December 2003 - cypherpunks-legacy

Re: the public key minefield
by baumbach＠atmel.com 17 Dec '03

17 Dec '03

[my silly public key example deleted] > No, because of the language in the patent which requires that it be > infeasible to find the deciphering key from the enciphering key. Here's > the claim, from patent 4218582, that covers all of public key cryptography: > > 1. In a method of communicating securely over an insecure communication > channel of the type which communicates a message from a transmitter to > a receiver, the improvement characterized by: > providing random numbers at the receiver; > generating from said random numbers a public enciphering key at the > receiver; > generating from said random numbers a secret deciphering key at the > receiver such that the secret deciphering key is directly related to > and computationally infeasible to generate from the public enciphering > key; > communicating the public enciphering key from the receiver to the > transmitter; > processing the message and the public enciphering key at the > transmitter and generating an enciphered message by an enciphering > transformation, such that the enciphering transformation is easy to > effect but computationally infeasible to invert without the secret > deciphering key; > transmitting the enciphered message from the transmitter to the > receiver; and > processing the enciphered message and the secret deciphering key at > the receiver to transform the enciphered message with the secret > deciphering key to generate the message. Doesn't a patent have to have enough information for a person skilled in the art to construct a prototype? I publish for the first time here my invention. I will patent it within a years time. Striped Vegetables ---- This isn't enough for anyone to do anything. If I were more specific, I might have something patentable, but then by claims wouldn't be as broad. If you figured out how to make an anti-gravity device. That device would be patentable. The concept of "anti-gravity" device is not patentable. If I could duplicate the effect of your anti-gravity device without using any of the same novel mechanisms. My device would be separately patentable. Peter Baumbach baumbach(a)atmel.com

1 0

QPK SOURCE ONLINE
by charliemerritt＠BIX.com 17 Dec '03

17 Dec '03

Cypherpunks: I now have David Colston's [5542837(a)mcimail.com] source code for "CALL SECURITY". I also have the IBM PC executables. CALL SECURITY is an implementation of David's QPK (quick public key) algorithm. If you are on BIX I can E-mail to you with binary attachments, please specify which files. I am not sure how to get this to an FTP, BIX doesn't have FTP posting yet. I know it is done from BIX, help is welcome. So, I will make this software available on my PC this *WEEKEND ONLY* The purpose is to S P R E A D this stuff around. Please upload to an FTP, BBS or what-have-you. SEC_SRC.EXE 64668 bytes self extracting source code SEC_RUN.EXE 278542 bytes self extracting RUN TIME EXECUTABLES (PC) 2400 baud only 8n1 zmodem, ymodem, xmodem You will connect with Telix "qdhost" script. Enter full name (chrs (space) chrs) please be truthful Password is QPK (in caps) Phone (501) 839-8579 Voice (501) 839-3543 I do not run a BBS, forget these numbers after this week end United States calls only, honor system, please. email charliemerritt(a)bix.com

1 0

Phil Zimmermans's statement (reposted)
by bart＠netcom.com 17 Dec '03

17 Dec '03

Date--Sun, 19 Sep 1993 13:38:44 -0500 From--Philip Zimmermann <prz(a)columbine.cgd.ucar.edu> Subject--Zimmermann statement on PGP investigation Some of you may have received my Internet message of a couple of days ago about the ongoing U.S. Customs investigation of the exportation of PGP, which has now progressed to the level of Federal Grand Jury subpoenas. This earlier message was intended by me for distribution to a very small group of friends who previously communicated their concern about me and the investigation and asked to be kept informed. I did not send the message to anyone outside this group. Unfortunately, I did not adequately assert my desire that the message not be further disseminated. It appears that the message has gone completely public. This was not my intention. My lawyer, Phil Dubois, has been in touch with the Assistant U.S. Attorney (William Keane) assigned to the investigation. We have no reason to believe that Mr. Keane is anything other than a professional and reasonable person. He made it clear that no decision has been made regarding any prosecution of anyone for any offense in this matter. Such decisions will not be made for some time, perhaps several months. Mr. Keane also made clear his willingness to listen to us (me and my lawyer) before making any decision. It appears that both Mr. Keane's mind and the lines of communication are open. My fear is that public dissemination of my message will close the lines of communication and put Mr. Keane into an irretrievably adversarial position. Such a result would not serve any of our interests. My lawyer tells me that nothing irritates a prosecutor more than being the subject of what he perceives to be an orchestrated publicity campaign. He also tells me that his nightmares involve FOAs (Friends Of the Accused), invariably people with good intentions, doing things on their own. I understand that the issues involved in this investigation are of the greatest importance and transcend my personal interests. Even so, I would rather not turn an investigation into a full-scale federal prosecution. I ask that everyone keep in mind that the government's resources are limitless and that mine are not. Speaking of resources, many of you have offered help, and I am grateful. Those wishing to contribute financially or otherwise should contact either me or Philip L. Dubois, Esq., at dubois(a)csn.org or by phone at 303-444-3885 or by mail at 2305 Broadway, Boulder, CO, 80304. Mr. Dubois has just got on the Internet and is still learning how to use it. Donated funds will be kept in a trust account, and all contributions will be accounted for. If this whole thing somehow goes away with money left in the account, the balance will be refunded to contributors in proportion to the amounts of their contributions. This message can be widely circulated on public forums. Philip Zimmermann prz(a)acm.org 303 541-0140 ------------------------------

1 0

a picture of the Clipper?
by nate＠VIS.ColoState.EDU 17 Dec '03

17 Dec '03

I seem to remember there being a picture of the clipper chip in Popular Science or something.... does anyone remember where this picture is? -nate -- +-------------------------------------------------------------------- | Nate Sammons email: nate(a)VIS.ColoState.Edu | Colorado State University Computer Visualization Laboratory | Finger nate(a)monet.VIS.ColoState.Edu for my PGP key | #include <std.disclaimer> | Always remember "Brazil" +----------------------+

