May 2002 - cypherpunks-legacy

RE: attack on rfc3211 mode (Re: disk encryption modes)
by Lucky Green 27 May '02

27 May '02

Peter wrote: > Yup. Actually the no-stored-IV encryption was never designed > to be a non- malleable cipher mode, the design goal was to > allow encryption-with-IV without having to explicitly store > an IV. For PWRI it has the additional nice feature of > avoiding collisions when you use a 64-bit block cipher, which > is probably going to be the case for some time to come even > with AES around. It was only after all that that I noticed > that the first pass was effectively a CBC-MAC, but it didn't > seem important enough to mention it in the RFC since it > wasn't an essential property (good thing I didn't :-). > > >With a disk mode, unlike with RFC3211 password based > encryption for CMS > >there is no place to store the structure inside the > plaintext which may > >to some extent defend against this attack. Here is a partial list of requirements that I believe apply to drive encryption cryptographic systems. I am sure that list is incomplete and may contain errors. The following is what springs to mind: 1) I do not believe that there is a fundamental need to limit the size of the ciphertext to the size of the plain text. Adding a 1% or even more space overhead for encryption is acceptable under any day-to-day scenario that I can think of. 2) The algorithm must be able to decrypt individual sectors without having to decrypt the entire contents of the drive. Nor must the algorithm leak any plaintext, even if the attacker were to have knowledge of all but one byte of the plaintext stored on the drive. 3) The encrypted partition should leak no information about the number, nature, and size of any files stored on the drive. Unless one has access to the key, the entire partition should be appear to the observer as a homogenous block of opaque encrypted data. 4) It would be nice, but is not in the least required, to be able to convert an existing unencrypted partition to an encrypted partition and back. 5) It must be possible to pass the encryption key as a parameter to mount, presumably in the form of a config file containing they key to prevent the key from showing up in ps. 6) It should be possible to both specify a raw AES key as well as a passphrase-derived SHA2 generated AES key. 7) Since the key will need to be stored in RAM for extended periods of time, the key should be protected from forensic recovery by being never being swapped to disk as well as by periodic bit-flipping. 8) Ideally, and this is definitely a feature for v2.0, each user would be able to specify a capability that will permit the listing and access of any files under that user's permissions on the encrypted file system. 9) While steganographic file systems offering multiple levels of credible distress keys are nice, I don't consider this a feature that should be included in v1.0.

1 0

수신거부4건
by giftdc 27 May '02

27 May '02

hell(a)einstein.ssz.com, cypherpunks(a)einstein.ssz.com, hangar18-general(a)open-forge.org, open-science-general(a)open-forge.org

1 0

Not Just E m a i l Addresses... Sort by SIC Code...
by md2002＠datacommarketing.com 27 May '02

27 May '02

<<< SPECIAL REVISED PRICE AS OF 5/24/2002 - HURRY QUANITIES WILL BE LIMITED >>> Attention: Are you buying from the "Information America" type companies for .10-.15 cents per record, we sell the same types of data for 1000's of records per penny! As a matter of fact several of these companies use and sell our data since did not have the skills to compile / append the newer internet fields such as web site info and e m a i l information. Please Read On... The Ultimate Traditional & Internet Marketing Tool, Introducing the "M A S T E R D I S C 2002" versions 4.00-4.10, now released its MASSIVE 11 disc set with over 145 Million database records (18-20 gigabytes of databases) for marketing to companies, people, via e m a i l, fax, phone and mailing addresses Worldwide! COMPLETE 11 DISC SET IS ALL OF THE MARKETING DATA YOU WILL NEED FOR 2002 & 2003 (Put your service or product out for the world to see!) We've been slashing prices once again to get you hooked on our leads & data products. The full disc set ver 4.00-4.10 (Contains all databases, all software titles, all demos, more then 65 million records include an e m a i l address and many, many other useful fields) including unlimited usage is yours permanently for just $799.00 for the full set or $99.00 for the single sample disc (Normally Sold For $2800.00 for the full set and $299.00 for single sample disc) if you order today! **** M A S T E R D I S C 2002 CONTENTS **** We've gone out of our way to insure that this product is the finest of its kind available. Each CD (ver.4.01 to ver.4.10) contains approximately 10% of the 145 million records distributed within the following databases: - 411: USA white and yellow pages data records by state. - DISCREETLIST: Adult web site subscribers and adult webmasters E M A I L addresses. - FORTUNE: This database contains primary contact data relating to fortune 500, fortune 1000, and millions more corporations sort able by company size and sales. - GENDERMAIL: Male and female email address lists that allow you target by gender with 97% accuracy. - MARKETMAKERS: Active online investors E M A I L addresses. Also information in reference to thousands of public companies symbols, and descriptions. - MAXDISC: Online website owners, administrators, and technical contacts for website domain name owners of the ".com", ".net", and ".org" sites. This database has information from about 25% of all registered domains with these extensions. - NEWSPAPERS: National directory of newspapers from small local papers to large metro news agencies. - PITBOSS: Avid Online casino and sports book players, and casino webmasters. - SA: South American mailing databases from more than a dozen countries. Each mailing address belongs to a Visa or MasterCard credit card holder. - SOFTWARE: This directory contains 86 software titles, some are fully functional versions and others are demo versions. Many suites of commercial e m a i l tools as well as many other useful resources will be found here to help extract, verify, manage, and deliver successful commercial e m a i l marketing campaigns. For More Information, Available Records, Pricing, CUSTOM Databases, Ordering Contact us: D a t a C o m M a r k e t i n g C o r p 1 4 4 0 C o r a l R i d g e D r. #3 3 6 C o r a l S p r i n g s, F l 3 3 0 7 1 (9 5 4) 7 5 3-2 8 4 6 voice / fax (Promo Code: 052402) For no further notice at no cost and to be disolved from all of our databases, simply "r e p l y" to this message with the word "Discontinue" in the subject line. IZ1

