December 2003 - cypherpunks-legacy

SecureDrive 1.3A Verified available via mail server
by edgar＠spectrx.saigon.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I have just verified that SecureDrive 1.3A, previously announced here, is available not only at the following public BBS's as SECDR13A.ZIP: Eagle's Nest (408)223-9821 Flying Dutchman (408)294-3065 But I have now verified that Version 1.3A may now be obtained from a mailserver. Send mail to Server(a)Star.Hou.TX.US with body text that looks like this get /files/public/secdr13a.zip quit Please attempt to use the mailserver or the two BBS's above before requesting a copy directly from me. Note: Attempts to use either the above BBS's or mail server to transmit SecureDrive 1.3A (or any strong cryptographic product) outside the USA and/or Canada may violate USA law, which the USA may elect to enforce by arresting violators overseas and bringing them to the USA for trial without benefit of extradition proceedings. -----BEGIN PGP SIGNATURE----- Version: 2.3a iQCVAgUBLVisz94nNf3ah8DHAQHG2AP9HichQaiTd1T/W+NLkmdqUGauexI2gXeh MfyO5SVkpWDYgZzfVmZnAKv7O6OUuj87qZvxnLv4BebWV01zUJ4aml5NJM97yZm7 m/cnhzSGqEIfQifOREfsmkh5hoV4pGgBYjuVDVxpzlWog+5go1tQOcbJF8sSSzEx Ez0iZpTGmLw= =ZyrH -----END PGP SIGNATURE----- -- edgar(a)spectrx.saigon.com (Edgar W. Swank) SPECTROX SYSTEMS +1.408.252.1005 Cupertino, Ca

1 0

Prime Numbers
by garet.jax＠nitelog.com 17 Dec '03

17 Dec '03

I'm presently trying to generate a list of prime numbers on a friend's 486 DX2 66mhz computer, but that is rather slow going as you might imagine. I'd like to get a list of all the prime numbers up to 80 digits in length, and I know these numbers must have already been computed by someone... atleast for cryptography purposes. Does anyone know where I can get such a list, or a portion thereof? Thanks in advance, -Garet {Garet.Jax(a)nitelog.com}

2 1

MIME
by Peter shipley 17 Dec '03

17 Dec '03

it would be nice if people who send PGP's email would also place the appropriate "Content-Type" in there headers so there email in a easy manor. -Pete

2 1

Re: Prime Numbers
by Carl Ellison 17 Dec '03

17 Dec '03

>I'm presently trying to generate a list of prime numbers on >a friend's 486 DX2 66mhz computer, but that is rather slow going >as you might imagine. I'd like to get a list of all the prime >numbers up to 80 digits in length, and I know these numbers must >have already been computed by someone... atleast for cryptography >purposes. Let us know when you're done -- or even half-way done. Thanks, Carl

1 0

PGP Bug continued
by anonymous＠extropia.wimsey.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- >I wish there were some easy way for me to email you back, but >since there is not, I have to do it this way. I posted this on alt.security.pgp, you can followup there and avoid annoying anyone. Sorry about that. Or just reply in clear if you think anyone else would be interested. >Anyways, I took the bug.c you sent me, and I built it against >the mpilib and mpiio from my PGP 2.3a sources, including all the >headers from those sources. I did not attempt to build it against >PGP Tools (its possible that you're changes to mpi for PGP Tools have >caused this bug). I didn't change mpilib one bit. The date is still 5-17-93. The .h file date is 5-9-93, so it isn't changed either. >Anyways, I tried this on two different platforms with two different >byte orders. In particular, I used a mips-ultrix and sun386i. The >results, below, are the same, and show that there is no problem >with PGP 2.3a, or, at least, I cannot reproduce your bug. Sorry. I tried it again: if you use Upton's modmult, the problem goes away. If you use Smith's modmult, the problem exists on both dos and unix/gcc. Try defining SMITH and rebuilding. Pr0duct Cypher -----BEGIN PGP SIGNATURE----- Version: 2.3a iQCUAgUBLVndssGoFIWXVYodAQEwzQP4mvhPS9vXNvMOReWespw7TYrr/ifR4XZ0 snUKn+DPeMid/d63vCy/RFxs3ccPXSV4hzANmtLeLpTSnYLgNA4QX7R1bjq+I4wy 9gGvr5BlfkDQLUT5iPkp9mnBzuwIQzBxbcz6RKoEfQUbRRWr5AE+eI8+yA5ozjcZ wJsE9IvCtw== =ouxg -----END PGP SIGNATURE-----

