December 2003 - cypherpunks-legacy

JOBOP Systems Engineer
by 915604＠candseek.com 17 Dec '03

17 Dec '03

Since your email address was listed on a related web site page or database, I thought you might help. I am seeking an individual within the following conditions: I am working for one of the leading technology software companies in the Business software industry. We are seeking people experienced in Unix system and/or Windows NT administration. This person will work in any of three areas (New Jersey, Pennsylvania and Ohio) They will join either of two groups; Systems Engineering or Post Sales Implementation. This position requires; 3-5 years experience with Unix and/or Windows NT administration, prior experience in project management or pre-sales support of software product, excellent communication skills, a solid understanding of network management, GREEN CARD (minimum) and ability to travel within a well-defined territory(and occasionally, outside the territory). We offer an opportunity to become involved with leading edge technology, and excellent compensation package (to $80,000 plus bonus), outstanding benefits (including company paid medical and dental, 401K, tuition reimbursement etc.), outstanding working environment and an opportunity to work for one of the largest, most recognizable companies in the software industry . Geographic Location of Position: New Jersey, Pennsylvania or Ohio If you know anyone that might be interested, please forward this to them or contact: Dave Eide Quest_IT Voice: 609-584-9000 ext. 273 Fax: 609-584-9575 Email: 915604(a)candseek.com

1 0

National Security KRA Framework
by John Young 17 Dec '03

17 Dec '03

These are excerpts from US Patent 5835596: "International cryptography framework" issued on November 10, 1998, to inventors Keith S. Klemba, Santa Clara, CA, and Roger Merckling, Gieres, France and assigned to Hewlett Packard. Source: http://www.patents.ibm.com/patlist?icnt=US&patent_number=05835596&x=19&y=4 It's an update of US Patent 5651068 issued for the same methodology in July, 1997. Summaries of the patents are also available at < http://www.uspto.gov >. INTERNATIONAL CRYPTOGRAPHY FRAMEWORK SUMMARY OF THE INVENTION The invention provides a four-part technology framework that supports international cryptography, which includes a national flag card, a cryptographic unit, a host system, and a network security server. Three of the four service elements have a fundamentally hierarchical relationship. The National Flag Card (NFC) is installed in the Cryptographic Unit (CU) which, in turn, is installed into a Host System (HS). Cryptographic instructions on the Host system cannot be executed without a Cryptographic Unit, which itself requires the present of a valid National Flag Card before its services are available. The fourth service element, a Network Security Server (NSS), can provide a range of different security services including verification of the other three service elements. The framework supports the design, implementation, and operational elements of any and all national policies, while unifying the design, development, and operation of independent national security policies. The invention thus gives standard form to the service elements of national security policies, where such service elements include such things as hardware from factors, communication protocols, and on-line and off-line data definitions. [Snip drawing and detailed descriptions.] APPLICATION OF THE FRAMEWORK The invention has various applications. In particular, the framework is ideally suited for various national security schemes and operates consistently across a variety of local laws. For example the framework could be used to support a key escrow policy. Key escrowing is a process where the keys or family keys used for cryptography are kept by a third party, in the national context, typically a government agency. This allows the third party to decrypt information when, for example, a law enforcement agency is required to see the contents of an encrypted message. For example if the policy of nation-X requires key escrow, then when nation-X NFC's are put into circulation they contain a key escrowed by nation-X. Law enforcement would be able to use the electronic stamp on a message to determine that the message was encrypted under the policy of nation-X. It would also be able to determine unique identification information of the specific NFC used to enable the CU. If nation-X agrees to cooperate, the escrowed key for the NFC involved may be obtained to decrypt the suspicious message. The actual encryption algorithm used in nation-X may be the same encryption algorithm that is used in nation-Z, such that when a user from nation-X visits nation-Z it is only necessary to put a NFC from nation-Z into the CU. The encryption algorithm in the CU remains the same, but what is governing the use of cryptography is the policy of nation- Z. For example, the policy of nation-Z may require a trap door, such that the government of nation-Z is able to take a back door into the users system to read the deciphered text. In this case the nation-Z NFC provides a back door rather than an escrowed key to law enforcement. Several such schemes are known in the art and it is a feature of the invention that the framework is readily adapted to accommodate such schemes as may be implemented in a particular national policy without affecting the basic hardware, or data structures of a user system, with the exception of the NFC. Thus, the encryption algorithms in CU may be the same encryption algorithms used everywhere. The NFCs control the use of these encryption algorithms in accordance with the local law. Because the NSS is a trusted third party that validates proper local use of the framework, it is not possible to use cryptography unless a locally accepted NFC is installed in the CU. In the example above, even though the encryption engine operates properly in nation-X, it would not operate in nation-Z unless the NFC was replaced with a nation-Z's NFC. For international communication of encrypted information, (e.g. where an encrypted message is generated in nation-Z and sent to nation-X) the involvement of cryptography for such messages will be independently controlled by two NFCs -- the X flag card in nation-X and the Z-flag card in nation-Z. The invention therefore offers the ability to support government policy, whatever that policy may be, and still provide uniform cryptographic services. In addition to the nationalization issues that are illustrated above, within a certain nation there may be multiple encryption policies (e.g. nation-X might have a policy for banking that is more liberal than its policy for manufacturing). Accordingly, the framework is adapted to operate within each country under several different national policies, or with several different levels of encryption. For example, just as there are different stamps for first class and priority mail, the framework may allow for different levels of encryption based on the type of NFC installed. It is a feature of the framework that CUs may have the major standard encryption algorithms built-in (e.g. DES, RSA, DSS, MD5). However, it is also possible to install custom algorithms into the CU providing that the policy in the governing NFC permits this type of activity. Software algorithms can be transferred completely or partially into the CU from either the NFC or the NSS. Hardware algorithms can be added to the CU via the NFC. The actual encryption of a message may involve the NFC, CU, or NSS, or any combination thereof. As soon as the NFC is removed from the CU these custom algorithms are no longer operative, perhaps not even present, in the CU. [End excerpts]

