December 2003 - cypherpunks-legacy

Meet-in-the-middle attack
by lucifer＠dhp.com 17 Dec '03

17 Dec '03

Timothy Mayflower's wee-wee is so tiny that only his mommy is allowed to touch it. . o c , `'#v-- --v#`' Timothy Mayflower /'> <`\

1 0

Presidential decrees and emergency powers
by pgut001＠cs.auckland.ac.nz 17 Dec '03

17 Dec '03

The letter/executive order from Bill Clinton which transfers control of encryption and related items to the EAR contains a mention of: ... the national emergency described and declared in Executive Order 12924 of August 19, 1994, and continued on August 15, 1995, and August 14, 1996, necessitated by the expiration of the Export Administration Act (EAA) on August 20, 1994, I hereby report to the Congress that pursuant to section 204(b) of the International Emergency Economic Powers Act, 50 U.S.C. 1703(b) (the "Act"), I have today exercised the authority granted by the Act to issue an Executive order (a copy of which is attached)... Does anyone know what national emergency this refers to, and what the section of the emergency economic powers act covers? I seem to remember a post by someone who had traced it back through endless levels of indirection to a police action in Korea or something, but haven't been able to find any more information. Peter.

1 0

Re: DNSSEC Encryption for DNS registration and ITAR Nonsense
by jim bell 17 Dec '03

17 Dec '03

At 08:30 PM 2/27/97 -0800, Bill Stewart wrote: >At 10:14 AM 2/12/97 -0500, "Donald E. Eastlake 3rd" <dee(a)cybercash.com> wrote: >But then there's the politial correctness part of the web page :-) >> Trusted Information Systems, Inc. has received approval from the >> United States Government for export and reexport of TIS/DNSSEC software >> from the United States of America under the provisions of the Export >> Administration Regulations (EAR) General Software Note (GSN) license >> exception for mass market software. Under the provisions of this license, >> this software may be exported or reexported to all destinations except >> for the embargoed countries of Cuba, Iran, Iraq, Libya, North Korea, >> Sudan and Syria. Any export or reexport of TIS/DNSSEC software to the >embargoed >> countries requires additional, specific licensing approval from the >> United States Government. > >Yup. Can't let those Cubans secure their DNS..... At least the government >did decide to permit export. When Clipper was a new proposal, a reporter stated that Clipper-equipped telephones were going to be exportable...to anywhere except terrorist-supporting countries like Libya and Iraq. My first reaction was, if those chips had their keys escrowed within reach of the US government, WHAT DID IT MATTER that the phones get exported to Libya?!? In fact, they'd presumably want to airdrop them there, right? Jim Bell jimbell(a)pacifier.com

1 0

Re: Presidential decrees and emergency powers
by John Young 17 Dec '03

17 Dec '03

There's a list of Executive Orders from 1970-96 on emergency powers at: http://jya.com/eo-export.txt A related Presidential Notice is at: http://jya.com/no081496.htm Some of the latest Executive Orders related to export administration are listed under "background" at: http://jyacom/eartoc.htm The range of consequences of "emergency power" is vast, and traces of its affect is found in many governmental regulations and legislation. We're adding documents to our site as we find them, from the Departments of State, Defense and Commerce: http://jya.com/crypto.htm

1 0

128_bit
by John Young 17 Dec '03

17 Dec '03

2-26-97. "Security Dynamics Unveils RSA SecurPC 2.0" The package is claimed to the first 128-bit encryption software to be exported from the US and its territories, and allows companies to implement "seamless, full-strength encryption" worldwide. ----- 128_bit

3 2

Counterintel Center
by John Young 17 Dec '03

17 Dec '03

The National Counterintelligence Center (NACIC) announced today in the Federal Register a new system of records. There's an explanation of the NACIC and what it tries to do, reciting the James Angleton/Aldrich Ames myrrh mantra. http://jya.com/ncc022797.txt The new records system includes: "6. Compromised Names Database. The purpose of the database is to notify US intelligence community personnel whose names were potentially compromised as a result of espionage or other foreign intelligence collection activity. NACIC reviews pertinent reports to determine documents that were possibly passed in a particular case and then reviews those documents for names. The database contains the names of persons potentially compromised, date of the memo sent to the person or their employer informing them, the document number of where the person's name came from, document title, and document date."

1 0

Re: Presidential decrees and emergency powers
by John Young 17 Dec '03

17 Dec '03

We've put the full 50USC Chapter 35 -- International Emergency Economic Powers at: http://jya.com/50usc35.txt (284K) Section 1701 is the great bulk of it, and describes the purpose of emergency economic power. And lists the current enemies -- rogue nations and terrorists -- used, as were predecessors, to justify its never-ending renewal.