1 0

Dorothy Denning at it again
by Jonathan Corbet 17 Dec '03

17 Dec '03

Just thought I would mention that if any of you haven't yet read Dorothy Denning's contributions to the clipper debate in RISKS 15.48 you should probably ought to do so. Preferably on an empty stomach. jon

2 2

WANTED: speakers on cryptography, etc.
by Jim Hawtree <raph＠fnalv.fnal.gov> 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- >Where are you giving the seminar, and to whom? I'm talking about PGP to the Computing Dep't at Fermilab at Batavia, Illinois where we have the largest particle accelerator in the world (for elemantary particle physics research). It will be Feb 22 at 2PM at the High Rise (Wilson Hall) here, in 1West. We are open to the public, BTW. Yr all invited. We have all sort of events and colloquia. Batavia is about 30 miles west of Chicago, off I88. Know anyone who could give a lecture on encryption? Hacking? Cypherpunkiana? Security concerns? Clipper chips? I can get you a lecture for the general public here, or for the 2000 or so engineers, physicists and computer people here! We have lectures and seminars for pop to esoteric topics. I'll help you spread the word. I'm on a couple of committees here. We will be *delighted* to find speakers. BTW we had the US Dep't of Energy, Office of Counterintelligence here last week talking about security. Their concern was 95% smuggling commercially sensitive info from large companies to foreign concerns via diplomats through their embassies to give them an unfair advantage over us. Money talks. (Please forward if you please to alt.security.pgp, cypherpunks@, etc. I unsubbed from the latter due to the huge volume of mail.) Public key and phone by finger. Cordially, Jim _______________________ "We are so small between the stars and so large against the sky And lost among the subway crowds I try to catch your eye..." ---Leonard Cohen -----BEGIN PGP SIGNATURE----- Version: 2.3 iQCVAgUBLVoNXAbIRq6ena9BAQG0MgP6AqKmHfL31R7eFrY/haoKS5ftD60RhFJ5 gt8zvZ8BYdVFBxuLUTzn0b9hn1uqWP7Uvtl+q8ZR2PSGLUlGxUZhQDbAGAoX2SFE y6c1NSIQpMfk9TotrBzzcPR38SSE3FulIks97JM3P8cxEOcsH9SoWDff8UMHFxJN dW6XdNxShuQ= =bPlh -----END PGP SIGNATURE-----

1 0

Re: Oh No! Nazis on the Nets
by an57322＠anon.penet.fi 17 Dec '03

17 Dec '03

Duncan Frissell wrote about an article in the London Daily Telegraph on German neo-nazis: [stuff deleted] >Chip belives that 1,500 of Germany's 42,000 Righ-wing extremists use the >Thule network which, apart from co-ordinating demonstrations, gives out >information on such matters as how to start your own newspapers or make a >bomb [Both equally illegal activities in the BRD -- Editor's note]. Yes, read that note again. Who cares about 42,000 right-wing extremists in a country in which the government is so fascist to make it illegal for someone to tell you how to start your own paper? And just in case you were wondering: Germany is considered a democratic country. Now you know where the US under Clinton is heading. -=T.A.Z. ------------------------------------------------------------------------- To find out more about the anon service, send mail to help(a)anon.penet.fi. Due to the double-blind, any mail replies to this message will be anonymized, and an anonymous id will be allocated automatically. You have been warned. Please report any problems, inappropriate use etc. to admin(a)anon.penet.fi.

