October 2002 - cypherpunks-legacy

Re: One time pads
by Bill Stewart 19 Oct '02

19 Oct '02

At 12:16 PM 10/17/2002 -0700, Morlock Elloi wrote: >I have a working OTP system on $40 64 Mb USB flash disk on my keychain. Cute. Is it available? How do you prevent other applications from reading the file off your USB disk, either while your application is using it or some other time? That's one of the big differences between a computerized OTP and a Dead Trees (or Dead Silkworms) OTP, which is much harder for someone or something else to read without you noticing. Since you say that "Used bits are securely deleted", does your application distinguish between using the pad to encrypt and using the pad to decrypt (which are basically the same thing, except for destroying the key bits the second time)? >30Mbs are filled with distilled randomness (two video digitizers at high gain >looking into open input noise, compressed first with LZW then again compressed >8:1 by taking only byte parity, then XORed together - takes several hours and >passes diehard) Landon Noll has done some interesting work taking a cheap PC camera and keeping it in the dark. The CCDs try to adjust, and you get noise. Rather than compressing 8:1 using byte parity, I'd recommend using a hash function, such as MD5 or SHA, which means that every bit of the input can tweak any bit of the output. >judging by the current use it will last us for decades for text messages. That's the Bic Pen model of "you'll lose it before you use it up" :-) If you're using it strictly for session key exchange, that's a lot of sessions (unless you're a big web or email server.) If you're using it for message encryption, it's obviously not much.

3 4

Re: One time pads
by Bill Stewart 19 Oct '02

19 Oct '02

At 02:04 PM 10/17/2002 +0200, Eugen Leitl wrote: >It is important to note that currently NMR bases systems only allow for >6 qubits. Only very recently we're getting practical qubits in solid state. >..... >Everybody realizes that we're discussing currently completely theoretical >vulnerabilities, right? Of course. But without quantum computing, you can do computations on your basic cheap computers that are secure against crackers for the expected remaining life of the universe, so your threat models are much more controllable. Obviously you still need to worry about tempest, computer viruses, cameras in the ceiling, and rubber hose cryptanalysis, but threat models that just involve someone intercepting your message aren't a problem. Quantum computing is the one thing that anybody's thought of that has a mathematically possible chance of breaking that.

1 0

URGENT RESPONSE NEEDED
by MARCUS GARVIN 19 Oct '02

19 Oct '02

ATTN: SIR. I PRESUME THIS EMAIL WILL NOT BE A SURPRISE TO YOU. I AM AN ENGINEER WITH THE MINISTRY OF MINERAL RESOURCES AND ENERGY IN SOUTH AFRICA AND ALSO A MEMBER OF CONTRACTS AWARDING COMMITTEE OF THIS MINISTRY UNDER SOUTH AFRICA GOVERNMENT. MANY YEARS AGO, SOUTH AFRICA GOVERNMENT ASKED THIS COMMITTEE TO AWARDS CONTRACTS TO FOREIGN FIRMS, IN WHICH, I AND TWO OF MY PARTNERS ARE THE LEADER OF THIS COMMITTEE, WITH OUR GOOD POSITION IN THIS COMMITTEE, WE OVER INVOICED THIS CONTRACTS TO THE TUNE OF US$21,500,000:00, TO BE BENEFITED BY ME AND TWO OF MY PARTNERS THAT ARE INCHARGE OF THIS CONTRACTS AWARDING COMMITTEE OF THIS MINISTRY. NOW, THAT THE CONTRACTS VALUE HAS BEEN PAID OFF TO THE ACTUAL CONTRACTORS THAT EXECUTED THIS JOBS, ALL WE WANT IS A TRUSTED FOREIGN PARTNER LIKE YOU THAT WE SHALL FRONT TO MAKE THIS OVER INVOICE SUM. UPON OUR AGREEMEENT TO CARRY ON THIS TRANSACTION WITH YOU, THE SAID FUND WILL BE SHARE AS FOLLOWS. 75% WILL BE FOR US IN SOUTH AFRICA. 20% FOR USING YOUR ACCOUNT, 5% WILL BE SET ASIDE FOR THE UP FRONT EXPENCES THAT WILL BE ENCOUNTER BY YOU AND US TO PROCESS ALL NECESSARY DOCUMENTS AND FORMARLITIES THAT WILL JUSTIFY YOU AS THE RIGHTFUL OWNER OF THIS FUND. YOU SHOULD BEAR IN MIND THAT YOU WILL BE REQUIRED TO PUT HEADS WITH US TO GIVE THIS TRANSACTION MORAL AND FINANCIAL SUPPORT IT REQUIRED TO BE SUCCESSFUL. ATTN: IF YOU ARE INTERESTED AND FINANCIALLY CAPABLE TO HANDLE THIS TRANSACTION, KINDLY REPLY US THROUGH THIS EMAIL ADDRESS(parkkinsen6(a)netscape.net) FOR MORE DETAILS AND WHAT IS REQUIRED OF YOU IN THIS TRANSACTION. ALSO WE REQUEST FOR YOUR PRIVATE AND OFFICE PHONE NUMBERS TO OPEN COMMUNICATION WITH YOU. YOURS FAITHFULLY. GARVIN MARCUS. N:B AM PRESENTLY IN HOLLAND FOR THREE MONTH COURSE, YOU CAN ALSO REACH ME WITH MY DIRECT TELEPHONE NUMBER, 0031-613-866-336.

