December 2003 - cypherpunks-legacy

More on Cellular Encryption Docs
by John Young 17 Dec '03

17 Dec '03

Here's more on the controlled documents for cellular encryption from TIA/EIA we described in a 26 January post to cpunks: Sharon Vargish of TIA (1-703-907-7702) sent the documents after=20 I signed and returned the NDA: TR45.0.A Common Cryptographic Algorithms, Revision B June 21, 1995, 72 pp. (With ITAR notice on every page) TR45.0.A Interface Specification for Common Cryptographic Algorithms, Revision B, August 6, 1996, 15 pp. (No ITAR notice, but=20 "sensitive information should be protected from general=20 distribution.") TR45 Appendix A to PN-3474 (IS-36) October 16, 1995, 10 pp. (ITAR notice on every page.) TR45 Appendix-A to TIA/EIA 627 December 23, 1996, 7 pp. (No ITAR, but "sensitive"notice) "Common Cryptographic Algorithms" (CCA) supercedes the 1992=20 CAVE document, but is considerbly longer -- 72 pp. for the latest compared to 25 pp. for the 1992 version. Here're the CCA's TOC and Introduction: Table of Contents 1. Introduction=20 =A01.1. Notations=20 =A0 =A01.2. Definitions=20 2. Procedures=20 =A0 =A02.1. Authentication Key (A-Key) Procedures =A0 =A0 =A0 =A0 2.1.1. A-Key Checksum calculation =A0 =A0 =A0 =A0 =A0=20 2.1.2. A-Key Verification =A0 =A02.2. SSD Generation and Update =A0 =A0 =A0 =A0 2.2.1. SSD Generation Procedure =A0 =A0 =A0 =A0 =A0=20 2.2.2. SSD Update Procedure =A0 =A02.3. Authentication Signature Calculation Procedure =A0 =A02.4. Encryption Key and VPM Generation Procedure =A0 =A0 =A0 =A0 2.4.1. CMEA key Generation =A0 =A0 =A0 =A0 =A0=20 2.4.2. Voice Privacy Mask Generation =A0 =A02.5. CMEA Encryption/Decryption Procedure =A0 =A02.6. Wireless Residential Extension Procedures =A0 =A0 =A0 =A0 2.6.1. WIKEY Generation =A0 =A0 =A0 =A0 =A0=20 2.6.2. WIKEY Update Procedure =A0 =A0 =A0 =A0 =A0=20 2.6.3. Wireline Interface Authentication Signature=20 Calculation Procedure =A0 =A0 =A0 =A0 =A0=20 2.6.4. Wireless Residential Extension Authentication=20 Signature Calculation Procedure =A0 =A02.7. Cellular Data Encryption=20 =A0 =A0 =A0 =A0 2.7.1. Data Encryption Key Generation Procedure =A0 =A0 = =A0 =A0 =A0=20 2.7.2. Data Encryption Mask Generation Procedure 3. TEST VECTORS =A0 =A03.1. CAVE Test Vectors =A0 =A0 =A0 =A0 3.1.1. Vector 1 =A0 =A0 =A0 =A0 =A0=20 3.1.2. Vector 2 =A0 =A0 =A0 =A0 =A0=20 3.1.3. Test Program =A0 =A03.2. Wireless Residential Extension Test Vectors =A0 =A0 =A0 3.2.1. Input data =A0 =A0 =A0 =A0 =A0=20 3.2.2. Test program =A0 =A0 =A0 =A0 =A0=20 3.2.3. Test Program Output =A0 =A03.3. Data Encryption Test Vector =A0 =A0 =A0 =A0 3.3.1. Input data =A0 =A0 =A0 =A0 =A0=20 3.3.2. Test Program =A0 =A0 =A0 =A0 =A0=20 3.3.3. Test Program Output =20 1. Introduction This document describes detailed cryptographic procedures for=20 cellular system applications. These procedures are used to=20 perform the security services of mobile station authentication,=20 subscriber message encryption, and encryption key and subscriber=20 voice privacy key generation within cellular equipment. This document is organized as follows: =A72 describes the Cellular Authentication, Voice Privacy and=20 Encryption (CAVE) algorithm used for authentication for mobile=20 subscriber equipment and for generation of cryptovariables to=20 be used in other procedures. =A72.1 describes the procedure to verify the manual entry of the=20 subscriber authentication key (A-key). =A72.2 describes the generation of intermediate subscriber=20 cryptovariablcs, Shared Secret Data (SSD), from the unique and=20 private subscriber A-key. =A72.3 describes the procedure to calculate an authentication=20 signature used by cellular base station equipment for verifying=20 the authenticity of a mobile station. =A72.4 describes the procedures used for generating cryptographic=20 keys. These keys include the Voice Privacy Mask (VPM) and the=20 Cellular Message Encryption Algorithm (CMEA) key. Thc VPM is used=20 to provide forward link and reverse link voice confidentiality=20 over the air interface. Thc CMEA key is used with the CMEA=20 algorithm for protection of digital data exchanged between the=20 mobile station and the base station. =A72.5 describes the Cellular Message Encryption Algorithm (CMEA)=20 used for enciphering and deciphering subscriber data exchanged=20 between the mobile station and the base station. =A72.6 describes the procedures for key and authentication=20 signature generation for wireless residential extension=20 applications. =A72.7 describes the ORYX algorithm and procedures for key and mask=20 generation for encryption and decryption in cellular data services. =A73 provides test data (vectors) that may be employed to verify=20 the correct operation of the cryptographic algorithms described=20 in this document. ... [End CCA Introduction] The related CCA Interface Specification "describes the interfaces to cryptographic procedures for cellular system applications" described in the CCA. Its purpose "is to describe the cryptographic functions without revealing the technical details that are subject to" ITAR. The two Appendices A to IS-136 and 627 "contain requirements for=20 message encryption and voice privacy for cellular systems"=20 supplemental to those described in the main documents, the CCA and=20 the CCA Interface Specs. ----- This note will be put with other CAVE info at: http://jya.com/cave.htm Thanks to TIA/EIA for prompt and courteous reply to our requests. Maybe they welcome help persuading USG/NSA to allow stronger crypto and boost the market for cellular systems.