1 0

No Subject
by Voters Telecommunications Watch 17 Dec '03

17 Dec '03

======================================================================== PRO-CODE BILL ANNOUNCED TODAY BILL WOULD LIBERATE ENCRYPTION FROM ANTIQUATED COLD-WAR REGULATIONS February 27, 1997 Please widely redistribute this document with this banner intact until March 15, 1997 From the Center for Democracy and Technology (CDT), the Electronic Frontier Foundation (EFF), and the Voters Telecommunication Watch (VTW) ________________________________________________________________________ CONTENTS The Latest News What You Can Do Now Background On Pro-CODE What's At Stake For More Information / Supporting Organizations ________________________________________________________________________ THE LATEST NEWS Today, a bi-partisan group of seventeen United States Senators, led by Conrad Burns (R-MT) and Patrick Leahy (D-VT), introduced the "Promotion of Commerce Online in the Digital Era (Pro-CODE) Act", a bill designed to promote privacy and security on the Internet by relaxing government controls on encryption technologies. Encryption technologies are the locks and keys of the Information age -- enabling individuals and businesses to protect sensitive information as it is transmitted over the Internet. Pro-CODE aims to enable this by removing some of the regulations that currently prevent Americans from using this technology. A short summary of the bill and background on the encryption policy debate are attached below, along with information on what you can do to help ensure that Congress takes action on this important issue. ________________________________________________________________________ WHAT YOU CAN DO NOW 1. CALL THE Pro-CODE SPONSORS AND THANK THEM FOR THEIR EFFORTS Members of Congress tend to hear from their constituents only when they do something constituents don't like. Today however, several Senators have taken a stand on an issue of critical importance to Internet users. It's crucial that we encourage them with phone calls of support. If you live in any of the states listed below, please take a moment to give these Senators a call. Allard (R-CO) Ashcroft (R-MO) Boxer (D-CA) Brownback (R-KS) Burns (R-MT) Craig (R-ID) Dominici (R-NM) Dorgan (D-ND) Faircloth (R-NC) Grahms (R-MN) Hutchison (R-TX) Inhoffe (R-OK) Kempthorne (R-ID) Leahy (D-VT) Lott (R-MS) Murray (D-WA) Nickles (R-OK) Thomas (R-WY) Wyden (D-OR) Please take a moment to give these Senators a call. <Dial 1-202-224-3121> <ring ring!> You:Senator Mojo's office please! Sen:Hello, Senator Mojo's office! You: SAY I heard that the Senator introduced Pro-CODE to add more privacy on THIS-> the Internet. Please thank the Senator for me and I support efforts to fix antiquated encryption export laws. I live in <your state>. Sen:Ok, thanks!<click> 2. ADOPT YOUR LEGISLATOR If you were one of the thousands of people that have adopted their legislator at http://www.crypto.com/, you would have received a personalized letter telling you that your legislator announced his or her sponsorship of Pro-CODE today. These personalized letters contain all the phone numbers you need, and we'll send them to you any time your legislator takes any action that would have a significant impact on the net. The Adopt Your Legislator campaign is the most effective method of mobilizing grass-roots support available today. Since late last year, VTW and CDT have been building a network of thousands of Internet users who are active and engaged in the fight for privacy and security on the Internet. By focusing our efforts on the constituents of specific legislators as well as on the net as a whole, we can ensure that members of Congress know that they have support within their district as well as throughout the Internet community. You can adopt your legislator at http://www.crypto.com/adopt/ ________________________________________________________________________ BACKGROUND ON THE PRO-CODE BILL The Promotion of Commerce Online in the Digital Era (Pro-CODE) Act is similar to a bill introduced by Senators Burns (R-MT) and Leahy (D-VT) last year (then S.1726). Pro-CODE enjoyed broad bi-partisan support in the Senate and was the subject of 3 hearings, including 2 which were cybercast live on the Internet. This year's Pro-CODE bill (no bill number yet available) is designed to encourage the widespread availability of strong, easy-to-use encryption technologies to protect privacy and security on the Internet. Specifically, Pro-CODE would: 1. Encourage the widespread availability of strong privacy and security products by relaxing export controls on encryption technologies that are already available on the mass market or in the public domain. This would include popular programs like Pretty Good Privacy (PGP) and World Wide Web browsers like those made by Netscape and Microsoft. Current US encryption policy restricts export of encryption products with key-lengths of more than 40 bits. A recent study by renowned cryptographers including Whit Diffie (one of the fathers of modern cryptography), Matt Blaze, and others concluded that 40 bits is "woefully inadequate" to protect personal and business communications. Over the last eighteen months, several examples of the weakness of 40-bit encryption have been demonstrated by college students with spare personal computers. 2. Prohibit the federal government from imposing mandatory key-escrow or key-recovery encryption policies on the domestic market and limit the authority of the Secretary of Commerce to set standards for encryption products. 3. Require the Secretary of Commerce to allow the unrestricted export of other encryption technologies if products of similar strength are generally available outside the United States. For more information on the Pro-CODE bill, background information on efforts to pass encryption policy reform legislation last year, and other materials please visit: For more information, see the Encryption Policy Resource Page at http://www.crypto.com/ ________________________________________________________________________ WHAT'S AT STAKE Encryption technologies are the locks and keys of the Information age -- enabling individuals and businesses to protect sensitive information as it is transmitted over the Internet. As more and more individuals and businesses come online, the need for strong, reliable, easy-to-use encryption technologies has become a critical issue to the health and viability of the Net. Current US encryption policy, which limits the strength of encryption products US companies can sell abroad, also limits the availability of strong, easy-to-use encryption technologies in the United States. US hardware and software manufacturers who wish to sell their products on the global market must either conform to US encryption export limits or produce two separate versions of the same product, a costly and complicated alternative. The export controls, which the NSA and FBI argue help to keep strong encryption out of the hands of foreign adversaries, are having the opposite effect. Strong encryption is available abroad, but because of the export limits and the confusion created by nearly four years of debate over US encryption policy, strong, easy-to-use privacy and security technologies are not widely available off the shelf or "on the net" here in the US. Because of this policy problem, US companies are now at a competitive disadvantage in the global marketplace. All of us care about our national security, and no one wants to make it any easier for criminals and terrorists to commit criminal acts. But we must also recognize encryption technologies can also aid law enforcement and protect national security by limiting the threat of industrial espionage and foreign spying. What's at stake in this debate is nothing less than the future of privacy and the fate of the Internet as a secure and trusted medium for commerce, education, and political discourse. ________________________________________________________________________ FOR MORE INFORMATION / SUPPORTING ORGANIZATIONS This alert was brought to you by the Center for Democracy and Technology, the Electronic Frontier Foundation, and the Voters Telecommunications Watch. http://www.cdt.org http://www.eff.org http://www.vtw.org There are many excellent resources online to get up to speed on the crypto issue including the following WWW sites: http://www.crypto.com http://www.privacy.org Please visit them often. Press inquiries should be directed to: Jonah Seiger of CDT at jseiger(a)cdt.org or +1.202.637.9800 Stanton McCandlish of EFF at mech(a)eff.org or +1.415.436.9333 Shabbir J. Safdar of VTW at shabbir(a)vtw.org or +1.917.978.8430 (beeper). ________________________________________________________________________ End alert ========================================================================