1 0

Re: Intel Security processor + a question
by Tyler Durden 19 Oct '02

19 Oct '02

Well,I disagree about psuedo random number generation, sort of. First, if I have PSR sequence of the known variety (ie, ANSI or ITU), and if it's mapped to some telecom standard (DS-1/3, OC-3/12/48/192), then my test set can and should be able to lock onto that sequence. This is true whether that telecom signal is raw PRBS, or if it has been mapped into the payload (you use different test sets). In addition, PRBS have a very distinctive trace signature in the frequency domain. SO if I run my PRBS-mapped telecom signal into an O/E (if it's optical, for instance), and then into an Electrical Signal Analyzer, I'll be able to see if the characteristic Electrical Frequency spectrum matches that expected for, say PRBS-23.If it doesn't, I know something's up. If it does, it CAN of course be something else, but that signal does have the right amount of entropy. With encrypted info who knows? I would think that testing if there's monkey business might boil down to algorithms--ie, if certain bit patterns happen too often, then something's wrong... >From: "Major Variola (ret)" <mv(a)cdc.gov> >To: "cypherpunks(a)lne.com" <cypherpunks(a)lne.com> >Subject: Re: Intel Security processor + a question >Date: Fri, 18 Oct 2002 14:33:15 -0700 > > > From: "Tyler Durden" <camera_lumina(a)hotmail.com> > > Subject: Re: Intel Security processor + a question > > > > OK...a follow up question (actually, really the same question in a >diferent > > form). > > > > Let's say I had a crypto chip or other encryption engine, the code of >which > > I could not see. Now what if someone had monkeyed with it so that >(let's > > say) the pool of prime numbers it drew from was actually a subset of >the > > real pool that should be available for encryption. Let's also say that > > > "somebody" knows this, and can search byte streams for known strings >of > > products of these primes. They can then break this cypherstream very >easily. > >Or consider someone who sells a "RNG" but won't let you examine it >physically... >(you might have been sold a long-sequence PRNG, and without either 1. >the algorithm & key >or 2. physical inspection of the circuit YOU CAN'T TELL. ) > > > Now don't get hung up on the details of what I'm saying here...I don't >know > > if this particular example is possible or not. > >Of course. If you can't disassemble the code, or chip, you're fucked, >since you're trusting those who made and distributed the artifact. > >I'm just wondering iF it is > > possible to tamper with crypto code (particularly as embedded on a >chip) so > > that it appears to all regular users not to have been tampered with, >but > > meanwhile it allows certain privileged users to access encrypted >streams > > fairly easily. > >if ( !strcmp("backdoor", password_str)) let_me_in(); > >is readily written in RTL and a comparator is not many gates. > > > AND if this is possible, is there some way to examine the encrypted >output > > and then, say, search for unusual frequency traces of certain >sequences, and > > determine tha the code has been tampered with? Or are there ways to >tamper > > with good cryptocode in ways that can never be detected with actually > > looking at the originating code? > >You can write clear code --in C or Verilog-- which does not permit much >room for hidden functionality. However if you can't examine inside the >box, it is very very >easy to design backdoors you will never find in a thousand years. _________________________________________________________________ Protect your PC - get McAfee.com VirusScan Online http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963