2 2

Re: real encryptor
by Karl Lui Barrus 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Matt wrote: >Karl Lui Barrus <klbarrus(a)owlnet.rice.edu> wrote: >> The program I described earlier (RSA.tar.Z) is pretty minimal. >> Secret keys are just text, not locked by a hash of a passphrase, >> no "name" information attached. Public keys are the same: no >> username attached, no web of trust, etc. The output is in >> binary form, with no headers or checksums or anything. >> PGP has keyrings, this program requires you to keep track of >> seperate public keys on your own. >Does this program exist? If so where can I get it? Sorry about the confusion Matt, I had sent a letter to Xenon about his idea for stripped PGP describing this pure RSA program, and didn't send it to the list. Anyway, the program RSA.tar.gz is at ghost.dsi.unimi.it in /pub/crypt. It implements pure RSA, no IDEA session keys, no MD5 hash of a passphrase, no checksums, no keyring, no usernames, etc. It is about as minimal as you can get. Which may be perfect for your purposes :-) Because it is just RSA, it is SLOW!! Which is to be expected, but all the same the amount of time required to encrypt a reasonable sized file is surprising. Heck, even generating a decent size key takes quite a bit of time. I'm sure the code could stand some optimizations, but even still public key crypto is much slower than secret key. Here's what a public key from the program looks like (in fact, it's my public key for this program): BB56AA026595006ED21C22FE5E5DD9432285846BB000627D0CFAA4FD28960EF2 33FABB5F35102460A001C7B2E37DE93C757C3935972086AD55BC69B36C438A05 291F3B75786BA0E4B9DBF43F6B5AE799A148D779303600D007449E258A8F3ABC BA65393C0627BE386F9 # B6E980C29F3D38C4898541565BCFE062AA50C60E4E411379143AD905E9A0257E 424FA4324B6D0BA71E6FBAC3C18D0F6A53D35CD7C3534DDB0D07ED642A8C7239 227DE4C742F141BCAE9698426E005F3F15B2E0AED6A0F125E69FC503B6057184 9124780B096F1C3ADE5 This public key and the associated secret key correspond to about a 700 bit modulus (100 digit and 110 digit primes). The program encodes numbers as an ascii string, but that is it. The output of the program is the encrypted file, which has no header or magic byte information, etc. Decryption takes an encrypted file back to the original form (except it looks like it pads and doesn't toss the padding, maybe a bug) but if you use the wrong secret key (i.e. not encrypted for you) the program decrypts the file to junk. Or you can decrypt junk into different junk :-) If you edit your keys and change a few characters, or do the same to the encrypted file, you don't get "checksum" errors, you just get an unreadable file. Due to the slowness of the program, I think for testing the output for randomness one should create relatively small keys (say 20 or 30 digits max) and encrypt large files. Of course, at these sizes, it is much easier to factor the modulus than brute force IDEA, for example. Also, if you want larger keys be wary of the included script which generates keys for you; it assumes you want a small key (and thus will mess up the generated files). So if indeed this is nothing but RSA then it should be impossible to tell the output of the file from random noise. (And incidentally, I checked out Chaitin's Algorithmic Information Theory and have tried to read the chapter on random numbers, but let's just say that it is extremely slow reading :) I guess that's because it builds on stuff from previous chapters or something...) Karl Barrus klbarrus(a)owlnet.rice.edu -----BEGIN PGP SIGNATURE----- Version: 2.3a iQCVAgUBLVmLfoOA7OpLWtYzAQGpjwP+NmT5R3UlAbRN6A4YCk9DwqfjL1NlbhhQ 3ZDIqbRQISrrftcxNQv5doxUQNLKiQ2WaRBfQBuowCO3/mrjocsPK7QvA5P5on0R N40uaudEpSCoEyem+DalRRKrrtSM9qfKNWxEQyL2OAI6cuw9zSvrXT+Ih9qtqigd wKUju6ccoLM= =Tsrs -----END PGP SIGNATURE-----

2 1

Re: Oh No! Nazis on the Nets
by danisch＠ira.uka.de 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- an57322(a)anon.penet.fi wrote: > a country in which the government is so fascist to make it illegal for > someone to tell you how to start your own paper? Do you really believe such a nonsense ???? What kind of propaganda are you doing here? Both right-wing and left-wing use computer networks (and perhaps anon.penet.fi and the cypherpunks mailing list... ), this is true and dangerous, but it never was illegal to 'tell you how to start your own paper' . Hadmut -----BEGIN PGP SIGNATURE----- Version: 2.3a iQCVAgUBLVptsGc1jG5vDiNxAQHjAwQAjJ8FlpxEqDwDHqFHbxRbwRDlHU2zsc8N eY8HOH0xiabQDB6C1b7JoxwApdWZhDPrhvPu/PILzokuEnlha6v6eRnUW7eturgR 69t/S8vg28bwz8hm0vxDVk9KFIoBgOmjptmXdal0FzHKS0eweHwhLBn0xxiDFnNc Z/6yxUqLrM4= =RQyE -----END PGP SIGNATURE-----

5 4