASCII-bound applications -- TELNET, FTP, and E-mail.'' 3) strong support for *individual* subscribers vs. the current institutional monopoly, with ISDN playing a central role 4) he's in favor of usage billing as a critical aspect of commercial development. ``Internet carriers must be able, as are telephone companies, to settle with one another for traffic carried on behalf of each other's customers.'' From: "Bob Metcalfe" <Bob_Metcalfe(a)ccgate.infoworld.com> >if you want to join the Internet Society, as I just did, >to keep in touch with how the third generation is coming along, it costs $70 >per year and gets you the quarterly /Internet Society News/. Call >703-620-8990.

1 0

Re:Crypto Visions
by nobody＠pmantis.berkeley.edu 10 Sep '93

10 Sep '93

Hey Nick, visionary stuff in general, but . . . szabo>* Internet Casino: why travel to Las Vegas or Monte Carlo when szabo>you can play the finest games in the privacy of your own home? Maybe it's time you stopped working on the CRT tan, and checked out the showgirls :-). There is *virtually* nothing like it.

1 0

REMAIL: cache
by nobody＠Menudo.UH.EDU 10 Sep '93

10 Sep '93

-----BEGIN PGP SIGNED MESSAGE----- Cypherpunks, This is a test message of the caching implementation I've added to the remailer elee9sf(a)menudo.uh.edu. If you are reading this, it should be working :-) I implemented caching with three extra scripts: filer.pl, mailout.at, and mailout.pl. filer.pl accepts incoming messages and files them into a queue directory, appending the time in seconds, minutes, hours, and the process id number to the file. Hopefully, this will store the file in a random order with respect to the actual order they arrived in. Instead of piping incoming mail to slocal.pl, which is what the typical cypherpunks remailer does, it is piped to filer.pl which just files the messages. mailout.at is a script for the at command. It invokes the mailout.pl command, which mails out the queued messages, and reschedules itself for midnight the next day. Today, I scheduled for 18:00 CDT, so this message should leave for cypherpunks(a)toad.com then. I forgot to check to see if I'm in cron.allow; if so I'll change from the at command to a crontab. For the time being the remailer "flushes" its queue every night at midnight. After a while I'll make it less often, perhaps every other day or every three days. A week is probably too long :-) mailout.pl is a script which opens the queue directory and gets a list of files. Every file in the directory is opened, piped to slocal.pl, and unlinked. Well, that's it in a nutshell. Next up: padding messages, and an smtp package instead of sendmail. <klbarrus(a)owlnet.rice.edu> -----BEGIN PGP SIGNATURE----- Version: 2.3a iQCVAgUBLI+wM4OA7OpLWtYzAQGM2wQAulXlIz50z6fVPdWeHstdyFA5GgeCPUaO XRWooj0PNPPRrAcfUQqFhhgTZibBDHP6qmOXGU4GWfYL6dqPJhCHTi6iBUOGWQ+2 K1+YHinz7h6vNTf1R9fCRElvH0tn5iwq3uR4ZWLqJhhxtD6Mv01qidOsUQIUfQ9G oN2lT+JrkeU= =RdzB -----END PGP SIGNATURE-----