1 0

Regulatory arbitrage in action
by keyser-soze＠hushmail.com 27 May '02

27 May '02

Flight Schools See Downside to Crackdown By DAVID FIRESTONE with MATTHEW L. WALD The security crackdown meant to keep terrorist hijackers out of American flight schools has forced thousands of foreign students to train overseas, weakening the country's global dominance in aviation training, officials in the industry say. That shift, they warn, could ultimately mean greater risks for air travelers, because American flight schools are the main source of well-trained commercial pilots for foreign airlines. http://www.nytimes.com/2002/05/27/national/27FLIG.html Hush provide the worlds most secure, easy to use online applications - which solution is right for you? HushMail Secure Email http://www.hushmail.com/ HushDrive Secure Online Storage http://www.hushmail.com/hushdrive/ Hush Business - security for your Business http://www.hush.com/ Hush Enterprise - Secure Solutions for your Enterprise http://www.hush.com/ Looking for a good deal on a domain name? http://www.hush.com/partners/offers.cgi?id=domainpeople

1 0

RE: Transparent disk encryption coming this year [was:RE: disk encryption modes]
by Lucky Green 26 May '02

26 May '02

FYI, The author of GEOM has just added the first straw man crypto provider to the FreeBSD 5.0 drive/partition manager. http://www.freebsd.org/cgi/cvsweb.cgi/src/sys/geom/geom_aes.c?rev=1.1&co ntent-type=text/x-cvsweb-markup Yes, I know it is a modest start. But given how much interest there has been on the list in transparent drive encryption, those inclined to provide constructive feedback, ideally in the form of source code, may wish to do so. --Lucky > -----Original Message----- > From: owner-cypherpunks(a)lne.com > [mailto:owner-cypherpunks@lne.com] On Behalf Of Lucky Green > Sent: Sunday, April 28, 2002 12:37 AM > To: cypherpunks(a)lne.com > Cc: 'Peter Gutmann' > Subject: Transparent disk encryption coming this year > [was:RE: disk encryption modes] > > > I would like to direct anybody's attention who is interested > in transparent drive encryption to GEOM, which will be a > native feature of FreeBSD 5.0. > > GEOM is a project that is slated for inclusion in the release > of FreeBSD 5.0, a major upgrade to FreeBSD that has been > years in the making, due out by the end of the year. Based on > my understanding of what GEOM does, which may be imperfect, > GEOM provides a transparent middle layer between the actual > physical drives and what the OS thinks those drives are. For > example, the OS may believe it is using two UFS partitions on > the same IDE drive when in fact the actual drives used are > one hard drive formatted for Linux, one MS-DOS drive, and > some Solaris partition mounted over NFS. The OS or the > application will be completely isolated from the physical > hardware of the drives and the actual file systems on the drives. > > The benefits are compelling: you can simply add another drive > and tell your OS that one of the partitions that it is using > has just magically become much larger. Or move all the data > over to a RAID without your OS ever changing the device entry > it is talking to. As I said, totally transparent. > > I believe that GEOM will become widely adopted, just as Soft > Updates became widely adopted within months of its inclusion > in FreeBSD, because it is simply so compelling. > > Of course this magic requires various behind-the-scenes > "transformations". One of such transformations that the > author is explicitly targeting is transparent encryption. And > that's not just encryption of blocks on the file system or > via some kludgy loop back interface. If this gets implement > right, if you were to look at the physical drive, you > shouldn't even be able to tell how many files there are, or > for that matter how much data is stored on the drive. > > Currently, GEOM is being written by a single guy in Denmark. > Which sounds perhaps more crazy than it might be, because > Soft Updates, IIRC, was written by one person as well. The > guy seems real, has a grant for the project, and is an active > member of the FreeBSD team. > > If you feel comfortable with running FreeBSD-CURRENT, which > was just released as a Developer Preview 1 build, are > familiar with at least some file systems, and are interested > in seeing transparent drive encryption deployed on hundreds > of thousands of machines worldwide by the end of the year, I > would encourage you to visit > http://phk.freebsd.dk/geom/ and read the geom man page found > on the FreeBSD web site. Note that the encryption > transformation code is not yet available, though some of the > file system transformation code is. > > --Lucky