1 0

Re: Senate spams
by dlv＠bwalk.dm.com 17 Dec '03

17 Dec '03

ichudov(a)algebra.com (Igor Chudov @ home) writes: > adam and others, > > sorry i was not able to read the list before and did not know > about the senate spam. > > i vaguely recall the us senate voting in droves to elect david c > lawrence <tale(a)uunet.uu.net> kook of the month june 1996... but the > truth prevailed. They voted from their accounts on algebra.com, didn't they? --- Dr.Dimitri Vulis KOTM Brighton Beach Boardwalk BBS, Forest Hills, N.Y.: +1-718-261-2013, 14.4Kbps

1 0

New Breakthrough!
by JGarrett 17 Dec '03

17 Dec '03

FOUR GIANTS MERGE TO CREATE NEW SUPER MLM Four established companies (one of which is a multi-million dollar INTERNATIONAL company) come together to create new and dynamic MLM with unique Unilevel/Binary Pay Plan which features the benefits of both--the quick income possibility with a binary and the residual of a unilevel. . The combined annual revenue of these four companies will stagger your imagination. Pre-Registration for top position has just started. This program offers the opportunity of a lifetime. We currently need individuals who are proven leaders. If you have a proven ability to lead people then this opportunity maybe for you. Contact me immediately for consideration. We already have over 400 members pre-registered in one leg and are now just beginning to work on the other (we currently have 2 in our second leg with only two legs to work on). No money is required to RESERVE your distributor position. You may change your mind with NO OBLIGATION once you have all the facts as to the new program. Have your downline reserve their positions now. We guarantee we will honor your sponsorship of anyone that you have reserved their position. I am working directly with the front-line to the company! Products include Electronic, Health and Beauty, Nutrition, Hi-tech devices, Automotive, Telecommunications and More. Residual Income assured with world class leadership and cutting edge products. Reply now for full details. ----------------------------------------------- Garrett Management Intl. 801-375-5541 homebc(a)homebc.com

