December 2003 - cypherpunks-legacy

stand-by
by an105＠hotmail.com 17 Dec '03

17 Dec '03

Hi, after adjusting claims for several insurance companies, I found one thing the same. No one seems to know much about what they are entitled to. So I decided to help the public towards even footing with insurance adjusters. I have been a crusader for policyholder's rights for a good many years since and received acclaim from state departments' of insurance and state Governors for my work, albeit obscure. Anyway, you may want to bookmark my "deserve" website just in case that rainy day happens to come your way. Socrates never sold insurance, but his words apply to this industry as well: "The only good is knowledge and the only evil is ignorance." Best wishes, Tony Braga deserve link: http://www.sure-net.com/deserve.html

1 0

Rivest's Chaffing and Winnowing
by John Young 17 Dec '03

17 Dec '03

The New York Times, March 22, 1998, p. 31. New Method To Veil Data Could Upstage Export Policy Cryptologists find a way to foil eavesdroppers without secret codes. By John Markoff San Francisco, March 21 -- One of the nation's leading computer scientists has proposed a novel technique for scrambling data that could circumvent Government export policies aimed at limiting the foreign sale of encryption technology. The technique, which was described this week in an Internet discussion among computer researchers, was introduced by Ronald L. Rivest, a computer scientist at the Massachusetts Institute of Technology and one of the inventors of the most widely used commercial encryption scheme, RSA. The new approach, which is described in a short technical paper that has been posted to Mr. Rivest's M.I.T. Web site (http://theory.lcs.mit.edu/~rivest/chaffing.txt) is described as "chaffing and winnowing" digital information instead of encrypting it. According to Mr. Rivest's paper, it is possible to hide a message by breaking it into packets that are then secretly identified as good information, or "wheat," and gibberish, or "chaff," in such a way that an eavesdropper cannot distinguish the two. Because the individual packets would not be encrypted, Mr. Rivest said, such a system would circumvent current export restrictions. The two principal ways of communicating in secret are encryption and steganography. Steganography uses computer techniques to embed a secret message in a document like a digital image. In encryption, secret information is encoded using functions that require difficult mathematical tasks to decode, and it has become the standard way of transmitting secret information electronically. There are no restrictions on the domestic use of this technology, but the Government has been trying to force the industry to adopt standards that would permit law-enforcement officials to have mathematical keys allowing them to decode messages without the knowledge of the sender or receiver. The Clinton Administration says the standards are needed to fight crime and terrorism. Opponents argue that the Government decoding keys, to be stored in computers, could easily be stolen, compromising privacy and the security of credit card numbers and other personal information. In terms of exports, with few exceptions the Government limits the software to codes that can be easily broken. "Winnowing does not employ encryption, and so does not have a 'decryption key,' " Mr. Rivest wrote in his paper. "As usual, the policy debate about regulating technology ends up being obsoleted by technological innovations." Peter Neumann, an SRI International computer scientist who has read Mr. Rivest's paper, said that although "there is still no certainty that this is a practical idea," if it works, "it throws another clinker at the Justice Department." Other cryptography experts said they were uncertain whether it would be possible to skirt Government export restrictions in this way, but that the idea was an impressive new approach that might have valuable commercial applications. "He's a very clever guy," said George Spix, a Microsoft researcher who specializes in cryptography policy issues. " It goes to show that for all the technological wizardry in the world, there's nothing like an intellect." One of the potential limitations of the new method is that the total information transmitted might need to be hundreds of times larger than the actual message. Mr. Rivest said, however, that he had discussed the idea with Adi Shamir, an Israeli cryptographer, and that Mr. Shamir had proposed compression methods that would reduce the total transmission to only about twice the actual message size. The strength of the idea for chaffing and winnowing is that it is possible to prove mathematically that a message cannot be decoded, Mr. Rivest said. He said he had come up with the idea recently while teaching an undergraduate computer course. In addition to his role as associate director of the Laboratory of Computer Science at M.I.T., Mr. Rivest is a consultant and shareholder in RSA Data Security Inc., a company that develops encryption software. "I put the winnowing and chaffing idea out there to stimulate debate,"' Mr. Rivest said. "I hope it will help clear up some of the issues that have been raised in the policy discussion. [End]

2 1

Re: Prediction: NAI will issue a "Clarification" about PGP from Europe
by John Young 17 Dec '03