1 0

A counterpoint to NYT's Friedman: US media cowed by patriotic fever, says Dan Rather
by keyser-soze＠hushmail.com 26 May '02

26 May '02

US media cowed by patriotic fever, says CBS star <http://www.guardian.co.uk/bush/story/0,7369,717097,00.html> Network news veteran admits national mood caused him to shrink from tough questions on war in Afghanistan Matthew Engel in Washington Friday May 17, 2002 The Guardian Dan Rather, the star news anchor for the US television network CBS, said last night that "patriotism run amok" was in danger of trampling the freedom of American journalists to ask tough questions. And he admitted that he had shrunk from taking on the Bush administration over the war on terrorism. In the weeks after September 11 Rather wore a Stars and Stripes pin in his lapel during his evening news show in an apparent display of total solidarity with the American cause. However, in an interview with BBC's Newsnight, he graphically described the pressures to conform that built up after the attacks on the World Trade Centre and the Pentagon. "It is an obscene comparison - you know I am not sure I like it - but you know there was a time in South Africa that people would put flaming tyres around people's necks if they dissented. And in some ways the fear is that you will be necklaced here, you will have a flaming tyre of lack of patriotism put around your neck," he said. "Now it is that fear that keeps journalists from asking the toughest of the tough questions." Rather did not exempt himself from the criticism, and said the problem was self-censorship. "It starts with a feeling of patriotism within oneself. It carries through with a certain knowledge that the country as a whole - and for all the right reasons - felt and continues to feel this surge of patriotism within themselves. And one finds oneself saying: 'I know the right question, but you know what? This is not exactly the right time to ask it.'" Such a confession is astonishing, bearing in mind its source. Rather is almost as famous in the US as the president, though he is more secure in his tenure, far better paid and probably more pampered. Rather, 70, has held what used to be regarded as the top job in American journalism for two decades, since he was chosen to succeed the revered and avuncular Walter Cronkite as CBS News's anchorman. Traditionally, CBS was the country's No 1 news channel but has lost its status and ratings after years of budget cutbacks. The White House was to blame for its failure to provide adequate information about the war, Rather said. "There has never been an American war, small or large, in which access has been so limited as this one. "Limiting access, limiting information to cover the backsides of those who are in charge of the war, is extremely dangerous and cannot and should not be accepted. And I am sorry to say that, up to and including the moment of this interview, that overwhelmingly it has been accepted by the American people. And the current administration revels in that, they relish that, and they take refuge in that." He said his view of the patriotism differed from that of the administration. "It's unpatriotic not to stand up, look them in the eye, and ask the questions they don't want to hear - they being those who have the responsibility, the ultimate responsibility - of sending our sons and daughters, our husbands, wives, our blood, to face death. Hush provide the worlds most secure, easy to use online applications - which solution is right for you? HushMail Secure Email http://www.hushmail.com/ HushDrive Secure Online Storage http://www.hushmail.com/hushdrive/ Hush Business - security for your Business http://www.hush.com/ Hush Enterprise - Secure Solutions for your Enterprise http://www.hush.com/ Looking for a good deal on a domain name? http://www.hush.com/partners/offers.cgi?id=domainpeople