1 0

Re: SigFile
by Toto 17 Dec '03

17 Dec '03

And this precious gem came from mark green. | ,@ __|-. ,_~o/ \/ | Through the router, off the switch, |/ | down the cable, nothing but net. / > | ' ` | The @Home slam dunk | __________________| -- Toto ----------------------------- "The Xenix Chainsaw Massacre" http://bureau42.base.org/public/xenix/xenbody.html

1 0

More EI Public Comments
by John Young 17 Dec '03

17 Dec '03

BXA has listed two more public comments on encryption transfers at its Web site: 44. Electronic Messaging Association 45. American Electronics Association BXA's PDF versions at: http://www.bxa.doc.gov/44-.pdf (420K) http://www.bxa.doc.gov/45-.pdf (339K) Our HTML conversions at: http://jya.com/bxapc44.htm (17K) http://jya.com/bxapc45.htm (16K)

1 0

EU and FBI Wiretap Scheme
by John Young 17 Dec '03

17 Dec '03

This sounds like what Spook Herson admitted in his interview: February 25, 1997 Report: Europe OKs Wiretap Rules London (AP) -- Europe has agreed to establish international standards with the U.S. Federal Bureau of Investigations to enable authorities to tap telephones and messages sent by fax, telex and e-mail, a London newspaper reported Tuesday. The Guardian newspaper said it obtained a preliminary agreement signed by European Union nations in 1995 that calls for telecommunications companies to provide security agencies with the key to codes installed in equipment sold to customers. The newspaper report could not be confirmed independently. The aim of the alliance between U.S. and EU agencies was to set a common standard for "international interception,'' the newspaper reported. Full details on the agreement are being drawn up by officials working in European Union committees, it said. The report said European officials drafted a memorandum of understanding after Britain warned that mobile telephone systems in the hands of organized criminals posed an international threat. ---------- Thanks to D. If anyone has the Guardian article, a copy would be appreciated. Fax to: (US) 212-799-4003 Or scan it and send e-mail to <jya(a)pipeline.com>.

1 0

Re: Strange Looks
by Toto 17 Dec '03

17 Dec '03

Mike Denney wrote: Subject: new regulations Sent: 2/25/97 11:31 PM Received: 2/25/97 3:49 PM From: Ken Wallace, kwallace(a)pragma.com To: larry(a)dentistat.com TO ALL EMPLOYEES It has been brought to the management's attention that some individuals have been using foul language in the course of normal conversation between employees. Due to complaints from some more easily offended workers, this conduct will no longer be tolerated. The management does, however, realize the importance of each person being able to properly express their feelings when communicating with their fellow employees. Therefore the management has compiled the following code phrases, so that the proper exchange of ideas and information can continue. Old Phrase New Phrase ---------- ---------- No fucking way I'm not certain that's feasible. You've got to be shitting me Really? Tell someone who gives a fuck Perhaps you should check with ... Ask me if I give a fuck Of course I'm concerned. It's not my fucking problem I wasn't involved in that project. What the fuck? Interesting behavior. Fuck it, it won't work I'm not sure I can implement this. Why the fuck didn't you tell me I'll try to schedule that. that sooner? When the fuck do you expect me to Perhaps I can work late. do this? Who the fuck cares? Are you sure it's a problem? He's got his head up his ass He's not familiar with that problem. Eat shit You don't say. Eat shit and die Excuse me? Eat shit and die motherfucker Excuse me, sir? What the fuck do they want from me They weren't happy with it? Kiss my ass So you'd like help with it? Fuck it. I'm on salary I'm a bit overloaded at the moment. Shove it up your ass I don't think you understand. This job sucks I love a challenge. Who the hell died and made you boss You want me to take care of this? Blow me I see. Blow yourself Do you see? Another fucking meeting Yes, we should discuss this. I really don't give a shit I don't think it will be a problem. Fuck you How nice. How very nice! -- Toto ----------------------------- "The Xenix Chainsaw Massacre" http://bureau42.base.org/public/xenix/xenbody.html