2 1

Junger web site
by Vladimir Z. Nuri 17 Dec '03

17 Dec '03

PJ sent me his web site which others may be interested in, with pointers to Karn and Bernstein: http://samsara.law.cwru.edu/comp_law/crypto_export/ so, essentially, there are now 3 pretty significant cases challenging ITAR on constitutional grounds, which I find highly encouraging. of course the Bernstein case has already had very positive results so far.

1 0

RE: Cyphernomicon by Tim May
by blanc 17 Dec '03

17 Dec '03

From: Toto, quoting the Cyphernomicon 3.5.1 Contrary to what people sometimes claim, there is no ruling clique of Cypherpunks. Anybody is free to do nearly anything, just not free to commit others to course of action, or claim to speak for the "Cypherpunks" as a group (and this last point is unenforceable except through reputation and social repercussions). ......................................................................... Toto, I'm surprised at how seriously you take the underlying anarchist philosophy of the list; you identify so closely with it, and have responded to its moderation as though it really would be "the end of freedom", even though you seem to have appeared, or else come out of lurking, only recently. Is this because you value anarchy, or free speech, or the existence of the Cypherpunks as a unique group of stray cats [ :>) ]? Side note: Since Tim isn't on the list and hasn't been for a month, I've been wondering if it had anything to do with the moderation experiment, although it is unlike him to have left without either an argument or at least some kind of statement about it. .. Blanc

