August 2000 - cypherpunks-legacy

CDR: deniable encryption
by Tom Vogt 18 Aug '00

18 Aug '00

in a follow-up to the recent discussion (mostly between Riad Wahby and myself) I have decided to code an example implementation and have most of the details down. however, there are some crypto-related specifics I'm lacking. if anyone can help, I'd be happy. most importantly, is there an implementation of rivest's "all-or-nothing package thingy? this is definitely something I want, since it greatly strengthens the chaffing-like approach I'll be using. however, I don't feel confident enough to create it myself.

1 0

CDR: chaffing/winnowing software test
by Tom Vogt 18 Aug '00

18 Aug '00

I've done a simple chaffing and winnowing implementation, and would like to invite everyone interested to have a look and give comments. download: ftp://ftp.lemuria.org/pub/Code/Shaft-0.1.tar.gz requires: openssl (for hmac) the program consists of two parts: shaft will encode/decode, while shaftsort will sort the chunk within a file. shaftsort has two purposes: first, shaft relies on sorted input when decoding. second, the standard shaft output is sorted by input files, which makes the whole chaffing process more or less irrelevant. bugs: some trailing zeros in final output, and shaftsort still retains the "order by input file", which is a Bad Thing(tm). it should take all the chunks with identical sequence numbers and resort them randomly or by some arbitrary definition ("first 3 data bytes"). usage: see the test.sh or the source. basically, for encryption, shaft wants input files and keys/passwords on the commandline. for decryption it wants just one key. shaftsort is a filter (stdin to stdout).

1 0

Re: CDR: I'll Take Crypto For $50...
by Riad Wahby 18 Aug '00

18 Aug '00

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 reeza(a)flex.com wrote: >I've sent a couple emails to h_bray@,,, have received no bounces (yet). Likewise, I have received no bounces from bray@..., so apparently both are good. Riad Wahby rsw(a)mit.edu MIT VI-2/A 2002 5105 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.1 (GNU/Linux) Comment: For info see http://www.gnupg.org iD8DBQE5k4VmiHor6RkxxqYRAstiAJ9N4oyO4M7WKx98KY336ccmLYZOZgCggcVU lxa/jy5OKi5WhrTer9v85iE= =nGPp -----END PGP SIGNATURE-----

1 0

Re: CDR: I'll Take Crypto For $50...
by Riad Wahby 18 Aug '00

18 Aug '00

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 reeza(a)flex.com wrote: >I've sent a couple emails to h_bray@,,, have received no bounces (yet). Likewise, I have received no bounces from bray@..., so apparently both are good. Riad Wahby rsw(a)mit.edu MIT VI-2/A 2002 5105 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.1 (GNU/Linux) Comment: For info see http://www.gnupg.org iD8DBQE5k4VmiHor6RkxxqYRAstiAJ9N4oyO4M7WKx98KY336ccmLYZOZgCggcVU lxa/jy5OKi5WhrTer9v85iE= =nGPp -----END PGP SIGNATURE-----

1 0

Netscape versions
by Jim Drewniak 18 Aug '00

18 Aug '00

Do you know where I could get a list of released versions of the Netscape browser and the versions of the components within ? Regards, Jim Drewniak

1 0