1 0

More on EU and FBI Wiretapping
by John Young 17 Dec '03

17 Dec '03

Thanks to CA: EPIC reports today on the EU-FBI wiretap pact. It gives this URL for the source document which lays out the interception deception: http://www.privacy.org/pi/activities/tapping/ See EPIC's full report at: http://www.epic.org/ [1] New Report Details FBI/European Tapping Agreements [2] Airline Security Report Released [3] Briefs Filed in Reno v. ACLU Internet "Indecency" Challenge [4] Crypto Legislation Introduced [5] Clipper Upgrade at DOD/Litigation Update [6] State Department Reports Widespread Illegal Wiretapping Worldwide [7] New Medical Privacy Survey [8] Upcoming Conferences and Events

1 0

ZKP
by nobody＠jefferson.hidden.net 17 Dec '03

17 Dec '03

Tim C[ocksucker] Mayo must have been sharing needles with a rabid hedgehog. o-:^>___? Tim C[ocksucker] Mayo `~~c--^c'

2 1

Look what SPAM I got today [Customers for You !!!]
by Jean-Francois Avon 17 Dec '03

17 Dec '03

Hi Cypherpunks. Long time no lurk. Too busy defending the right to own unregistered guns and getting involved in local politics to dwell on the shortfalls of OS/2 PGP shells for PM GUI. PGP apps for OS/2 sucks! Anyhow, if you have any comments on the forwarded message, please Cc me. Is there a limit to spamming? Is there a way to attach nitroglycerine to an e-mail reply? ( I know Jim Bell has a few suggestions about that... :-) Ciao all JFA ------- Forwarded Message Follows ------- Date: Thu, 27 Feb 1997 12:06:09 -0500 (EST) From: Quantum Communications <sales(a)quantumcom.net> To: "jctracey(a)sprynet.com" <jctracey(a)sprynet.com> Subject: Customers for You !!! Would you like more customers? Visit http://www.quantcom.com Everyone knows that the hottest way to find new customers and market your business is via direct Email. Quantum Communications offers direct Email advertising services, and related marketing services, with the following highlights: ------> Guaranteed Response Rate! Up to 3% Guaranteed Response. ------> 100% Approved Financing! No Credit Checks! ------> Never Again Get Shut Off By Your ISP! We Offer Flame-Filtering & Free Auto-Responders! ------> Targeted Mailings, Using Custom-Built Lists With Your Parameters. ------> 5 Million Recipient Co-op "The Mega-Mailer" is available. ------> Stand-Alone Mailings Available. ------> Wholesale Unlimited Access To Our "Self-Service" SMTP Mail Servers Available. ------> Ad Copy Design & Revision Available. ------> "Floodgate" Bulk E-Mail Software Available. Quantum Communications also offers Virtual Servers complete with full POP3 Email accounts and domain registration, lists of Email addresses for sale, search engine submissions, newsgroup posting announcements, and web page design. Call our Sales Department at (603) 772-4096 for details, or Visit our website at http://www.quantcom.com You may also send an email to our autoresponder: info(a)quantcom.com or direct specific questions to sales(a)quantcom.com Thank you for your time. ------- end of forwarded message ------ -- Jean-Francois Avon, Pierrefonds(Montreal) QC Canada JFA Technologies, R&D consultants. physicists, engineers and technologists. PGP keys at: http://w3.citenet.net/users/jf_avon and: http://bs.mit.edu:8001/pks-toplev.html ID# C58ADD0D : 529645E8205A8A5E F87CC86FAEFEF891 ID# 5B51964D : 152ACCBCD4A481B0 254011193237822C

1 0

DNSSEC Encryption for DNS registration and ITAR Nonsense
by Bill Stewart 17 Dec '03

17 Dec '03

At 10:14 AM 2/12/97 -0500, "Donald E. Eastlake 3rd" <dee(a)cybercash.com> wrote: >People may want to note that yesterday (Feb 11th) the IESG approved the DNS >dynamic update and DNS secure dynamic update (draft-ietf-dnssec-update-04.txt >and draft-ietf-dnsind-dynDNS-11.txt) as Proposed Standards. The base DNS >security protocol was approved some time ago and is now out as RFC 2065. Details are on http://www.tis.com/docs/research/network/dns.html It's a very interesting page - pointers to the RFC http://ds.internic.net/rfc/rfc2065.txt , and downloadable beta code from TIS implementing it. Cool stuff. But then there's the politial correctness part of the web page :-) > Trusted Information Systems, Inc. has received approval from the > United States Government for export and reexport of TIS/DNSSEC software > from the United States of America under the provisions of the Export > Administration Regulations (EAR) General Software Note (GSN) license > exception for mass market software. Under the provisions of this license, > this software may be exported or reexported to all destinations except > for the embargoed countries of Cuba, Iran, Iraq, Libya, North Korea, > Sudan and Syria. Any export or reexport of TIS/DNSSEC software to the embargoed > countries requires additional, specific licensing approval from the > United States Government. Yup. Can't let those Cubans secure their DNS..... At least the government did decide to permit export. # Thanks; Bill # Bill Stewart, +1-415-442-2215 stewarts(a)ix.netcom.com # You can get PGP outside the US at ftp.ox.ac.uk/pub/crypto/pgp # (If this is a mailing list, please Cc: me on replies. Thanks.)