17 Dec '03

Robert Hettinga wrote: >John has the drugs. Talk to him. Then you'll ***Understand***... You talking to me? Look at me! Let's settle this now. Get it straight from the purple nose: Not drugs, nuts, A-grade shit, highest quality, cheap E$, dosing me and the other Messiahs vampiring Big DaddyMommy -- that spaced-out hermaphroditic duo's infinitely beyond psycho-pharmacological cryptanalysis. Try it, you'll like it. Endorsed by Thor and Brunhilde, Zeus and Juno, Samson and Delilah, Amazons and Moses, Cleopatra and Nero, Jesus and FHC, Atilla and Joan d'Arc, Machiavelli and Teresa de Avilla, Nietzsche and Cosima, Hitler and Eva, Ghandi and Queen Mary, Elvis and Janis, Paglia and Dice Clay, Teller and Penn, Pogo and Dilbert, NSA and BXA, and others here faking normalcy: Watch for very clear articulation, point by point argument, neat numbered paragraphs, implacable coherency, occcasional bullet spray for emphasis, peculiar indents and concussion grenades, unpredictable ellipses of EM wipeout, wide-area split infinitives, carpet bombs of dangling modifiers, genocidal threats at contra-blancos, vile accusations of self-flagellations, all with not a hair or beard out of place, a sure sign of uh oh, don't jiggle this nitroid. That's just those who post. The others back there, well.

1 0

Re: Prediction: NAI will issue a "Clarification" about PGP from Europe
by Robert Hettinga 17 Dec '03

17 Dec '03

At 11:27 AM -0500 on 3/22/98, John Young wrote: > You <snip> >well. Keewwwl... So. John. Don't the trees look like stuffed animals this morning? Cheers, Bob Hettinga <who laughed so hard tears ran down his face upon reading the snip-occluded above. I *love* this list.> ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' The e$ Home Page: http://www.shipwright.com/

1 0

RE: UPSs
by Pearson Shane 17 Dec '03

17 Dec '03

Hi Stan, Yeah. Since the big powersupply transformer primary winding is in _parallel_ with the AC power coming from the wall, this inductor will transfer the spikes, etc to the secondary winding and into the bridge rectifier, etc quite nicely. But decent ripple prevention should also help out here. Though this hasn't much to do with PC switchmode powersupplies. An inductor/capacitor spike filter that may be in UPS' would have 2 large inductors in _series_ with the active and neutral and high voltage capacitors in parallel with both ends of the inductors across the active and neutral. This is specifically designed as a low pass filter for getting rid of spikes. I don't think the SW supply would do it quite as well with as much power handling, strength etc. I'd rather a great big low pass filter designed for spike dampening doing the deed than having my PC power supply bearing the brunt of it. It's also an extra layer that is quite cheap. Bye for now. > -----Original Message----- > From: StanSquncr [SMTP:StanSquncr@aol.com] > Sent: Saturday, March 21, 1998 8:51 AM > To: Pearson Shane; spectre(a)anthrax.net; cypherpunks(a)toad.com > Subject: Re: UPSs > > In a message dated 98-03-19 18:48:51 EST, Shane.Pearson(a)tafensw.edu.au > writes: > > << A simple low pass filter made of 2 large inductors and a > few high voltage capacitors will do the trick nicely. >> > > Right. The filtering that's already in the power-supply (except that > the > switching transformer isn't as big as an inductor as a normal > old-style power > transformer. > > Stan

1 0

Re: Rivest's Chaffing and Winnowing
by Kevlar 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Now I read about this before it was mentioned on this list, and wanted to comment briefly upon it. Although at first glance this appears to be a hopelessly ineffective way of communicating (it requires double the information, plus MAC's), It does have some interesting possibilities. For instance... Rivest mentioned in his technical paper that you might use this in a situtation where you are multiplexing two or more streams of information, in which one persons "wheat" is another persons "chaff"... This would elminate the need to generate random "chaff", and therefore bring the ammount of wasted space WAY down... I could see this in use in situtations like LAN's or intranets, where bandwidth is not nearly as much of a concern because there is usally an overabundance anyway. Something else that occured to me while reading this tho... a major flaw if implemented "out of the book".... He mentions generating random MAC's... and this would be allright because the chance of randomly generating a genuine MAC is 2**64, or 10**19, but that is unacceptable, as the law of advrages WILL catch up to you eventualy. Therefore his second party adding chaff idea is failable. Of corse, this is easliy remedied at run-time by checking to see if the MAC that was just randomly generated is genuine, and therefore unacceptable. I hope to stimulate discussion on this subject, and welcome your opinions about mine... Peace. -----BEGIN PGP SIGNATURE----- Version: PGPfreeware 5.5.5 for non-commercial use <http://www.nai.com> iQA/AwUBNRWlqgbVu2P/8fhEEQLxAACbBTO08OT/uYnDPQ1dKJH0xaZi3ocAniXQ Z0O3d1uKcvfLDcbTHPb6PTw2 =aJRQ -----END PGP SIGNATURE----- -Kevlar <Kevlar(a)smartlink.net> Oh, I'm sorry... Was I not suposed to EXPORT STRONG CRYPTO? print pack"C*",split/\D+/,`echo "16iII*o\U@{$/=$z;[(pop,pop,unpack"H*",<> )]}\EsMsKsN0[lN*1lK[d2%Sa2/d0<X+d*lMLa^*lN%0]dsXx++lMlN/dsM0<J]dsJxp"| dc` Beat your algorithms into swords and your virtual machines into spears... Let the weak say, "I am strong".