1 0

Libel, Times v. Sullivan
by Greg Broiles 17 Dec '03

17 Dec '03

Someone (Igor?) suggested I said that libel can't be criminalized. I don't think that's correct, but I may have been unclear. I haven't researched the question and can't call to mind a case directly on point, but my hunch is that states may criminalize libel, but a conviction would require that the state prove, beyond a reasonable doubt (because it's a criminal case), and that the defendant acted with actual malice (because the state is seeking to punish speech, and punitive damages in civil cases require proving actual malice). "Actual malice" means that the defendant said something s/he knew was untrue or recklessly disregarded the truth of what s/he said. (This excludes, for example, an "honest mistake" about what's true.) _Times v. Sullivan_, the case which introduced the actual malice standard, discussed Alabama's criminal libel statute - so the Supreme Court, in the mid 60's, didn't seem to have a problem with criminalizing libel. I can't seem to find a criminal libel statute in California; and if I remember correctly the Oregon Legislature contemplated but did not pass one during its last legislative session. Also, people interested in _Times v. Sullivan_ and the interplay between defamation and the First Amendment might find "Make No Law: The Sullivan Case and the First Amendment" by Anthony Lewis (ISBN 0-697-73939-4) of interest. The decision itself is online at <http://www.findlaw.com/scripts/getcase.pl?court=US&navby=case&vol=376&invol =254> - the factual summary of the Sullivan case posted here was not correct, and the first few pages of the opinion provide a description of the underlying facts. Since we've now got Jim Bell arguing that it's obvious that a free and open society must tolerate anything which might be defamatory, and Jim Choate arguing that it's obvious that a free and open society cannot tolerate anything which might be defamatory, I think I'm going to wander away from this discussion confident that the answer is, at least, nonobvious. :) -- Greg Broiles | US crypto export control policy in a nutshell: gbroiles(a)netbox.com | http://www.io.com/~gbroiles | Export jobs, not crypto. |

1 0

Re: "Secret" Postal Device stolen
by Robert Rothenburg 'Walking-Owl' 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- On 1 Feb 97 at 9:39, Duncan Frissell wrote: > Mail Storage Box keys? I think they use combination locks, actually. Supposedly it's the same combination nationally too. There was an article in 2600 Magazine about that. The locks are actually 'insecure' and you can test every possible combo in about 10-20 minutes. - --Rob -----BEGIN PGP SIGNATURE----- Version: 4.5 iQEVAgUBMvPFpgTNlSxdPy6ZAQF7QAf+IFPhGavlD7p5WFsmhESHi+PKd9msqYhN pxl8ZdUZMDJg61F6nLF4Oa7rfoCmzDXqP4w0WU1pk8MkkwwVb9oTTJg2k4hY4AKr IixesiAcDlGc9+11314Nao+PuU6epJYmLddGSIc0Ra3FKrqamyueW6qunsJQT1Z6 5E/BiqpEGAiEGqog9J/xXtSra4q9g1SzrMCGcR5z077gCzb5ONxIgWzQ6zlL0leb X1Y9pzABnm1iJbq7Q2HRAVAQVBiPC/vg+hW8COfao4XHGqsqVg2UBcZWT8TdbV4N cwqVw5fDpoZXPyQtzRynmq55xH4OIJWZ2HnNNK3KHdRcyS+JW24MBQ== =oAVd -----END PGP SIGNATURE----- ----- "The word to kill ain't dirty | Robert Rothenburg (WlkngOwl(a)unix.asb.com) I used it in the last line | http://www.asb.com/usr/wlkngowl/ but use a short word for lovin' | Se habla PGP: Reply with the subject and dad you wind up doin' time." | 'send pgp-key' for my public key.

2 1

Re: Crypto in New Zealand - an update
by Lucky Green 17 Dec '03

17 Dec '03

At 06:03 AM 2/2/97, pgut001(a)cs.auckland.ac.nz wrote: [...] >The following week Andrew Mayo wrote a letter to the editor of the NBR >containing an eloquent defense of the use of encryption to protect personal >privacy. MFAT replied to say that they were only following orders, and were >required by the Wassenaar agreement to restrict crypto exports: [...] Just for clarification, it is the Wassenaar *arrangement* (somehow the term is more fitting anyway...) and it does *not* require the signatory countries to implement crypto export controls. Not that this will make any difference, since it would be the first time that a government would allow facts to stand in the way of politics. -- Lucky Green <mailto:shamrock@netcom.com> PGP encrypted mail preferred "I do believe that where there is a choice only between cowardice and violence, I would advise violence." Mahatma Gandhi