1 0

The "mpack" MIME encoder has just been released.
by Derek Upham 17 Dec '03

17 Dec '03

The newsgroup comp.sources.reviewed has just released the sources to "mpack", a utility for encoding binary files into a MIME-compliant format, then mailing them to recepients or posting them to a newsgroup. "munpack", a utility for decoding the files, is also included. The package is supposed to work on MS-DOS and MacOS systems (and it's quite small), so people playing with PGP might be able to get some use out of it. Derek (the other other Derek) Derek Lynn Upham University of British Columbia upham(a)cs.ubc.ca Computer Science Department ============================================================================= "Ha! Your Leaping Tiger Kung Fu is no match for my Frightened Piglet Style!"

1 0

Help Needed: PGP SIGNED MESSAGE
by Zeek 17 Dec '03

17 Dec '03

{{ Please excuse the interruption. I'm having problems signing a text message with my secret key and creating output that leaves the text message as is but with an ascii signature at the bottom. Or rather, I don't want the message encrypted, I just want the nifty sig attached and email-able. {{ I've done this before using some combination of -sat or something similar but I have since forgotten. This is a rather embarrassing question, I know it has to be a simple switch in the syntax but I spent 2 hours last night and 1 hour this morning trying to figure the damn thing out... learned a few interesting things along the way. Any help would be greatly appreciated. Please reply to me rather than the list. Thank you, -z (kevink)

1 0

Clipper and Crayolas
by Anonymous 17 Dec '03

17 Dec '03

On Sat, 25 Sep 1993 12:17:32 -0700 (MDT), <uunet!VIS.ColoState.EDU!nate> wrote - > I seem to remember there being a picture of the clipper chip > in Popular Science or something.... does anyone remember > where this picture is? I know this is not what you're looking for, but I'm in a very strange mood today: Date: Mon, 19 Apr 93 9:21:53 EDT Organization: FIRST, The Forum of Incident Response & Security Teams Subject: Slide presented at White House briefing on Clipper Chip Note: The following material was handed out a press briefing on the Clipper Chip on 4/16. Chip Operation Microchip User's Message +----------------------+ ------------------> | | 1. Message encrypted | Encryption Algorithm | with user's key | | | Serial # | 2. User's key encrypted | |--> with chip unique key | Chip Unique Key | User's Encryption | | 3. Serial # encrypted Key | Chip Family Key | with chip family key ------------------> | | | | +----------------------+ For Law Enforcement to Read a Suspect's Message 1. Need to obtain court authorized warrant to tap the suspect's telephone. 2. Record encrypted message 3. Use chip family key to decrypt chip serial number 4. Take this serial number *and* court order to custodians of disks A and B 5. Add the A and B components for that serial number = the chip unique key for the suspect user 6. Use this key to decrypt the user's message key for this recorded message 7. Finally, use this message key to decrypt the recorded message.

1 0

Thanx 4 the help! (PGP SIGNED MESSAGE)
by Zeek 17 Dec '03

17 Dec '03

Wait!! Ok, I've got it! "pgp -sta +clearsig=on <file>" ! Big thanks to those of you that refreshed my memory. bye. -z (kevink)

1 0

hi
by BRADLEY ROBERT WESTON 17 Dec '03

17 Dec '03

Hi. I don't know if this address connects to anyone or anything, but I am giving it a shot. I saw an article in Wired and then another one in the 25th anniversary edition of Whole Earth, and wanted to get in touch with you all. #1 Thanks for exisiting....... I am real glad someone is on the side of the angels technologically #2 Please put me on a list to get news. I prowl the newsnet very occasionally, but I don't have a lot of time to do so and I am still climbing up the looooong learning curve of internet. I am quite willing to pay for good info feed from you. #3 Please help me get a clean copy of PGP. I guess thats all I want to throw out unencrypted.....thanks...I want to help. Wes Bradley The return address is my e-mail address at university of colorado where I am a student in aerospace engineering. Thanks again.

1 0

A simpler way
by ferguson＠fiber.sprintlink.net 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- On Sat, 25 Sep 1993 17:24:16 -0500 (CDT), Zeek <uunet!bongo.cc.utexas.edu!zeek> writes - > Wait!! > > Ok, I've got it! "pgp -sta +clearsig=on <file>" ! > > Big thanks to those of you that refreshed my memory. I can make life much easier for you simply by mentioning the fact that you can add the line: clearsig = on to your CONFIG.TXT file (Drive:\path\PGP\config.txt). Once you add this line (note to dox writers: add it to the next version release, especially as a #commented line in the default config), then you won't have to worry about adding that pesky argument on the command line ever again! Cheers, Paul Ferguson | "Laws are dumb in the midst of arms." Mindbank Consulting Group | (Silent enim leges inter arma.) Fairfax, Virginia USA | fergp(a)sytex.com | - Cicero, Pro Milone The future is now. -----BEGIN PGP SIGNATURE----- Version: 2.3a iQCVAgUBLKR3DpRLcZSdHMBNAQGUugP+JzDE7Z2seyxPHCifwud75qfYjwqk36Z9 ylGvyL+7pF4wL/tYWZTHx9/7yyH8qetd+L29jtu5m5GBDbfL+CIh6ArC+NeW33BM llyAgJAgcnGxX+NmvPcR74nXxG0/e2cwGwwRv1ad+wPOpcpSVkKA0acAbM9i/Adp MewUG3i9D5c= =I5Y9 -----END PGP SIGNATURE-----

1 0