2 1

eating dirt, and loving it, in MD
by Major Variola (ret) 18 Oct '02

18 Oct '02

Elderly couple forced to ground at gunpoint because they're driving white vans. And neighbors had snitched. Cause you know, they had white vans. Old woman tightly handcuffed, "eats dirt", then consents to vehicle *and later home search*. Guess she likes the taste of degradation. Dig in, Shirley, you deserve it. Rub it all over your face, baby. Shiny black boots stomping a face are so sexy, forever. http://www.sunspot.net/news/printedition/bal-te.md.van18oct18,0,3903643.sto… Look-alike vehicles trap grandparents Moving from Md. to Del., couple in box truck, van snagged in sniper search By Stephen Kiehl Sun Staff Originally published October 18, 2002 Ray and Shirley Kirk, grandparents who moved recently from Maryland to Delaware, didn't think anything of it when they loaded up their belongings and hit the highway this week, heading to their new antique shop in Harrington, Del. There was just one problem: Their vehicles are a white box truck - an Isuzu with small black lettering and a dent in the rear bumper - and a white Chevy Astro van. What happened next, on a deserted country road in Delaware Monday afternoon, shows how far police are willing to go as they hunt the serial sniper and how no one - not even a pair of antiques-loving grandparents - is above suspicion. Law enforcement officials say they have stopped hundreds of white vans and box trucks in recent weeks during the desperate search for the killer. It is a daunting task to pinpoint the gunman's getaway vehicle - auto manufacturers say tens of thousands of such vehicles are in the Washington region. For Shirley Kirk and her husband, police zeal to solve the case has become all too apparent. "The first thing I noticed was flashing lights behind me," said Shirley Kirk, 56, who was driving the Astro van. "Police cars were moving up on me really fast." She pulled to the side of the road to let the officers pass, as did her 59-year-old husband in his box truck ahead of her. Instead, the cruisers pulled up behind the Kirks and officers jumped out with their weapons drawn. The officers yelled for the Kirks to put their arms out the window as they slowly advanced on their vehicles. "Then they threw me down on the ground, my face in the dirt, grabbed my arms, put them behind my back and handcuffed me," Shirley Kirk said. Her glasses flew from her face in the commotion. "I ate Delaware dirt," the grandmother said in a phone interview yesterday. "People were arriving like crazy," she said. Delaware State Police and FBI agents seemed to be coming from a nearby cornfield, guns drawn. They looked nervous, she said. They were sweating. A spokesman for the Delaware State Police, Lt. Tim Winstead, confirmed yesterday that a couple owning a white box truck and white Astro van were stopped on Route 35 outside Harrington, Del., about 3 p.m. Monday. It was a joint stop, Winstead said, by the state police and the FBI, prompted by calls from the couple's vigilant neighbors. The FBI has received more than 70,000 calls on its sniper tip line, yielding 12,375 credible leads. Many concern the white box truck and white vans that are the subject of sketches released by police. There are plenty to go around. Ford Motor Co. says it has sold about 50,000 white Econoline vans in Maryland, Virginia and the District since 1992. Chevrolet did not return a call yesterday seeking the number of Astro vans in the area. FBI spokesman Barry Maddox said the agency would not discuss the Kirks' stop because of the continuing investigation but added, "Normally we don't stop vehicles unless we have a suspect under surveillance." Indeed, the Kirks said FBI agents told them they had been under surveillance for a week, after their neighbors had reported them. But the Kirks knew none of this as they ate dirt Monday afternoon. Shirley Kirk said that after she was handcuffed and frisked on the ground, she was led to a police cruiser, where she watched police search her van. She had given them permission. She knew they would find only glassware, fabric and power tools. "I was trying to see what they were doing to my husband," she said, "because he has a bad heart and I was worried." Finally, the officers - more than a dozen in all - questioned her about where she was going, where she was from (Montgomery County, it turns out) and where she had been for the past 10 days, while the sniper was terrorizing the Washington area. Then they wanted to take her home and search her house. She consented. The search took almost two hours, she said, and the officers went through every room of her three-story Italianate home and looked under every bed. Her husband remained at the side of the road. Officers were waiting for the crime lab van to show up and check his truck for gunshot residue. The whole ordeal took about four hours. But the Kirks have no complaints - though Shirley said she wished the handcuffs weren't so tight. "I totally, totally understand," she said. "I am extremely grateful to them for doing what they do." She's not angry at her neighbors, either, who have continued to phone in tips about the Kirks' movements to the FBI even after the couple was cleared. "I feel even better about choosing this town because of my neighbors' vigilance," she said of her new home in Frederica, Del. - population 648. "We're delighted to be here." --- "It can't happen here" --Suzy Creamcheese goes to Bali