2 1

STU-III Usage
by Jim Conrad 17 Dec '03

17 Dec '03

Bill Stewart wrote: >Back when the STU-III was still called the "Future Secure Voice System" >the DoD was telling manufacturers they'd probably sell 500,000 of them, >between the DoD unclassified work, law enforcement users, defense >contractors, and similar riff-raff. I don't know how many were actually >sold, but I'd be surprised if it's a tenth of that; the government >was too cheap to spend $2-3K per box for that many users. I'm ex-Navy and worked as a contractor for the last 5 years since I got out. >From my operational experience and exposure to certain area's I would have to say that 500,000 might be more accurate than you suspect. They are used at most Navy facilities as the "standard" desk phone when the command requires operational security telecommunications access. Personnel Offices etc., probably don't have but one or two per facility but sites requiring them have them everywhere. Likewise most contractor facilities that require secure telecommunications have them available as well. ..Jim <:><:><:><:><:><:><:><:><:><:><:><:><:><:><:><:><:><:><:><:><:><:><:><:> <:> Jim Conrad - Ocean View Communications - jjc(a)infi.net <:> <:> 757-490-8127 Office - 757-587-8251 Fax - 757-473-6740 Pager <:> <:><:><:><:><:><:><:><:><:><:><:><:><:><:><:><:><:><:><:><:><:><:><:><:>

