December 2003 - cypherpunks-legacy

encrypt_1.html
by Lynx_User＠linux.nycmetro.com 17 Dec '03

17 Dec '03

Reuters New Media [ Yahoo | Write Us | Search | Info ] [ Index | News | World | Biz | Tech | Politic | Sport | Scoreboard | Entertain | Health ] _________________________________________________________________ Previous Story: Texas Instruments Posts Loss, Stock Soars Next Story: FCC Chief Asks If Policy Should Focus On Internet _________________________________________________________________ Friday January 24 10:08 AM EST US Senator Will Reintroduce Encryption Export Bill WASHINGTON - Sen. Conrad Burns will reintroduce next week his measure to substantially eliminate export restrictions on computer encoding technology, a spokesman for the Senator says. "We are aiming for the 28th (of January) and it will be the same bill as last year," Matt Raymond, spokesman for the Montana Republican, said. President Clinton signed an executive order in November slightly relaxing export controls on encryption technology -- computer programs that use mathematical formulas to scramble information and render it unreadable without a password or software "key." But many in Congress and the computer industry have said the new Clinton policy did not go far enough to lift the Cold War era export limits that classified most encryption programs as munitions. Copyright, Reuters Ltd. All rights reserved _________________________________________________________________ ________________________ ___________ Help _________________________________________________________________ Previous Story: Texas Instruments Posts Loss, Stock Soars Next Story: FCC Chief Asks If Policy Should Focus On Internet _________________________________________________________________ [ Index | News | World | Biz | Tech | Politic | Sport | Scoreboard | Entertain | Health ] _________________________________________________________________ Reuters Limited Questions or Comments

1 0

Re: Anyone have info on foreign "ITARS"
by Greg Taylor 17 Dec '03

17 Dec '03

Bill Campbell wrote: >Does anyone have any pointers to info about the import/export >restrictions on encryption products in various countries. I know any >such summary would be very dynamic, but perhaps there's something >out there. The Australian regulations are available at: CUSTOMS (PROHIBITED EXPORTS) REGULATIONS - SCHEDULE 13 http://www.austlii.edu.au/au/legis/cth/consol_reg/cer439/sch13.html and: AUSTRALIAN CONTROLS ON THE EXPORT OF DEFENCE AND STRATEGIC GOODS: http://www.adfa.oz.au/DOD/al/iic/excontrl/excohome.htm Crypto software comes under Part 3, Category 5/2 of these regulations. (These documents are in MS Word format) ADFA, for those who are not aware, is the Australian Defence Force Academy, the major tertiary training institute for the defence forces. I have an extract of the key clauses of these regulations if anyone is interested. Briefly, the Australian regulations ban cryptography exports, claiming responsibilities as a party to the Wassenaar Arrangement, although the actual details of the latter regarding crypto seem obscure. However, an export license can be obtained on application to the Defence Ministry. The conditions of such a license are not openly stated, and at least one Australian software company has been refused a license. It would seem that even "public domain" software such as PGP is covered here. Ironically, the international version of PGP is available from the ADFA site at: ftp://ftp.adfa.oz.au/pub/security/pgp263i/ The government attitude to crypto policy generally in Australia is much more relaxed than in the USA. There is a recognition of business and personal need for strong crypto and that a balance needs to be sought between those needs and that of the law enforcement community. Although key escrow has been raised as an issue in some circles, it has not formed part of any government policy as yet. Greg Taylor EFA Crypto Committee

1 0

TEST--FLAMES
by Sandy Sandfort 17 Dec '03

17 Dec '03

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ SANDY SANDFORT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C'punks, We are still working out the bugs. This message is SUPPOSED to go only to the unedited list and the flames list. If it shows up on the moderated list, we have a bug. I'd like to have a couple of you (Bill Stewart? Lucky Green?) let me know so we can trace down the problem and get it corrected. Thanks, S a n d y ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

1 0

TEST--MODERATED
by Sandy Sandfort 17 Dec '03

17 Dec '03

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ SANDY SANDFORT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C'punks, We are still working out the bugs. This message is SUPPOSED to go only to the unedited list and the moderated list. If it shows up on the flames list, we have a bug. I'd like to have a couple of you (Toto? Dale Thorn?) let me know so we can trace down the problem and get it corrected. Thanks, S a n d y ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

2 1

TEST--MODERATED
by Sandy Sandfort 17 Dec '03

17 Dec '03

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ SANDY SANDFORT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C'punks, We are still working out the bugs. This message is SUPPOSED to go only to the unedited list and the moderated list. If it shows up on the flames list, we have a bug. I'd like to have a couple of you (Toto? Dale Thorn?) let me know so we can trace down the problem and get it corrected. Thanks, S a n d y ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