1 0

100% �� 帮�� ۿ� ��ϴ� ! 281497544332222
by j_i_s_u_n＠orgio.net 26 May '02

26 May '02

1 0

urgent business
by ALEX CHIOMA 26 May '02

26 May '02

from the Desk of DR. ALEX CHIOMA B.sc.(UNN);Msc;Ph.D;Mnim;Mica Executive Director and Financial Controller (NNPC) CONFIDENTIAL ATTN: PRESIDENT/DIRECTOR DEAR SIR, THIS LETTER MAY COME TO YOU AS A SURPRISE, PLEASE TREAT IT LIKE A BLOOD BROTHER AFFAIR. YOUR ADDRESS WAS MADE AVAILABLE TO ME BY A GOOD FRIEND WHO WORKS WITH THE NIGERIAN CHAMBER OF COMMERCE AND INDUSTRY, HE ASSURED ME OF YOUR COMPANYS VIABILITY AND CAPABILITY IN BUSINESS TRANSACTION.I THEREFORE PICKED A KEEN INTEREST IN THE IMPORTATION OF YOUR COMPANYS PRODUCTS AND ALSO TO REQUEST FOR THIS BUSINESS RELATIONSHIP WITH YOU. I AM DR.ALEX CHIOMA, THE PRINCIPAL ACCOUNTANT WITH THE NIGERIAN NATIONAL PETROLEUM CORPORATION (NNPC).I AM WRITING ON BEHALF OF MY COLLEAGUES IN THE NNPC AND HAS BEEN MANDATED TO SEEK FOR THE ASSISTANT OF A RELIABLE FOREIGN COMPANY THROUGH WHICH WE CAN TRANSFER THE SUM OF THIRTY TWO MILLION, FIFTY THREE THOUSAND UNITED STATES DOLLARS ONLY (US$32,053,000.00).THIS MONEY IS NOW DEPOSITED IN THE NNPC TREASURY ACCOUNT WITH THE CENTRAL BANK OF NIGERIA. ORIGIN OF THE FUND: THE SUM AROSE FROM THE DELIBERATE OVER-INVOICING OF A CONTRACT AWARDED BY THE NNPC TO A FOREIGN FIRM FOR THE CONSTRUCTION OF LIQUIFIED NATURAL GAS PLANT (LNG) IN BONNY, SOUTHERN NIGERIA DURING THE LAST MILITARY REGIME. THIS CONTRACT HAS BEEN COMPLETELY EXECUTED AND COMMISSIONED AND THE CONTRACTOR THAT HANDLED THIS CONTRACT HAS COLLECTED HIS FINAL PAYMENT THUS LEAVING BEHIND THE ABOVE STATED AMOUNT WHICH REPRESENTS THE OVER INVOICED SUM. WE HAVE BEEN SAFEGUARDING THIS MONEY WAITING FOR CONDUCIVE TIME FOR ITS TRANSFER OUT OF THE COUNTRY FOR OUR INVESTMENT PLAN. THE CURRENT FAVOURABLE POLITICAL CLIMATE SINCE THE ASSUMPTION OF DUTY BY THE NEW CIVILIAN ADMINISTRATION PRESENTED AN OPPORTUNITY FOR THIS MONEY TO BE TRANSFERRED OUT OF THE COUNTRY. HOWEVER, THE CODE OF CONDUCT BUREAU (CIVIL SERVANTS LAWS) DOES NOT ALLOW US TO OWN AND OPERATE FOREIGN ACCOUNT, THEREFORE, WE NEEDED A FOREIGN PARTNER THAT WILL PRESENT HIMSELF AS THE SUB-CONTRACTOR BY PROVIDING HIS BANK PARTICULARS SO THAT THE MONEY WILL BE TRANSFERRED INTO HIS COMPANYS OR PERSONAL ACCOUNT. HENCE THE NEED OF YOUR BUSINESS IS NOT PARTICULARLY RELEVANT TO THE SUCCESS OF THIS TRANSACTION . ALL WE REQUIRE IS YOUR WILLINGNESS TO PRESENT YOUR BANKING INFORMATION SO THAT THE MONEY WILL BE TRANSFERRED INTO YOUR ACCOUNT. FOR YOUR ASSISTANCE IN THIS BUSINESS, YOUR SHARE WILL BE 30% OF THE TOTAL SUM, I AND MY COLLEAGUE WILL TAKE 60% WHILE 10% WILL BE SET ASIDE TO OFF-SET ANY EXPENSES WE MAY INCURE IN THE COURSE OF THIS TRANSACTION. NOTE ALSO THAT SOME PART OF OUR OWN SHARE WILL BE USED FOR IMPORTATION OF PRODUCTS INTO NIGERIA WHILE THE REST WILL BE USED FOR FURTHER INVESTMENT YOU MAY ADVICE ON. IF YOU ARE WILLING TO ASSIST US IN THIS TRANSACTION, PLEASE SEND THE FOLLOWING INFORMATION . (1)NAME OF YOUR BANK AND ADDRESS (2)YOUR ACCOUNT NUMBER/BENEFICIARYS NAME. (3) YOUR PRIVATE TELEPHONE AND FAX NUMBER FOR EASY COMMUNICATION. THIS INFORMATION WILL ENABLE US FILE AN APPLICATION FOR PAYMENT APPROVAL TO THE CONCERNED MINISTRIES AND FINALLY TO THE CENTRAL BANK OF NIGERIA AND IT IS GOING TO LAST BETWEEN 7-10 BANKING DAYS STARTING FROM THE DAY WE RECEIVE THE ABOVE INFORMATION FROM YOU. ALL MODALITIES FOR THE TAKE-OFF, OF THIS TRANSACTION HAS BEEN WORKED OUT AND FURTHER ACTION WILL COMMENCE IMMEDIATELY WE HEAR FROM YOU. WE SOLICIT FOR YOUR CO-OPERATION. IF YOU HAVE ANY QUESTION, PLEASE DO NOT HESITATE TO ASK ME IMMEDIATELY ON THE FOLLOWING TELEPHONE AND FAX NUMBERS: 234-1-7593405, 234-1-7593123.AND ALSO EMAIL alex72110(a)yahoo.com TRULY YOURS, DR. ALEX CHIOMA