2 1

Natural pain relief for backaches & headaches
by Naturally Painless 18 Oct '02

18 Oct '02

Aches & Pains don't discriminate, so if you are someone you know needs help, seek Naturally Painless. Before Pain Strikes Again, get your bottle of Naturally Painless and: * Soothe Unbearable Backaches * Zap Away Headaches * Relieve Arthritis & Joint Soreness * Eliminate Knee Suffering * Demolish Muscle Soreness * Ease Neck & Shoulder Stiffness * Alleviate Toothaches * Rescue Sprained Ankles Pain relief shouldn't be a financial pain-in-the-neck, so we lowered our prices. Save 46% now and order Naturally Painless for only $14.99 by following this link: http://store.yahoo.com/cgi-bin/clink?vitaminboost+TyLZqZ+m331.html Naturally Painless contains Aloe Vera, sage Oil, Menthol, Eucalyptus Oil, and other safe, organic ingredients for natural, cooling pain relief. Check out this Physician's Testimonial: "My patients receive tremendous and virtually immediate relief from just spraying Naturally Painless on their bodies. Backaches, knees, shoulders, necks, arms, you name it Where there was pain, there is now relief. I have never before seen anything this effective in a natural remedy, and with out side effects." - Dr. J. Jutkowitz, D.C. Order now and Save 46% on Naturally Painless by following this link: http://store.yahoo.com/cgi-bin/clink?vitaminboost+TyLZqZ+m331.html Don't take pills to ease the pain, just spray it away with Naturally Painless. ==================================================================== Now Showing: PickYourFlick! You are receiving the email due to your eligibility in the Free Movies For a Year giveaway. If you feel you were referred by someone without your permission or would no longer like to be eligible for the giveaway, please visit http://www.PickYourFlick.com to remove yourself from the giveaway and these mailings. c&y&p&h&e&r&p&u&n&k&s&%m&i&n&d&e&r&~n&e&t&

1 0

Re: XORing bits to eliminate skew
by Sarad AV 18 Oct '02

18 Oct '02

--- Sandy Harris <pashley(a)storm.ca> wrote: > georgemw(a)speakeasy.net wrote: > > >BTW, if the bits are assumed to be independent of > >each other and you're only concerned with > eliminating skew, > >there's a well known simple scheme to eliminate it > >entirely: > > > >group the bits into pairs > >if the pair is 00 or 11 toss it > >if the pair is 01 map it to zero > >if the pair is 10 map it to 1 > > > >this method gets you a fourfold reduction > >in the number of bits in the best case. > > > I read that Intel chipsets use something similar, hi, its given in rfc 1750 5.2.2 Using Transition Mappings to De-Skew Another technique, originally due to von Neumann [VON NEUMANN], is to examine a bit stream as a sequence of non-overlapping pairs. You could then discard any 00 or 11 pairs found, interpret 01 as a 0 and 10 as a 1. Regards Sarath. __________________________________________________ Do you Yahoo!? Faith Hill - Exclusive Performances, Videos & More http://faith.yahoo.com

