December 2003 - cypherpunks-legacy

radio security through obscurity
by Tom Keenan 17 Dec '03

17 Dec '03

Thanks to the 2 dozen or so people who gave me interviews at CFP94. As I mentioned the primary purpose of them is for a CBC Radio segment to be aired on "Sunday Morning" (which many NPR stations carry.) I think I told you that it would air on Easter Sunday but I now realize the show is pre-empted so it will be some other Sunday. i will put the exact time in the list when I have it. As for TV coverage I am going to do an open-line phone in show on CFP related things on CBC's NEWSWORLD network. The airdate for that is (live of course) 1230-1300 MST (and local equivalent) Thursday April 7/94. Would love to have some intelligent phone calls. The 1-800 number (not sure what it is offhand) is Canada only but somehow I don't think that will be much of a barrier! Cheers, Tom -- Dr. Tom Keenan, I.S.P. Dean, Faculty of Continuing Education University of Calgary 2500 University Dr. NW Calgary, AB T2N 1N4 CANADA Voice: (403) 220-5429 FAX: (403) BUG-EXIT = 284-3948

1 0

questions for the NRC crypto committee...
by Herb Lin 17 Dec '03

17 Dec '03

The NRC crypto study is a study of national cryptography policy intended to lay down a framework for the long term; this study was ordered by the U.S. Congress and will be launched this summer (we hope). It is not focused on any particular technology such as Clipper, Skipjack, or Tessera, though the study committee will be addressing these and other technologies as necessary. Thus, it is different from the review committee charged with examining Clipper. Indeed, the composition of the NRC study committee has not been determined at this time. This committee will still be soliciting input from the community, and the offer I made earlier stands -- If you (and other cypherpunks) have questions you think the NRC committee should be asking regarding the formulation of crypto policy, please forward them to me. tnx herb lin Computer Science and Telecommunications Board National Research Council National Academy of Sciences *** Bellovin writes: A useful exercise for this group might be to compile a list of questio ns that they *should* answer if they're playing it straight. These could be forwarded to the review committee, too. If we come up with a good list, I'm willing to submit it to them. **** As the guy staffing the NRC's review project of national cryptography policy, I encourage you (and other cypherpunks) to do so. Please forward to me the questions you think the review panel should be asking. So that your q uestions stand out, please put in the subject line: Crypto panel question thanks.. herb lin Do you want to collect the questions or should I? I volunteered because I know 3 of the 5 committee members.

1 0

the rest of the key
by Brian D Williams 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I was just wondering.... If the NSA could get it's hands on half (40) of any particular clipper key, wouldn't that just leave 2^40 to compute? Even with brute force, it's trivial even next to DES. Brian Williams Extropian Cypherpatriot "Cryptocosmology: Sufficently advanced comunication is indistinguishable from noise." --Steve Witham "Have you ever had your phones tapped by the government? YOU WILL and the company that'll bring it to you.... AT&T" --James Speth -----BEGIN PGP SIGNATURE----- Version: 2.3a iQCVAgUBLZmvbtCcBnAsu2t1AQE5MwP9E46rrqaqqDRASdd5EHuRgkvGmax3y/3n RQ7xIRT+ixXBfKMnSDdcScdV9OqR6JcQJFru88zynqj4XaU6u1olYKPKJhjpO1ry nE8vHi4UO8qkg4B3cnf2XZVlkwrICTzGGhZjHuqws0R3C++1AGmVBA/UrlHQxwZn h9jU4GRUHQI= =xVfX -----END PGP SIGNATURE-----

3 2

Stanford,CA Clipper debate Wed 30Mar: Rotenberg vs. Asst US Atty
by John Gilmore 17 Dec '03

17 Dec '03

Sorry for the late notice; I just found out today: ... I saw this notice at the law school yesterday ... "Encryption and digital communications: law enforcement or privcacy? An Oxford-style depate with J. Kent Walker, Assistant US Attorney and Coordinator, high-tech task force; and Marc Rotenberg, Wash. Director, Computer Professionals for Social Responsibiltiy Wed. March 30 at 5:30 Stanford Law school room 290

1 0

Re: the rest of the key
by Graham Toal 17 Dec '03

17 Dec '03

> I was just wondering.... If the NSA could get it's hands on half >(40) of any particular clipper key, wouldn't that just leave 2^40 >to compute? Even with brute force, it's trivial even next to DES. "half" is a a random number which is XOR'd with 80 bits. Both halves look random. The XOR of the two halves is not. Oh yes, and the guy who is asking the spooks about the technical stuff - be sure to find out where this 80-bit random number comes from and where it goes when it's been used... Anyone who knows the split-pattern only needs to subvert *one* of the escrow agencies. G

1 0

Re: Very funny, Polyanna :-( [namespace pollution]
by gtoal＠an-teallach.com 17 Dec '03

