December 2003 - cypherpunks-legacy

Harlow! Email me quick.
by Jeff Davis 17 Dec '03

17 Dec '03

Sorry guys... Darren, I was getting around to your EFF questions and such this evening and apparently I deleted all your mail by mistake. I've got a free public internet access site for you to tnet to and you can be a private citizen in cyberspace, or Sgt. Harlow, whichever you prefer. -- PGP PUBLIC KEY via finger! JAFEFFM Speaking & Thinking For Myself! * eagle(a)deeptht.armory.com email info(a)eff.org * *** O U T L A W S On The E L E C T R O N I C F R O N T I E R **** ***** Committed to Free Public Internet Access for World Peace *****

1 0

Re: remailer@soda
by gtoal＠an-teallach.com 17 Dec '03

17 Dec '03

remailer@soda (formerly hh@soda) now uses pgp's implementatoin of idea for the encrypted response block function, making it much more secure (i hope). Good stuff. But could you do the limited-use destroy-the-key stuff before you release it please - I'm really dubious about this single key you're using. It destroys confidence in the system completely for me. G

1 0

Tessera the PCMCIA Card
by koontzd＠lrcs.loral.com 17 Dec '03

17 Dec '03

>From Electronic Designs, April 4, 1994, by DAVE BURSKY New Products, Digital ICs (approximately 1/2 page) P. 148 CRYPTO ENGINE EASES PUBLIC-KEY SECURITY ... Developed by National Semiconductor, the iPower secure microcontroller holds the encryption algorithms, secret data, and the central processing unit that processes them. The chip was designed to remian secure from electrical probes through the signal pins, as well as from analytical probes that etch package and circuit layers. Any such penetration would cause the stored data to be "zeroed" before it could be read out. The iPower SPU consists of a 32-bit CPU core with on-chip ROM, a real-time clock, and a interfaceto off-chip nonvolatile (battery-backed_ RAM that holds scrambled data. The remaining blocks on the chip include the encryption engine, some battery-backed RAM to hold secured data (master keys, algorithms, or records) and a host-system bus interface. The SPU chip can be combined with off-chip low-power RAM, a battery, and a PCMCIA interface to squeeze the entire public-key token on a card that meets the PCMCIA's type-1 format. The cards, dubbed Tessera after the token ancient Romans used as a ticket or means of identification, can now be implemented at a relatively low cost (less than $100 dollars per user for large orders) compared with previous solutions. Nevertheless it provides the highest level of commercial security (FIPS 140-1 level 3). Encrypted data could provide positive identification of users, store private medical records, include authorization codes, or even perform secure transaction processing. ... ---------- Tessera was an identifier for slaves. FIPS 140-1 level 3 is not the highest commercial security level, (per FIPS 140-1, January 11, 1994): ... 1.4 Security Level 4 Security Level 4 provides the highest level of security. Although most existing products do not meet this level of security, some products are commercially available which meet many of the Level 4 requirements. For the Tessera we know utitilizing CAPSTONE, Escrowed Encryption is present. It would hardly qualify for performing secure transaction processing for say money transactions when the U.S. government and/or other law enforcement agencies have the ability to break open the monetary instrument, by obtaining a warrant or through "other authorized access". The degree of privacy afforded is not absolute, even to the extent of the strength of the cryptographic algorithm (assuming transmission of the Law Enforcement Access Field (LEAF)). Likewise those able to obtain access have the ability to tamper with or spoof transactions. Were it used to control access to facilities, it would certainly enable "black bag jobs" both physical and virtual. (Its a type-1 PCMCIA card)

1 0

Hyperdrive
by Black Unicorn 17 Dec '03

17 Dec '03

I'm still looking for info on the encryption function in "Hyperdrive" Anyone have any clues? -uni- (Dark)