1 0

CJ's Teeth/Glasses
by John Young 17 Dec '03

17 Dec '03

Jeff, Alia Johnson reports that CJ has not had his teeth and glasses returned. Can you tell me, or refer me to someone who can, what is needed to get that done. Or if I have no right to get involved who else should make the request. Got a Fedex account ready for use. Thanks much, John

1 0

Re: FC: More on Network Associates and its crypto-politics
by Anonymous 17 Dec '03

17 Dec '03

Declan McCullagh writes: >TIS supports export controls on encryption products. My article: > http://www.well.com/user/declan/pubs/cwd.shadow.cryptocrats.0298.txt Two problems here. First, you are using the present tense in saying that TIS "supports" export controls, but your article is from nine months ago. There have been many changes since then, including loosening of the crypto export rules, the acquisition of TIS by Network Associates, and a recent statement that TIS has backed off from its leadership role in advocating key recovery. What is TIS's current policy? It certainly sounds like it is changing. You should find out before claiming to know what it is. Second, even in the context of last February, what you wrote is: > Some of the firms selected also endorse restrictions. Trusted Information > Systems recently circulated a policy paper calling for "sensible" > legislation to "make the export of 56-bit current interim DES controls > permanent and permit the export of stronger encryption when it is combined > with a key recovery system." (Which, coincidentally, TIS is happy to sell > you...) At the time, this would have represented a LIBERALIZATION of export laws. 56 bit exports were only allowed in the context of a promise to add key recovery even for 56 bit keys. The statement you have quoted calls for allowing 56 bit key export permanently, and only requiring key recovery for stronger encryption. True, it was not a call for full elimination of restrictions, but it was a step in the right direction. You are falling into the tiresome pattern of extremists who claim that moderates are lackeys for the other side. It's like an anti-abortion fanatic who says that those who oppose murdering abortion doctors are baby killers. Try reporting the facts instead of altering them to fit your biased views.

2 1

What's up with algebra.com?
by Jim Choate 17 Dec '03

17 Dec '03

Hi, Anyone heard what the status of algebra.com is? I've removed them from the SSZ distribution list temporarily, when they come back I'll re-add the site. ____________________________________________________________________ Lawyers ask the wrong questions when they don't want the right answers. Scully (X-Files) The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

2 1

Crypto Coops/Internships (Other Than NSA)??
by Blake Buzzini 17 Dec '03

17 Dec '03

Does anyone know of any cryptology-related coop/internship programs other than the one offered by the NSA? Blake Buzzini, PSU

1 0

Test (algebra.com is back)
by Jim Choate 17 Dec '03

17 Dec '03

Test (algebra.com) is back...

1 0

Crypto Coops/Internships (Other Than NSA)??
by Blake Buzzini 17 Dec '03

17 Dec '03

Does anyone know of any cryptology-related coop/internship programs other than the one offered by the NSA? Blake Buzzini, PSU

1 0

Goldbach's Conjecture - a question about prime sums of odd numbers...
by Jim Choate 17 Dec '03

17 Dec '03

Hi, I have a question related to Goldbach's Conjecture: All even numbers greater than two can be represented as the sum of primes. Is there any work on whether odd numbers can always be represented as the sum of primes? This of course implies that the number of prime members must be odd and must exclude 1 (unless you can have more than a single instance of a given prime). Has this been examined? I'm assuming, since I can't find it explicitly stated anywhere, that Goldbachs Conjecture allows those prime factors to occur in multiple instances. I've pawed through my number theory books and can't find anything relating to this as regards odd numbers. ____________________________________________________________________ Lawyers ask the wrong questions when they don't want the right answers. Scully (X-Files) The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

6 7

A tad more on Goldbach's Conjecture....
by Jim Choate 17 Dec '03

17 Dec '03

Hi, I figure I'll share the thought I'm trailing.... Given Goldbach's Conjecture as true then it has a geometric interpretation. Given a triangle of even area greater than two it can be tiled with a set of triangles, with areas given by primes, exactly. I'm using equilaterals as a test case since they're easy to deal with geometricaly. So, if one can show that this is true then Goldbach's follows. ____________________________________________________________________ Lawyers ask the wrong questions when they don't want the right answers. Scully (X-Files) The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

1 0