December 2003 - cypherpunks-legacy

Re: Only 1/3 of Government Computers Down So Far
by KALLISTE＠delphi.com 17 Dec '03

17 Dec '03

Perry, Many people are interested in cryptology because they don't want the NSA (among others) invading their privacy. The Foster story concerns the chief NSA privacy-invasion of modern times: spying on domestic banking transactions. So it's relevant. The Grand Inquisitor role is getting a little old. So if you want to continue to play it, my response is: Fuck Off. -Orlin

2 1

This summer's special delivery?
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 11:59 PM 8/9/95, Matt Blaze wrote: >Someone sent me (to my bell labs address) a copy of this this afternoon via >an anon server in the netherlands. It looks like others got it as well, and >it appears to have been posted to the cypherpunks list, though it hasn't >yet shown up here from the list (my mail seems to be slow today). Did >anyone else have a copy mailed directly to them? I got a copy mailed to me directly as well. I don't know why he/she/it sent it me, but I got it. I have nothing further to add on this. But recall that it was just about this time last year--just before Crypto--that the "alleged RC4 code" was posted anonymously to the list. Hmmhhh.... --Tim May Special note: My ISP has changed its domain name from "sensemedia.net" to "got.net" (as in "got milk?"), so I have to again ask you all to bear with me and use my new e-mail address, "tcmay(a)got.net". ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net (Got net?) | anonymous networks, digital pseudonyms, zero 408-728-0152 | knowledge, reputations, information markets, Corralitos, CA | black markets, collapse of governments. Higher Power: 2^756839 | Public Key: PGP and MailSafe available. "National borders are just speed bumps on the information superhighway."

2 1

Prime Number Gen's.
by aba＠dcs.exeter.ac.uk 17 Dec '03

17 Dec '03

"Rev. Ben" <samman(a)cs.yale.edu> writes on cpunks: > Does anyone know of where I could get source, royalty free, in the US for > a good Prime Number Generator? GNU code sounds like it would fit the royalty free bill. Try the GNU multi-precision library: gmp-1.3.2.tar.gz from all good GNU sources. I get my stuff from ftp://src.doc.ic.ac.uk/gnu/ if you don't have a GNU ftp site to hand. There's a function int mpz_probab_prime_p(mpnum, SURETY) which returns true if the prime passes SURETY probablistic prime tests. I think if it passes say 25 tests, then there will be less than a 1/2^25 chance that it is not prime. Also, on: http://dcs.ex.ac.uk/~aba/rsa-keygen.html I've got some code Aggelos Keromitis <kermit(a)forthnet.gr> wrote using the GNU mp library for generating RSA keys, it uses the probab_prime function, like this: while (!mpz_probab_prime_p(&p, 25)) /* Find a prime */ mpz_add_ui(&p, &p, 1); Where p is a random starting point. Ie just add one and repeat. It would be faster to check for some more obvious things like even nos, etc. But it seems to work well enough, and generates working RSA keys. Adam -- HAVE *YOU* EXPORTED RSA TODAY? --> http://dcs.ex.ac.uk/~aba/rsa/ --rsa--------------------------8<------------------------------- #!/bin/perl -s-- -export-a-crypto-system-sig -RSA-3-lines-PERL $m=unpack(H.$w,$m."\0"x$w),$_=`echo "16do$w 2+4Oi0$d*-^1[d2%Sa 2/d0<X+d*La1=z\U$n%0]SX$k"[$m*]\EszlXx++p|dc`,s/^.|\W//g,print pack('H*',$_)while read(STDIN,$m,($w=2*$d-1+length($n)&~1)/2) -------------------------------8<------------------------------- TRY: rsa -k=3 -n=7537d365 < msg | rsa -d -k=4e243e33 -n=7537d365

3 3

>actual< classification categories
by tbyfield＠panix.com 17 Dec '03

17 Dec '03

I have copies of declassified documents with the following markings: secret (1985) top secret (1986) classified (1984) confidential (1985) eyes only (1986) Some have various combinations, such as: secret/sensitive top secret/sensitive eyes only/top secret/sensitive This isn't a complete list, but it's better than idle speculation. The vast majority of declassified paper documents that I've seen (not a small number) have explicit statements regarding _who_ is allowed to see it, _how_ they are allowed to move and/or distribute it, control #s and copy #s, semicomprehensible strings of characters, and so on; many have thiings like destruction instructions and expiry dates. More and more, slight variations are being introduced into each version for purposes of compartmentalization. It's conceivable that this is the source of the typo Hal spotted, but I doubt it. The fact that specific instrux were relegated to a separate "label file" seems very suspect; the fact that the warning tag is tacked onto the end is maybe noteworthy--it's in a different format, which is possibly odd, but it might've been put there for silly theatrical purposes. Basically, "top secret" without further comment is James Bond stuff, since in and of itself it doesn't tell those who need to know what they need to know. My guess is that someone stuck the "top secret" stuff on the beginning and end of something they found. But that doesn't make it a hoax, necessarily. Ted