1 0

Clipper Chip Banking
by KALLISTE＠delphi.com 17 Dec '03

17 Dec '03

Clipper Chip Banking by J. Orlin Grabbe Sandia National Laboratories have created the digital cash equivalent of the Clipper chip: an "anonymous" digital cash system that would give participants privacy from all viewers, except for the government agencies that would control the secret keys required for backdoor access. Just as the "Clipper" proposal (the Escrowed Encryption Standard) is a system of encrypted communication with a Big Brother peephole, so is Sandia e- cash a system of digital cash with a Big Brother peephole. It was designed that way. Why is Sandia interested in digital cash systems? Well, Sandia is responsible for all non-nuclear components of nuclear weapons. The security of nuclear weapons depends partly on cryptology. The code- breaking National Security Agency (NSA), for example, is responsible for the communication security of the Minuteman missile, as well as the codes by which the President must identify himself to authorize a nuclear strike. The use of nuclear weapons is normally based on a trustee system: two or more people are necessary to give the complete authorization code. The NSA used this idea as the basis for the Clipper chip: two designated trustee agents would each have knowledge of one-half the chip-specific unique key by which to decode the session key that encoded a particular communication passing through the chip. The Clipper chip was originally proposed for incorporation into every digital communication device: computer, fax, and cable TV. The sales aspect of Clipper was a new encryption algorithm based on 80- bit encryption keys. Financial and other institutions had begun to worry about the security of the Data Encryption Standard (DES) which uses 56- bit keys. An 80-bit key space would be 2^24 times as large as the DES key space. The catch was that acceptance of the new algorithm would involve acceptance of the NSA backdoor. At the present time, the financial industry has said, "No, thank you," and is focusing on triple-DES, which has the security equivalent of 112-bit encryption keys, and no backdoor. Sandia e-cash is a simple extension of the trustee notion. Sandia e-cash was announced as "the first electronic cash system that incorporates trustee-based tracing, while provably protecting user anonymity". The trustees in this case are key-escrow agents, and a minimal subset of them (say three out of five) would be able to combine their knowledge to trace an individual's electronic transactions. The fact that several agents would need to act in concert "protects users from the possibility that one or two trustees might be corrupt". (In other words, depending on the level of official corruption, the system would either be somewhat secure, or totally insecure.) Anonymity or privacy in financial transactions generally means an inability to determine an individual's spending patterns. Anonymity requires first and foremost protection from the prying eyes of the bank. If the bank knows what is going on in your account, then potentially so can anyone else: the records can be seized, or surreptitiously accessed by computer, or a bank employee can be bribed to make them available. (In this respect, it is useful to note that the system of Swiss numbered accounts was created to protect bank customers from bank employees. Bank employees, observing what occurred in a customer's account, could possibly subject the customer to blackmail.) Anonymity involves several aspects, including "unlinkability" and "untraceability". "Unlinkability" refers to the inability of a bank (even colluding with merchants) to determine that two payments were made by the same user. To understand this, consider the opposite case: your monthly American Express or credit card bill. Such a statement contains a set of transactions which are all linked by a common element--your AMEX or credit card account number. Because these payments are linked, they present a limited picture (a subset) of your behavior, movements, and habit patterns. Your private behavior is potentially public information. Unlinkability is therefore an aspect of anonymity. Because linkability in anonymous digital cash involves cryptological protocols, it is actually a probability concept: how probable is it that two payments can be accurately identified as having been made by the same user? Unlinkability means such probability is negligible. "Untraceability" refers to the inability of a bank to match withdrawals of digital cash with subsequent payments. To have untraceability, the information a person reveals about himself by making payments must be statistically independent of the information a person reveals about himself by making withdrawals. Of course if the bank, even when colluding with merchants, can't link or trace a person's transactions--even in probability terms- -then neither can FINCEN or the NSA. Anonymity and privacy thus ultimately hinges on concealing this type of information from the bank itself. But such anonymity, naturally, raises the issue of the selectively- enforced money-laundering laws. The prevention of money-laundering is stated as a principal raison d'tre for Sandia's e-cash system of non-anonymous "anonymity": "Money laundering . . . is hampered by physical cash and would be made easier by a completely anonymous electronic counterpart. . . . With anonymous e-cash, money- laundering would be as simple as depositing one set of electronic "coins" in an account under an assumed name and withdrawing another set from the same account." (Peter S. Gemmel, "Traceable e-cash," Technology and the Electronic Economy, IEEE Spectrum, February 1997.) To prevent such nefarious activity, Sandia even envisions one future world in which individuals would be required to submit regular reports of their financial transactions to the government: "In a different trustee-based e-cash system, the users' "wallet" software would require them to supply the authorities from time to time with transaction records stored in their electronic wallets and encrypted with their tracing keys." (Ibid.) This proposal is somewhat similar to a requirement to regularly send one's bank statements to the IRS for filing, with a committee controlling access to the file cabinet. While Sandia ponders the future needs of Big Brother government, over at the Treasury, meanwhile, Robert Rubin has appointed the Comptroller of the Currency, Eugene Ludwig, as the point man to oversee government efforts to keep a peephole into every bank account. To this end, Ludwig--when he is not attending Clinton coffee- klatsches--coordinates the electronic cash spying plans of FINCEN, U.S. Customs, the IRS, the Secret Service, ATF, and the Office of Foreign Assets Control. February 27, 1997 Web Page: http://www.aci.net/kalliste/

3 2

Re: 128_bit
by Vin McLellan 17 Dec '03

17 Dec '03

>2-26-97. Newsbytes: > >Security Dynamics Unveils RSA SecurPC 2.0 > > Wokingham, England, By Steve Gold. Security Dynamics has unveiled > RSA SecurPC 2.0, the latest version of its software-based > encryption software. The package is claimed to the first 128-bit > encryption software to be exported from the US and its territories. No such luck. This is a press report that seems a little confused... which is say that it is, at least, a bit premature. SecurPC has a useful feature which allows for a self-decrypting file to be created with its 128-bit (symmetric) RC4 cipher. RSADSI got the NSA to agree that this self-decrypting file could be transmitted outside the US because the packaged implementation is restricted to merely decrypting the file -- with a key (password) to be passed out of band: by hand, letter, phone, etc. (The free trial version of SecurPC, which can be downloaded from the RSADSI and SDTI websites, is enabled with only the limited key-length RC4 encryption -- still the only type of crypto now allowed to be freely exported outside the US. The domestic product, as sold, offers full128-bit RC4.) The major enhancement in the 2.0 version of SecurPC, as I recall, is that it offers transparent, on the fly, decryption of a secured file, as you open the relevant application on your PC. Suerte, _Vin Vin McLellan + The Privacy Guild + <vin(a)shore.net> 53 Nichols St., Chelsea, MA 02150 USA <617> 884-5548

1 0

No Subject
by Mix 17 Dec '03

17 Dec '03

Timmy Maya's reheated, refurbished, and regurgitated cud is completely inappropriate for the mailing lists into which it is cross-ruminated. \\\ {OQ} (_)