1 0

Re: Black Net
by fhalper＠pilot.njin.net 17 Dec '03

17 Dec '03

Could all the shit with Blacknet STOP. The wise (and funnny) sages of the list have had they're fun at the expense of the newbies and other, so it's over. Thanks, Reuben Halper Montcliar High -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.3 mQCPAi16KosAAAEEAMUwRni4a9+GbuAhHDLcBWK60hCJUYxhr2hYokpELAhx0ejp 2fq61Tu9Hjn051CN8Xy5nu6sv2ODfG/t59l4DJSb5pirQaII3zaX0rMX0ydwGDoW YakL4ow1lNY+d/k14KpIuUW404+fNuNhIGSkdVLQIfbOgh0preK7/P44AKvdABEB AAG0JlJldWJlbiBIYWxwZXIgPGZoYWxwZXJAcGlsb3Qubmppbi5uZXQ+iQCVAgUQ Lam+x9xF3PzIgw7tAQHPogP/VmoF5AHJNBFlpxl1tvHAzrMLE8nkpengs94Y8zmF 1r5+hk0TaYeEEUzYf1QNfflya5md3WKeXnI3WhO2SRpdH953AD/tNmxw2LLEegat 5sI1XNPuNqxeompiHFRnCz4dI14qjDvRwnPay187/Q5q2F3m0nP8qA6wgl59mDq3 FuCJAJUCBRAteitx4rv8/jgAq90BARTHBACh99OJtGXATm01BUa+u6WHU5CBc2FN F5z29RpTA/JTrgUhn4qeZ19iCIlhe1wi0D3QQH0wN7FrMp6onMw49KFU05/KLDLb JSWdCzjbl/wPEG8z//O6+Pqzj+ZcNM9Rm0b08/QdVoQZMljXkl19Gq2P/D4ceewe WAKePQ2ciFdNbw== =K4ez -----END PGP PUBLIC KEY BLOCK-----

4 3

EFF & PGP
by Anonymous 17 Dec '03

17 Dec '03

Well, it looks like someone at EFF finally woke up and listened to what the crypto world was telling them! Still not signed to protect against forgeries, but definitely a step in the right direction! ---------- Forwarded Message ---------- EFF PGP Public Key for Encryption ================================= This is the ASCII-armored PGP 2.4 public key for the Electronic Frontier Foundation (EFF). Note that mail sent with this key will be considered addressed to EFF in general, not to a specific person, unless otherwise noted. To send personal information to someone at EFF, for whatever reason, please use that person's own key, or arrange some other method of communication. This key is provided principally for the sending of sensitive legal information, and the transmission of credit card numbers over the net securely when becoming a member of EFF. It takes us time and effort to decrypt, so please don't use this key trivially. Thank you. To add this key to your public key ring, do: pgp -ka pgpkey.eff pubring.pgp If your public key ring has another name, use that instead of pubring.pgp. For MacPGP, click on Key | Add Key, select pgpkey.eff as file to get key from, and pubring.pgp (or whatever your pubring is) for file to add key to. To encrypt a message, please see the PGP documentation, and remember that you will almost certainly need to generate the result as an ASCII-armored file, so you can email it (non-ASCII-armored PGP ciphertexts are binary, and will get mangled if you try to email them. -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.4 mQCPAi2B6bAAAAEEANVTvM2dhZ0SHsgWOzfn1lRzZcNltsf3Bjt0t5GBuscoyPrD lfBwtzjkZTasK1MfAX/vrUl6BVKb18FCGhuJlmEaZqZ95q5mdsj4tAD18CDg0Jmv bAhWE/JxhhQDG2s9dt5x4GC+ofaHr8nlXKqjyMkb85EyVFHw85hLHLcPIDklABEB AAG0MkVsZWN0cm9uaWMgRnJvbnRpZXIgRm91bmRhdGlvbiAtIEVGRiA8YXNrQGVm Zi5vcmc+iQCVAgUQL+os4hibHbaiMfO5AQEYOAQArtVNhJeRpaShNFd7MQfOFLM9 hql2KBmyvs20/kiwLkGN8Se3GJPYPovBjiB+o9r1GOuc654kxu9KU0m/8SoafWeU p5jBnqlgGwXIo/v5twfKvSnhh75XyGrIwUvlLzxMQaym0slV7YgLUQozWIhuu95d r22qYYdD1PS2SuDpSGGJAJUCBRAtj6o5jC7pCgHDqtsBAVeNA/9ay5pJ7srK7+ns tstaxDe7NnAFLfezgO1yiNED0yM4cDeTNXgZDFNuhzBICmP6fBNSIaUUSwuiQnc8 do45WRo120PX/c+nLoYKeyu8iI0BWA6cjYwk3zKLxpETqpxxKthX6JJ2fxwpL6EQ dF+pmotwtbv3wIH/7FdaZh5r2Nu3/IkAlQIFEC2PJWg2QIGMNPTEcQEBQYoD/2W9 93Yz/c/qmjxpH50blqSPJhd//KYP6AQmmyxI6L+29KqjgflnI56Rk2QUJfs4SnS/ 3jB0H5v9U8u8YocvLsnWL7QvHt0fueoMBk6AFMxgQFzZP3s7dppFncYuiQ710hFL xKu2PFWeurEEZ2VD/KB5fUPdZnwd78bMVj4RIkyJiQCVAgUQLYHqDphLHLcPIDkl AQFBxAP/Q2+RNM218JhEBMcLxoWExWN7wIgIjQF+mZIMvXR9TjhsBtUWQM23XXMi zpQsTCu5/xqTe0OB5no8UfPgktieLyBGFleQgPeXlnmGzcoAeWV6DArFUCN7JKA1 589Zba0/vr4XQpaLgdGInw0nZAYvPKNsKrKl7H37zenmIN9UdTc= =f3Zf -----END PGP PUBLIC KEY BLOCK----- ------------------------------