1 0

encryption
by Cdt Pvt Dan Doughty 10 Sep '93

10 Sep '93

sub cypherpunks Daniel J. doughty

1 0

blank lines v. the remailer
by collins＠newton.apple.com 10 Sep '93

10 Sep '93

> Upon repeated tests of my remailers, I noticed that if there's >more than one blank line between the header and the header-pasting, then >the pasting doesn't take place. Does this happen with other people's >remailers? How is your script different from mine? How can this be fixed? What follows is some of the text of the recurse.pl script, a component of the remailer system. I imagine that there are different versions of this script floating around, but this is the version I got from soda.berkeley.com when I set up my remailer. I have commented it (and noted my comments with 'SC:') to explain the relevent behavior, and deleted non-relevent sections: ----------cut here---------- # SC:read the header, looking for relevent lines while (<>) { # SC:get the next line (from where ever) into $_ s/[ \t\r]*$// ; # SC:remove trailing white space from $_ last if /^$/ ; # SC:get out if this line ($_) is otherwise blank ...code deleted here... } # SC:at this point $_ contains the blank line that followed the header # unless there was no blank line or message following the header (bad message) # We have just read the last line in the header. # Now we check to see if there is a pasting operator. if ( ( $_ = <> ) && /^::[ \t\r]*$/ ) { # SC:get the next line (from where ever) into $_ ('if' can't use 'while' # magic form), and if that next line is the pasting token then... # SC:append all the folling lines (up to, but not including, # the next blank one) to the header while (<>) { ...code deleted here... } } ...code deleted here... ----------cut here---------- You can see (from the condition of the 'if') that this code only finds the pasting token if it is separated from the header by exactly one blank line. This is easy enough to fix, if it is not the desired behavior, by inserting while (<>) { last unless /^[ \t\r]*$/ ; } before the 'if' and removing the '($_=<>) &&' from the if condition. Hope this helps, Scott Collins | "Few people realize what tremendous power there | is in one of these things." -- Willy Wonka ......................|................................................ BUSINESS. voice:408.862.0540 fax:974.6094 collins(a)newton.apple.com Apple Computer, Inc. 1 Infinite Loop, MS 301-2C Cupertino, CA 95014 ....................................................................... PERSONAL. voice/fax:408.257.1746 1024:669687 catalyst(a)netcom.com

1 0

REMAIL: Perl/problems
by Sameer Parekh 10 Sep '93

10 Sep '93

I'm not good at perl, so I can't solve this problem on my own. (I hardly know anything about perl, actually.) Upon repeated tests of my remailers, I noticed that if there's more than one blank line between the header and the header-pasting, then the pasting doesn't take place. Does this happen with other people's remailers? How is your script different from mine? How can this be fixed?

3 2

DES is Dead
by Philip Zimmermann 10 Sep '93

10 Sep '93

Forwarded message: >Date: Thu, 09 Sep 1993 10:23:00 +0000 >From: "Michael (M.J.) Wiener" <wiener(a)bnr.ca> >Subject: re:fw:DES is Dead >To: prz(a)acm.org > >Philip, > >I'm pleased that my paper is getting some attention. However, there >were a few things in your note below that concerned me. > >The first is minor. My last name is spelt "Wiener" - I've always been >a little touchy about that. > >The second is that not only have we not built this machine, but we >have no intention of doing so. To say that the chip is ready for >fabrication may mislead people about our intentions. This is >strictly a detailed paper design. > >Finally, I don't think that DES is dead. After about 15 years of >public scrutiny, we can conclude that DES is a well designed cipher >with a well understood limitation (56-bit keys). A natural >replacement for it is triple-DES. Proclaiming the death of DES >may lead to its being replaced with an entirely new cryptosystem >(e.g. Skipjack). > >I'd appreciate it if you would send a clarification (particularly on >the second point) to the audience that received the message below. > >Thanks, > >Mike Wiener > > >>From: Philip Zimmermann <prz(a)columbine.cgd.ucar.EDU> >>Subject: Re: DES Key Search Paper (fwd) >> >>Michael Weiner presented a paper at Crypto93 that describes a fast DES >>key search engine that uses a special inside-out DES chip that he designed. >>This chip takes a single plaintext/ciphertext pair and quickly tries >>DES keys until it finds one that produces the given ciphertext from the >>given plaintext. Weiner can get these chips made for $10.50 each in quantity, >>and can build a special machine with 57000 of these chips for $1 million. >>This machine can exhaust the DES key space in 7 hours, finding a key >>in 3.5 hours on the average. He works for Bell Northern Research in >>Ottawa, and says they have not actually built this machine, but he has >>the chip fully designed and ready for fabrication. >> >>This is a stunning breakthrough in the realization of practical DES >>cracking. BTW-- note that PEM uses straight 56-bit DES. >> >>$1 million - 3.5 hours >>$10 miliion - 21 minutes >>$100 million - 2 minutes >> >>It is not plausible to me that NSA's budget for examining DES-encrypted >>traffic is less than $100 million. Two minutes. DES is dead, dead, dead. >> >> -prz >>

1 0