1 0

Re: Fighting the cybercensor
by Phillip M Hallam-Baker 17 Dec '03

17 Dec '03

> I'm still waiting for you to explain what you believe to be the "problem" > for which we are searching a solution. The problem is that you are a crushing bore. You peddle your crackpot scheme long after it has been made plain nobody is interested. Yet another reason to believe you are an FBI agent provocateur. Phill

3 2

Re: Libel & the 1st Amendment
by jim bell 17 Dec '03

17 Dec '03

At 12:52 PM 2/1/97 -0500, Mark M. wrote: >On Sat, 1 Feb 1997, Peter J. Capelli wrote: > >> You mean to say, rich people can overcrowd the courts as much as they >> like, while others are restricted by contigency-only lawyers ( Call >> 1-800-AMBULANCE! ) ... and what of the case of a rich person trying to >> control >> a poor one with many frivolous lawsuits ... while they can afford to file >> lawsuit after lawsuit, the poor person cannot defend himself. > >What, exactly, would be the point of suing a poor person? To quiet him from political dissent, presumably. I think the term coined a few years ago was "SLAPP", something akin to "Strategic Lawsuit Against Public Policy," or similar. For example, "Company A" wants to build a mine or factory or something similar at a location. Citizens object, causing political problems. Company sues the individuals for damages, which costs the individuals a great deal of money to defend against even if they never lose the suit. The real problem is actually a series of mistakes: 1. Individual should not be able to cause political problems for company. 2. "Government" should not be able to impact company activities short of actual harm. 3. Company should not be able to impact individual by suing except for actual harm done by that individual. Naturally, the source of these problems is that by each of their existence, lawyers make more money. As usual, I have a solution to that problem. Jim Bell jimbell(a)pacifier.com

2 1

Free & Open Society & toleration
by Jim Choate 17 Dec '03

17 Dec '03

Hi, It has been asserted that I am claiming that a free and open society should not abide any and all actions in contrast to Jim Bell's assertion that a free and open society must tolerate any action. This is not my case at all. I hold that a DEMOCRATIC society with a HEALTHY ECONOMIC system must have some minimum standards on what is allowed. By no means do I hold that the ONLY means of a free and open society is a democracy. It is quite possible to have an anarchy which would also be a free and open society and by DEFINITION would tolerate any action by its members acting individualy or in concert. I hold that for a democratic society to retain concepts of freedom and equity under the law as well as be economicaly viable, especialy in an environment where 'reputation' is critical such as a network over which economic transactions can take place with nothing more than a email order and a EFT, must not provide ex post facto AND carte blanche protection of the speech of the citizens. For such a system to operate requires a 'reputation' system to be in place. For such a system to be viable it MUST protect those reputations otherwise the concept of a 'contract' is worthless. I DO hold that this system MUST provide a priori protection of all speech. I further hold that any distinction between the 'government' and the people of a nation is a false and misleading distinction which is not in the best interest of the society because it by DEFINITION promotes a class society which is by definition contrary to the goal of equity under a democracy. It further provides a mechanism by which the representatives of the 'state' may claim immunity from the very standards they are charged with enforcing. This is because the charter of such a society is itself simply a contract between any arbitrary individual of that society and the sum total of the remaining citizenry (ie the 'state'). I further hold that one of the current legal practices based on precidence which MUST be replaced is our system dealing with defamation. I further hold that our current system of legal representation is inherently flawed and prevents equal representation under the law. Jim Choate CyberTects ravage(a)ssz.com

4 3

Re: "Secret" Postal Device stolen
by Toto 17 Dec '03

17 Dec '03

Bill Stewart wrote: > >>>Postal Service offers $25,000 reward for stolen . . . something > I was also guessing keys - truck keys are a less subtle target than > box storage keys, and telling every thug in the country that > mail trucks are an easy target, just take the keys from the carrier, > seems almost worth sounding really stupid in public to avoid. > They did say that it wasn't something they carried in their pockets, > but do mail carriers hang their keys on their belts? Mail carriers in some areas carry keys for buildings with security doors (sometimes Master keys). Or perhaps they've taken over the CIA's crack distribution route. Is anyone on the list willing to 'knock off' a couple of mail carriers and get back to us with a definitive answer on this? (Doesn't this kind of thing fall under the moderator's job description?) Toto

3 2