1 0

WELL WORTH READING
by dcgroup＠erols.com 17 Dec '03

17 Dec '03

I hope this e-mail finds you well. No need to hit the reply buttom if you want to be deleted from my mailing list as this program you are about to review is one you will only receive once and need to reply to stay on it. Needless to say we have a lot of confidence in this program. Good luck if you decide not to order this program. Pre- paration will meet opportunity (which will equal success) if you make the right choice. If you still feel the need to ask to be removed go ahead. I will oblige your request. ***** THE PROGRAM FEBRUARY 27, 1997 ***** Do you want to start a business that doesn't have the hassles of inventory, accounts receivable, accounts payable, or depreciating equipment. This program does it. This is accomplished by starting an investing business. No mlm here. No hidden tricks. Have you ever wondered what the most successful investors in the world know that you don't? Their "secrets" allow them to turn a small amount of money into a large amount CONSISTENTLY. One of their secrets has returned them over 100% on average per year, year in, year out for over 10 years. if you are willing to part with $32.95 (this in- cludes $3 shipping and handling) we are willing to part not only with this secret but with the following 3 reports, each of which is well worth the price of admission: 1) A second secret that has returned over 100% year in, year out for these in- vestors. When combined with the first secret you get over 300% year in, year out for the investors. $1,000 can be turned into $1,000,000 in 5 years. if you have 5 years but not the $1,000 see the second part of this e-mail. 2) 4 stocks that will double this year. Actually three, the best one is featured in part two of this e-mail. 3) 4 "events" which could cause the market to crash in 1997. ***** PART TWO ***** So you have five years but not $1,000. To show you we know how to make money we will "give" you a stock that we feel is ready to "pop". The company does not know we are doing this. This is a freebie so don't forget to send us a thank you note. KENSINGTON RESOURCES KNSRF on the nasdaq exchange - current price, about $1.00 a share KRT on the vancouver exchange - current price, $1.30 a share Kensington Resources' homepage - http://www.kensington-resources.com/ Kensington's Silicon Investor site (a "chat room" about kensington)- http://www3.techstocks.com/investor/subject-3653 Kensington target prices: $3.50 U.S. by 4/15, $7 by 12/31 KNSRF is part of a four company joint venture (a debeers subsidiary is one of the other companies) that has 71 kimberlite (the host material for diamonds) pipes. 57 have been shown to be diamondniferous. About 34 of these pipes are macrodiamond (the larger diamonds) meaning KNSRF's jv has close to 20% of the world's known macrodiamond bearing pipes. The pipes contain 6 billion tonnes of kimberlite. With this much going for it, KNSRF we feel has an explosive upside that will be realized partially in 1997. We believe KNSRF can reach $7 or more a share U.S. by 12/31/97. Do your own due diligence and we think you'll agree. PLEASE KEEP IN MIND WE ARE NOT INVESTMENT ANALYSTS. THIS IS NOT A SOLICITATION NOR A RECOMMENDATION TO BUY ANY STOCKS. DO YOUR OWN DUE DILIGENCE. THE ONLY RECOMMENDATION WE MAKE IS THE PURCHASE OF OUR PROGRAM. BELOW IS THE INFORMATION YOU NEED TO ORDER IT. PAST PERFORMANCE IS JUST THAT, PAST PERFORMANCE. FUTURE PERFORMANCE IS YET TO BE DETERMINED. WE FEEL WE KNOW HOW TO MAKE MONEY BUT WE WILL NEVER FEEL WE KNOW HOW TO PREDICT THE FUTURE. Instructions to order. Send a check or money order (payable to The DC Group) for $32.95 to: The DC Group Suite 331 1127 High Ridge Road Stamford, CT 06905 PLEASE INCLUDE YOUR E-MAIL ADDRESS AND YOUR MAILING ADDRESS WITH YOUR PAYMENT.

1 0

$7,000 in your mailbox!!!
by KFLT 17 Dec '03

17 Dec '03

Hello, Our research has shown that this may be of interest to you. If not please accept our apology. By not replying you will be removed from any future mailings. This messege will only be sent to you once. Thank You =============================================== Would you spend $5 in order to receive $7000 in return? Email DavFic(a)aol.com for FREE Information NOW!!!

1 0

Sphere packings
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Tim C[ocksucker] May's 16Kb brain's single convolution is directly wired to his rectum for input and his T1 mouth for output. That's 16K bits, not bytes. Anal intercourse has caused extensive brain damage. __ ___|[]| Tim C[ocksucker] May \__|______| /-(o_o_o_o)

1 0