1 0

Group Worksite LTCI with Phyllis Shelton
by Phyllis Shelton 26 May '02

26 May '02

Group Worksite LTCI with Phyllis Shelton "The First Lady of LTCI" and InsuranceIQ Free with purchase: LTC Policy Comparison Software! Free with purchase: LTC Policy Comparison Software! Long Term Care Insurance Worksite Marketing System Take advantage of the most current information available concerning the group LTCI market. Developed after months of exhaustive research and agent interviews, the Worksite Marketing System is THE resource for successful group enrollment. Included with your order: ? Agent Manual - all the "how-to" info including an implementation schedule ? Benefit Manager Flip Chart ? Presentation/Sales Script which promotes Long Term Care Insurance as "Productivity Insurance" ? Benefit Manager Sales Brochures ? Benefit Manager Direct Mail Letters ? Employer Announcement Letter ? Seven (7) Newsletter/E-Mail Articles to promote employee education prior to meetings ? 50 each of five (5) Payroll Stuffers ? 50 each of three (3) Employee Seminar Posters ? Employee Education Presentation on CD-ROM ? 150 Employee Education Brochures which promote Long Term Care Insurance as "Lifestyle Insurance" ? "The Secret of a Successful Group Enrollment" instructional audiotape ? A handsome gold embossed binder with storage pockets Click here for more information and pricing <http://www.insiq.com/store/product.asp?pid=14> BONUS! Free with your order: The LTC Policy Comparison - a $120 value! Click here to view a demo PDF! <http://www.insiq.com/store/products/48comparison_demo2.pdf> This comprehensive LTCI policy review compares over 40 major companies in 17 benefit and ratings/asset categories and includes a premium comparison for a 60 year old couple. Over 210 policies are covered in this semi-annual publication. This is the oldest LTC policy comparison in the nation and is a valuable tool for any agent selling LTC insurance today. (Older generation policies are kept after new policies are introduced because agents encounter the older policies in the field.) The CD-ROM version allows you to compare up to three companies at a time in any of the 17 categories. You'll also receive a spreadsheet version to take with you all the time. We don't want anybody to receive our mailings who does not wish to receive them. This is professional communication sent to insurance professionals. To be removed from this mailing list, DO NOT REPLY to this message. Instead, go here: http://www.Insurancemail.net <http://www.Insurancemail.net> Legal Notice <http://www.insiq.com/legal.htm>

1 0

Offers an extensive collection of fragrances (5364TnFx1-920RjBv7371NfZr2-5@26)
by 665363＠hotmail.com 26 May '02

26 May '02

1 0