1 0

Bank Fees and E-Cash
by Black Unicorn 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- - - - Bank Fees and the E-cash Niche. Banks have gorged themselves on rocketing fees for the last five years. The result is that typical bank customer currently pays 150% of the amount of interest collected on accounts in a given year in the form of fees. My prediction, and my hope, is that e- cash will cut through the pretense upon which the rationalization of many of these fees is based, and even market itself on this point- Lower Fees. - - - New Fee Schemes "Overdraft Assistance" and the Myth That Only Irresponsible Bank Customers Bounce Checks or Overdraft. Banks have begun to implement policies intended to help the customer overdraft. They may, for example, cash the largest checks first such than an overdraft will hit with several small checks rather than one or two large ones causing multiple overdraft fees. Banks have begun to routinely delay crediting checks for 48 and 72 hours, and out of state checks for anywhere from 3-14 business days. ATM cash deposits are typically subject to 24-48 hours delay. The "Unofficial Credit." Many times the delays in crediting various transactions are hidden by the "unofficial credit." Most noticeable in ATM deposits, a credit is given but should demands on the account draw into the "unofficial credit" an overdraft will be posted on the rationale that an "official credit" has not yet been posted and the funds are thus not "officially" available, this despite the fact that the funds will appear available to ATM balance requests and statements. Of course the bank will profit from the "unofficial credit" to "official credit" interest float regardless of what overdraft fees might be charged. The "wire credit" and "official wire credit" are another example. Banks receive a wire transfer on Monday, send a "electronic payment advice" the same day, but post the credit to the account "officially" on Tuesday. The original intent is for the bank to be able to take advantage of the interest "float" between the receipt of funds and its credit to the account. The result is an additional overdraft potential. The Separate Wire Office Hours. Often times the bank's "wire" office will close hours before the branch closes. Wires received some hours before closing on Friday will not be credited until the following Monday. The ATM Processing Time Table. Many bank only begin processing ATM deposit transactions an hour before closing, crediting only as many deposits as can be processed in this time, the remainder are not processed until the next morning. ATM debits are, of course, processed all day. Check Processing Time Table. In a given day, debit checks are processed on an account before deposit checks are processed. Obviously, an account that overdrafts overdrafts only because of the order in which checks are processed. - - - The Created Convenience Fee A great many bank fees fall into what I call "created convenience fees." Really created convenience fees resemble airport customs bribes in third world countries. The customs officer makes what should be an easy passage terribly difficult, then demands a "fee" to make travel as easy as it should have been to begin with. The net effect is for the traveler to pay to dispense with a problem created by the party receiving the fee. Nigeria is a prime example. Upon arrival the average traveler will find him or herself embroiled with licensing deficiencies, visa fees, entry fees, the threat of quarantine, seizure of expensive equipment for "inspection" and other such invented requirements. Some hours into the "negotiations" the customs official will offer to "overlook" these transgressions for a "fee." This is a created convenience fee. Banks fall into this category by such programs as "overdraft insurance" whereby banks enact policies which, as we have seen, make it painfully easy to overdraft and then charge a monthly fee to avoid the overdraft charges. - - - The Result Bob is a sort of combination of my own experience and discussions with other bank customers in D.C. Bob has an account in Washington, D.C. with $1500.00 in it. Bob Receives a wire at 3pm Friday for $1700.00 Bob writes five checks on Friday, one for $1400.00, one for $200.00, one for $150.00 and two for $100.00. Totaling $1950.00. Bob deposits 4 checks totaling $2000.00 in the night depository Saturday. Bob deposits $50.00 in cash in an ATM on Saturday Night. Bob checks his ATM balance ($3250.00) and withdraws $50.00 from an ATM on Sunday Morning. Bob's wire arrives after the wire office has closed for the day - an "unofficial credit" is posted Friday before closing anyhow. Bob's bank processes the $1400.00 check first, leaving Bob's account with an "official" $100.00 and $1700.00 in "unofficial funds." Bob's bank processes the $200.00 check, notes a $100.00 overdraft, charges $25.00 for this check, refuses payment on the remaining three checks and drops a $25.00 overdraft fee plus a $10.00 "bad check" fee for each. Total charges: $130.00 Bob's bank processes the $50.00 ATM withdrawal, which overdrafts. $25.00 fee is posted. Total fees so far: $155.00. Bob's balance for the majority of Monday: -$255.00. Bob's bank begins to process deposits, notes all the checks for deposit, $1000.00 of which are out of state. No checks are credited. Bob's bank notes the ATM transaction at the end of the day on Monday, but does not credit it immediately despite the fact that it is cash. Bob's bank credits the ATM deposit to Bob's account on Tuesday. Bob's balance is now -$205.00 Middle of the day Tuesday, Bob's account has been below its required minimum $500 balance for 24 hours. A $50.00 fee is charged. End of the day Bob's wire is "officially" credited - a $10.00 fee is charged for receiving the wire. (No, I'm not kidding) Bob's bank credits the $1000.00 of in state checks on Wednesday Finally, on Friday, Bob's out of state checks are deposited. Bob will likely be liable for $50.00-$75.00 fees for each of his bounced checks as vendors will probably charge hefty fees. Telecheck will have Bob on the 10 most wanted list for $350.00 in bounced checks. Bob's check writing ability is about nil in D.C. for the month it will take him to clear it up. Bob gets a mailing a week later telling him of the advantages of his bank's newest "overdraft insurance" program. $150 a year. Bob, for what would literally be a series of very responsible transactions, is looking at over $215.00 in bank fees, and at least $150 in bounced check fees from vendors because of violation of technical rules the bank has designed to cause fees to be charged. - - - E-Cash I cannot believe that e-cash won't be able to solve some of these problems, and I hope it will limit its own fees to usage. To me this is a classic argument for small house e-cash shops. Citibank and Mastercard are going to fight for their fees. -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAwUBMClJUS1onm9OaF05AQEhugf/T2FquzHdEhHp8dQI5FRYcuayTusig1F3 pHejUdry84F1MqLArSZukVGxEWtZVR0qh2xq4AiN/UwlW9ZKasFdbPPGJtbD6gpO aALJIhQaYJSTQkW4fmieejhcNPMf7e59YaerOl83LkKS/+1tFi9ib1Xz2ZnmXlph 0mWuJjONzH45tPylyJy8fyB9nrpk5WDCAiLhUSxqHRdVmA9nq6uIIZbdmz7sEpLq 82cHyHXKeufGKGvx26R4z3lu0o5Ykd/dGAWADpJ6OT2bhlWFinApF/HMJAA9mLvi w70StZZL/94ncQQWF7LU5vMhGu7/5WNsrpRTzZXG5A0EfFL0ZAdYPw== =ew58 -----END PGP SIGNATURE----- 00B9289C28DC0E55 nemo repente fuit turpissimus - potestas scientiae in usu est E16D5378B81E1C96 quaere verum ad infinitum, loquitur sub rosa - wichtig! *New Key Information* - Finger for key revocation and latest key update.