1 0

Re: Encrypting ZIP disks
by Adam Shostack 17 Dec '03

17 Dec '03

Paul Kocher announced that he has cracked it, and can recover data quickly. He is not publishing details of the break. Adam Jeremiah A Blatz wrote: -- Start of PGP signed section. | "David E. Smith" <dsmith(a)prairienet.org> writes: | > 7. Secure sensitive files. | > To keep sensitive or confidential information safe, store it | > on a Zip disk and use your Zip Tools software to assign a | > password that must be used in order to read from or write to | > the disk. At work, you can protect sensitive information | > such as personnel files, company directories, and product | > plans and designs. At home, you can secure personal | > information such as tax records, budgets, and computerized | > checkbooks. | | FWIW (not much), Iomega claims that it can't recover the data on a | password-protected disk. However, they do export those things, so I | doubt it's strong. | | Jer | | "standing on top of the world/ never knew how you never could/ never knew | why you never could live/ innocent life that everyone did" -Wormhole -- End of PGP signed section. -- "It is seldom that liberty of any kind is lost all at once." -Hume

1 0

Re: Scandinavian Goverments provide PGP to postal customers...
by Alan Olsen 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- >> However, some hardware is required. Because the key is on a >> smartcard, users must have smartcard readers installed on their >> computers, which aren't yet widely available. But Pdr Andler of >> Finnish Hewlett Packard says that later this year, smartcard readers >> will become standard on computers in Scandinavia. "It is a really >> big help for users, who don't have to remember dozens of >> passwords when using different kind of services," Andler says. Didn't HP have a GAKed smartcard they were pushing? I wonder if anyone is going to make assurances that no one is spliting the keys with the soundman... -----BEGIN PGP SIGNATURE----- Version: 4.5 iQEVAwUBMuo9reQCP3v30CeZAQFl+gf+JXHoo2WAenGiHQuEFQcaxiAZ6SPQJE/K PSBUqgksy+tcvcr8JsLGkkIDZLrJ9B0LaVp2wbbZY2j6YtcsGCgBW0WLXeXbKJve e0L8epy1GHWPO3d8peiI4InnZaXWM815+TSI2aUDX+NBLMNIkX6/k4muwQtW6KAo ysApcbxBWeyARWklyL3pCQyYRulPhtiPjlQ3g8dFVjx3PUhOmdTuK7rjCNo502MO quXS07kkUFYhn53Mej4r90NZ88awdCKjytsDcIYVTZxY8sBanZ4Qux0OYGvwqfyr fY2Hfd4GFBw/6FPLHn2IWD9AH5O7TudPOC4SAiLTymBGDct8vtBBUg== =fF/v -----END PGP SIGNATURE----- --- | If you're not part of the solution, You're part of the precipitate. | |"The moral PGP Diffie taught Zimmermann unites all| Disclaimer: | | mankind free in one-key-steganography-privacy!" | Ignore the man | |`finger -l alano(a)teleport.com` for PGP 2.6.2 key | behind the keyboard.| | http://www.ctrl-alt-del.com/~alan/ |alan(a)ctrl-alt-del.com|

1 0

Re: your mail
by Leonid S Knyshov 17 Dec '03

17 Dec '03

>try my site too http://gcwp.com/fadedimage > >can anyone help me out with getting pgp working... I just got 2.6.2 >excutable the freeware one and its for dos... I need to get one that >works >with eudora or netscape.... please help! Well the obvious answer is to RTFM (Note: F is for fine) on DOS version, its quite big. Also you seem to need Win PGP shell of some sort so that you won't have to type those commands, i memorised my commands on the 3rd day of usage so no big deal about shells. And then you cat'n'paste the code into your e-mail. In some cases you can set it up as a spell checker ;) Later.

1 0

Re: Encrypting ZIP disks
by Leonid S Knyshov 17 Dec '03

17 Dec '03

>"David E. Smith" <dsmith(a)prairienet.org> writes: >> 7. Secure sensitive files. >> To keep sensitive or confidential information safe, store it >> on a Zip disk and use your Zip Tools software to assign a >> password that must be used in order to read from or write to >> the disk. At work, you can protect sensitive information >> such as personnel files, company directories, and product >> plans and designs. At home, you can secure personal >> information such as tax records, budgets, and computerized >> checkbooks. > >FWIW (not much), Iomega claims that it can't recover the data on a >password-protected disk. However, they do export those things, so I >doubt it's strong. Well, I think one way to find out is to create 2 identical zip disks and encrypt them with different passwords. Then do sector by sector compare and see where the beast is hiding at :) Leo.

1 0

Public Key Partners
by DataETRsch＠aol.com 17 Dec '03

17 Dec '03

Hello, Do you know of a way I can contact Public Key Partners by e-mail or phone? Thanks. Jeremy K. Yu-Ramos President DataET Research Data Engineering Technologies

1 0