1 0

Re: myk-78
by Matt Thomlinson 17 Dec '03

17 Dec '03

I just sent this to a2(a)well.sf.ca.us (arthur abraham) but after a finger attempt, I'm not so sure his account exists there anymore. On Wed, 20 Apr 1994, Matt Thomlinson wrote: > I'm reading through an old post of yours (gosh, 7 days from being a year > old) regarding the clipper chip. > > You laid everything out pretty carefully, but one thing your article > doesn't seem to mention: > > you've created the LEEF [L1|L2|IV] and when transmitted in the block, it > looks like [encrypt(CV), checkword, L1|L2|IV], right? This is a 56+24+192 > bit number ( = 272 bits). > > My question: how often is this chunk sent? seems like you'd only need to > send it once per call, but I'd think they'd send it every so often > throughout a call, although this could cause problems for high-bandwidth > digital uses, right? Also, if someone could tell me if the checkword for the CV is encrypted along with the CV I'd be grateful. That is, is the packet [encrypt(CV,checkword), L1|L....] or [encrypt(CV), checkword, L1|L...] mt Matt Thomlinson University of Washington, Seattle, Washington. phone: (206) 548-9804 Check my home page -- ftp://ftp.u.washington.edu/public/phantom/home.html PGP 2.2 key available via email, or finger phantom(a)hardy.u.washington.edu

1 0

CBW for DOS?
by David Merriman 17 Dec '03

17 Dec '03

Stoopid Noobee Kweschun: Is there such an animal as CBW that runs under MS-DOS or (better still) MS-Windows? "posted" or "emailed" replies welcome (hell, I'll even accept some DOS/*nix/MAC OS flames). Dave Merriman - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - PGP Public Key Fingerprint for Dave Merriman <merriman(a)metronet.com> Fingerprint FC BF 45 91 EE B6 D6 C2 80 AB 4B BF 88 D3 55 26

2 1

BlackNet here now?
by Gary Jeffers 17 Dec '03

17 Dec '03

Actually we have had a BlackNet on the Internet for years. I admit its not much of a BlackNet - maybe just a proto BlackNet that will never grow to do justice to the BlackNet concept. The proto BlackNet is #warez on Internet chat. For years commercial/retail software has been ex- changed on #warez. This is a pretty narrow area of exchange. Also, it could be argued that #hack on internet chat has been a proto BlackNet entity for years. #hack exchanges system breakin information. Years ago I tried to encourage both these channels to use encryption to exchange sensitive files. I used to post their TOPIC with the message "WE NEED PUBLIC KEY ENCRYPTION NOW." before I found out about PGP. Once I found out about PGP, I tried to encourage them to adopt it. Strangely enough, neither of these channels were at all enthusiastic about encryption. #warez makes itself an "invite only" channel apparentl for security. If someone could introduce a method to these channels to exchange money for information, then it is a possibility that they could mature to real BlackNets. They would also have to use anonymous remailers. They already exchange illicit goods. Maybe a Cypherpunk acting in a sort "Peace Corps" way could lend them some assistance. It could give you a sort or satisfied feeling in latter years to know that you had played a part in creating some BlackNet monsters. If real BlackNet tech became a part of these two channels, the possibility exists that they could expand their ranges to become true, full BlackNet entities. I believe that barring a successful Federal technological capture of the Internet, BlackNets are inevitable. Yours Truly, Gary Jeffers PUSH EM BACK! PUSH EM BACK! WWWAAAYYY BBBAAACCCKKK! BBBEEEAAATTTT STATE!

2 1

Canadian Encryption info???
by Deanne H Morgan 17 Dec '03

17 Dec '03

I have been following this list for several months, but have not seen anything on encryption issues with regards to Canada specifically. Does anyone know anything about [or have any idea where to begin to look for] Canada's policies regarding encryption and encryption technology?? Will Canadian laws change if/when Clipper encryption comes into functional existence? What about if the US enacts laws regarding making other forms of encruyption illegal? Is encryption mentionned in NAFTA or any other negotiated treaty with the United States??? Thanks, Deanne Morgan dmorgan(a)uoguelph.ca

2 1