4 3

Re: "S1" encryption system
by Hal 17 Dec '03

17 Dec '03

Sorry, yet another correction: the G1 box, G[1][i], is parity(i&0x17), not parity(i) as I said, where parity is 0 or 1 depending on whether its argument has an even or odd number of 1 bits. I have checked via a small program that this is correct and that the earlier formula I posted for G0 is correct. Hal

1 0

Re: "S1" encryption system (was: this looked like it might be interesting)
by Hal 17 Dec '03

17 Dec '03

A couple of people have indicated that they did not see the original posting. I changed the subject heading in my followup. The original message was posted under the subject title, "this looked like it might be interesting". At least one person had commented on the similarity to Skipjack which is what prompted me to look at it a little more closely. Hal

1 0

Re: "S1" encryption system (was: this looked like it might be interesting)
by danisch＠ira.uka.de 17 Dec '03

17 Dec '03

> BTW, the code has been posted to Usenet by a Frank Falstaff -- look for > message ID <40b8tk$cj4(a)news.xs4all.nl> in sci.crypt (Wed, Aug. 9, 1995). > His article refers to a message ID (namely <40b50l$oa8(a)utopia.hacktic.nl>) > that differs from the message ID of the copy sent to c'punks. So it looks > like there was at least one additional recipient. That's a minimum of 5 > originals so far.... It has been posted twice to sci.crypt, once from "Frank Falstaff", and once through the remailer(a)utopia.hacktic.nl. sci.crypt seems to have been one of the recipients... Hadmut