1 0

Encryption without encryption - from Ron Rivest
by Martin Minow 17 Dec '03

17 Dec '03

In a paper entitled "Chaffing and Winnowing: Confidentiality without Encryption," Ron Rivest describes a method of transmitting a document that gives an evesdropper no information about the content of the document. <http://theory.lcs.mit.edu/~rivest/chaffing.txt> "Winnowing does not employ encryption, and so does not have a``decryption key.'' Thus, the usual arguments in favor of ``keyrecovery'' don't apply very well for winnowing. As usual, the policydebate about regulating technology ends up being obsoleted bytechnological innovations. Trying to regulate confidentiality byregulating encryption closes one door and leaves two open(steganography and winnowing)." Martin Minow minow(a)apple.com

1 0

My post earlier.
by Aspen 17 Dec '03

17 Dec '03

Sup, It's Kevlar. I posted earlier about the "new" encryption method. It occured to me if you assign the "MAC"'s to computers and make a simple router (some transistors to act at "signaler" lines, one way of corse, so 3 a computer, A few ic's, hardware, and a power supply, ($75)), You have the makings for a basic network. Isn't that allready pattented? Hope I made somebody think for a second. I know I concidered this notion quiet a bit.

1 0

Privacy Development Project
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Developer & Consulting Positions Available Software development firm focusing on Internet privacy and anonymity tools is looking for developers and consultants. Applicants should be interested in the possibility of relocation or travel as development is being done outside of the United States. Applicants will be applying to join an aggressive team, where intelligence, entrepreneurial spirit and technology skills are valued and rewarded. Positions offer competitive salary and benefits along with stock options and bonuses. Interested applicants are asked to forward your c.v. by e-mail to: anonjobs(a)nym.alias.net Positions Offered: ------------------ Project Consultant - Anonymous Technologies and Cryotography ************************************************************ The ideal candidate should be very familiar with anonymous remailers (Type I, Type II, Nymservers), anonymous cash (Digicash), Blind Signatures, Public Key Cryptography and Cryptanalysis. A detailed understanding of anonymous networks and mailer systems will be required to help review the security model of companies system. Experience with C/C++ and software development projects on Solaris, Linux, Windows 95 also a definite asset. Experience on implementation of Cryptography libraries in software design also a definite asset. Software Engineers - Windows 95 ******************************* Successful candidates will have extensive development experience in the Windows environment, good organizational skills and be very success driven. Good knowledge of Visual C++, MFC and OOP a requirement. Interest in privacy, security and cryptography a definite asset. Software Engineers - Unix (Solaris/Linux) ***************************************** Successful candidates will have extensive development experience in the Solaris or Linux environment, good organizational skills and be very success driven. Good knowledge of C++, Internet protocols (HTTP, FTP, SMTP, NNTP), X.509 Certificate authority servers (LDAP) and experience with cryptography are all considered definite assets. The applicant should have a serious interest in technologies as they relate to Internet privacy, security and cryptography.

1 0

Re: UPSs
by rdew＠el.nec.com 17 Dec '03

17 Dec '03

Stan, Clearly you only considered a few of the semi-cons. Others just stop working, while still others pass anything above the manufacturer design max. Your lack of desire to learn indicates a possible reason why you don't seem to understand ... At my age, I forget some ... What is that old adage about leading a horse to water, but you can't make him read? or something like that! Bob De Witt, rdew(a)el.nec.com The views expressed herein are my own, and are not attributable to any other source, be it employer, friend or foe. > From StanSquncr(a)aol.com Fri Mar 20 14:43:46 1998 > From: StanSquncr <StanSquncr(a)aol.com> > Date: Fri, 20 Mar 1998 16:50:55 EST > To: rdew(a)el.nec.com, spectre(a)anthrax.net, cypherpunks(a)toad.com > Mime-Version: 1.0 > Subject: Re: UPSs > Content-transfer-encoding: 7bit > > In a message dated 98-03-20 16:04:24 EST, rdew(a)el.nec.com writes: > > << If your surge protector is a semi-conductor, it probably will be > self-limiting. That is, it will reach a maximum block, and pass > whatever is above that. >> > > Yes, but what you fail to point out, is the reason it will pass everything, it > will have been blown (shorted, most likely). > > So, because you failed to point this out, I figure the rest of your response > isn't worth responding to. > > Stan >

2 1