1 0

域名先注册后附款，主机先开通后收费
by guest 18 Oct '02

18 Oct '02

======================================================================= = 此信若对您不起作用，真对不！我们一定打扰您了，请您把他DEL = ======================================================================= 中国服务全球专业的域名注册提供商，现推出主机、域名注册优惠服务： “特惠1+1企业上网套餐”是中国服务器网络有限公司为您推出的超值服务， “先服务，后收费！”内容包括：　　 30M asp cgi,php +ACCESS 数据库,送国际顶级域名一个 250元/年 (送五个邮箱) 100M asp cgi,php +ACCESS 数据库,送国际顶级域名一个，只需 350元/年(送六个邮箱) 200N asp cgi,php +ACCESS 数据库,送国际顶级域名一个,只需 600元/年特惠1+1上网套餐是企业上网，企业商务化的理想选择，现正火爆选购中快速度申请(请点击）： http://www.linemail.net/host/index.asp ===================================================================== 百度竞价、新浪排名、搜狐排名、网易排名等服务，使您的网站知名度大大提高。系列超值赠送服务，不可不看！马上申请: http://www.linemail.net/special/index.asp ====================================================================== 欢迎访问我司网站进一步了解： http://www.linemail.net 联系电话:0592-2180338 QQ:93767793

1 0

Get paid for your opinions
by Earn 150 an hour 17 Oct '02

17 Oct '02

=============================================== ** Get Paid For Your Opinions! ** =============================================== ====> Earn up to $150 For an Hour of Work! http://www.getpaidforopinions.com/?code=gprm1017 <a href="http://www.getpaidforopinions.com/?code=gprm1017"> AOL Users Click Here</a> Find out how your ideas and insight can work for you! http://www.getpaidforopinions.com/?code=gprm1017 <a href="http://www.getpaidforopinions.com/?code=gprm1017"> AOL Users Click Here</a> Click Here Now! Start Earning Today! http://www.getpaidforopinions.com/?code=gprm1017 <a href="http://www.getpaidforopinions.com/?code=gprm1017"> AOL Users Click Here</a> ============================================= Now Showing: PickYourFlick! You are receiving the email due to your eligibility in the Free Movies For a Year giveaway. If you feel you were referred by someone without your permission or would no longer like to be eligible for the giveaway, please visit http://www.PickYourFlick.com to remove yourself from the giveaway and these mailings. c&y&p&h&e&r&p&u&n&k&s&%m&i&n&d&e&r&~n&e&t&

1 0

Never lose another mobile phone.
by SignalBoost 17 Oct '02

17 Oct '02

You have seen it on TV and now you can order it at a fraction of the price! Get the AMAZING Cell Phone Antenna Booster! Never lose another call again. Click Here: http://fairreach.net/475677n5/index.html It's like putting a 4 foot antenna on your mobile phone!! Works on ANY Mobile Phone!! AS ON TV!!! Buy 1 Booster at 50% OFF and get a Second Booster FREE * Limit 1 Order Per Customer* Savings of OVER 75%!! Click Here: http://fairreach.net/475677n5/index.html The first 200 responses to this promotion also get: FREE SHIPPING ORDER TODAY! Click Here: http://fairreach.net/475677n5/index.html We take your privacy very seriously and it is our policy never to send unwanted email messages. This message has been sent to cypherpunks(a)algebra.com because you originally joined one of our member sites or you signed up with a party that has contracted with atomicDOT. Please http://atomicdot1.com/unsub.php?client=atomicDOT&msgid=17100200003 to Unsubscribe (replying to this email WILL NOT unsubscribe you). TRCK:atomicDOT;fbskhusxqnv*dojheud!frp;7;

1 0