17 Dec '03

:Isn't this really just a special case of the more general problem of :deciding which keys on a public key ring you're willing to trust? :Perhaps your mailer script should automatically encrypt only when a :keyid is found with a signature trail that you trust. No, that's a totally separate problem. What I'm worried about is some comedian publishing a public key for addresses like "alt.security.pgp(a)cs.utexas.edu" or any of the common mailing gateways, and suddenly people using auto-encrypting mail programs find that no-one can read their posts. It kind of throws a spanner in the works for completely transparent pgp shells. :I do see a signature for that key from Miron Cuperman. Perhaps :you'd want to modify your trust parameters for him... That's not the point; someday soon people will be using mailers that auto-pgp without them even realising it. I don't want to have to hassle those people with interactive questions about whether they trust someone, or force them to maintain personal lists of bad addresses. Whatever solution we can find will have to involve active support from the keyservers I suspect. thoth@netcom - I hope you're listening to this! There's a definite problem of a denial-of-service attack here that the current scheme makes hard to avoid. Hence why I called it 'namespace pollution' in the subject line. G

2 1

Quantum Physics
by W. Kinney 17 Dec '03

17 Dec '03

Jim Choate is making a lot of strange statements, but I'm picking this one: > First off, EM fields are NOT QM. Sure they are, in Quantum Electrodynamics, which is the quantum-mechanical theory of electromagnetism. > They do have some characteristics which > 'bleed' over form the Quark level. Quarks have nothing whatsoever to do with electromagnetic fields, except that they carry charge. >Also since EM fields are made of > hardons [sic ;-)] No. Protons and neutrons are hadrons. Hadron comes from the (Greek?) word for "heavy", lepton from "light". The distinction you're trying to make here is that matter fields are _fermions_, with spins an integral multiple of 1/2, and gauge fields (like photons) are bosons, with integral spin. Both hadrons and leptons are fermions. >and not leptons (which an electron is) may blow a hole in this > approach since leptons do not follow the same sort of charge conservation > rules as hadrons. Charge conservation applies to everybody. Hadrons, leptons, everybody. Even your mother. Perhaps you're thinking of the fact that bosons and fermions obey different spin-statistics rules. > > As to infinite precision and its non-presence....Beeep....wrong answer... > > Electrons change state in zero time, this implies at least some form o f > infinite precision (otherwise how does the system know the difference between > zero and some small-o value?). I suspect this is another error based on > the implied (and incorrect) implication in this line of discussion that > hadrons and leptons use the same rules. What? Not that this is the appropriate list for particle physics, but this kind of semi-mystical expounding on how quantum mechanics forces you to rethink all the rules is better science fiction than science. QM _does_ include some spooky things, but by and large they are subtle and limited -- for instance, the "faster than light communication" implied by spin-polarization measurements cannot be used to transmit information. It's a purely statistical effect, and it does _not_ violate relativity. Nothing I've ever heard of in QM invalidates assumptions one might make about computability or the properties Turing machines. Stuff like Roger Penrose comes up with in _The Emperor's New Mind_ is speculation, and he clearly labeled it as such in his book. Don't take it too seriously. -- Will

1 0

Secure MPEG ???
by danisch＠ira.uka.de 17 Dec '03

17 Dec '03

Hello, does anyone know what's "Secure MPEG" and how it works? Of course it must have something to do with security and mpeg compression, but I am looking for details and specs. thanks Hadmut

1 0

Anti-Clipper leaflet at government expo
by System Operator 17 Dec '03

17 Dec '03

This is a few days late, but in a going through the stack of items I picked up at the FOSE show in Washington, DC, last week, I found a 3 inch by 5 inch yellow flyer with the following message: ----------------------------------------------------------------------- STOP THE CLIPPER CHIP! For more info Before it's too late: [ fist with two lightning bolts ] CYBER RIGHTS NOW! Electronic Frontier Foundation - membership(a)eff.org Computer Professionals for Social Responsibility - cpsr.info(a)cpsr.org WIRED's infobot - infobot(a)wired.com "get help" in msg body Read the April 1994 issue of WIRED Concerned Cyberdykes for Electronic Freedom Not associated with WIRED, EFF, or CPSR ----------------------------------------------------------------------- Someone was busy with a copy machine. The FOSE show was a particularly good choice -- the vast majority of attendees were government employees, presumably the ones most likely to be using Clipper. Dan -- system(a)decode.UUCP (System Operator) Cryptography, Security, Privacy BBS +1 410 730 6734 Data/FAX

1 0

Cerf calls for "international cryptography standard"
by Eli Brandt 17 Dec '03

17 Dec '03

Forwarded message: > Subject: E-d-u-p-a-g-e 03/29/94 > INTERNET STILL VULNERABLE > Testimony at a House Subcommittee on Science indicates that threats to > Internet security should be viewed as on-going rather than isolated events. > Internet Society President Vinton Cerf says that development and use of an > international encryption standard is the only reliable solution to the > problem. (Chronicle of Higher Education 3/30/94 A22) He's right, but I'd like to think he doesn't have Clipper/Capstone in mind. Oh, I'll throw this in too: > SOFTWARE REPLACES SPORTSWRITERS > A $100 software program called Sportswriter is capable of churning out > reasonably good sports copy by intelligently stringing together words > between facts. Some 80 small newspapers in the Midwest have purchased the > program and are using it to cover high school sports events. (Wall Street > Journal 3/29/94 A1) Eli ebrandt(a)hmc.edu finger for PGP key.

2 1