1 0

Hail South Florida Cypherpunks!!
by liberty＠gate.net 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- - -----BEGIN PGP SIGNED MESSAGE----- [All the rest of ye can delete this message now, with my sincere apologies, and return to the regularly scheduled flamewar. <Regarding just how hard it is to actually hit the "delete" key when a message ye don't want appears, as opposed to posting yet *another* message.>] HEAR YE, HEAR YE, the inaugural meeting of South Florida's Brew Crew O' (Cypherpunks), is scheduled for Saturday, August 12 at Ye Olde Riverwalk Brewery in Ft. Lauderdale. Good ale, good discussion and good friends will hopefully be a highlight of the fest. And should the invited Dark Knights (cops) arrive [we're expecting one] a lively jousting contest will ensue (the loser will be ceremoniously placed in the C-punk stockade and force fed Clipper Chips). Should Sen. Exon, the evil Sheriff of Congressham (or was that Congresspork?) attend our noble round table, we will have a hanging in the town square, preceded, of course by the traditional legume toss. [Beano, anyone?] There will be a short speech by my friend Ginger <Phiberflea(a)aol.com> who is fresh back from Las Vegas-shire and the DefCon III convention. She will describe what it's like to be one of the few wenches at a conference full of male hackers [guys, it looks like we're all in for some trouble!]... If one of ye brings a PGP-infested notebook, there may even be a keysigning! We can even discuss the recent "spooky" psoting to the list. Anyway, _everyone_ is invited! Peasants, squires, lords and ladies, jesters, knights, and royalty, a chair and ale await ye all. Feel free to invite any south-Floridians not on the list. No need to RSVP, (ye olde e-mail box is full-to-overflowing already), just show up around 5:00 and have fun! The Riverwalk Brewery isn't exactly Sir May's house, but here are the stats: Riverwalk Brewery 111 SW 2nd Avenue Ft. Lauderdale, FL 33301 (305) 764-8448 >From Miamishire: I-95 North to Broward Blvd., Take Broward East (right) 2 miles to Moffat (just before RR tracks), Turn Right, second building on the right. >From Palm Beachshire: I-95 South to Broward Blvd., Take Broward East (left) 2 miles to Moffat (just before RR tracks), Turn Right, second building on the right. Specialty Beers: - Marlin's Light, Blackbeard's Gold, and Riverwalk Red. Dark Specials: - Offered on rotation: Panther's Porter, Swampwater Stout, Black Marlin Oatmeal Stout, Ramsey's Imperial Stout. Brewmaster's Special - changes monthly Pints $3.00 / 10oz Mugs $2.50 Happy Hour 4-7pm Pints $2.50 Appetizers Chicken Fingers, Wings, Spinach Dip, Calamari, [Mmmm...tentacles! :) ] Italian Baked Ziti, Fried Mozzarella, Potato Skins. ($4.50-$5.95) Soups & Salads Onion Soup, "Geek"/Caesar/Chef Salad, Souvlaki, Chicken Kebab ($3.50-$7.50) Dinner (Sorry, Dragon meat is unavailable.) New York Strip Steak, Grilled Twin Pork Chops, Shish Kebab, Chicken Marsala, "Shaslik of Steer" ??? (whatever *that* is), Grilled Sirloin Beef Tips, Grilled/Kebab Swordfish, Grilled Mahi-Mahi [dolphin], Cajun Chicken Fettucini ($10.95-15.95) Sandwiches & Burgers Burger/Cheeseburger, Chicken/Mahi Mahi [dolphin] Sandwiches ($5.95-$6.95) Dinners served 'till 11:00pm, Sandwiches served 'till 11:30pm, Bar closes at 1:00am., party will [probably] end before that. Ready your mounts and make haste! Ging and I will arrive ~5:00pm to partake of happy hour and fight back any invading hordes for a table. One of us (Ginger) may even be wearing a "munition," so watch out. I will wear my red "Hillary" headband. Hope to see you there! :) Ging. & Jim. JMR - -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Freedom isn't Freeh iQCVAwUBMCmKv21lp8bpvW01AQH0BAQAgZNgdkA/6zdMeHXdD1djYN2/yuw8th53 cftYhVxvdA65qMSAlgZPR2NN+2RC16LhAvLS3E3g2OuSRIpbI/V1OcvpcMG1/JvB HTs1mxhsQrF8YwrUMhe4gOxftXryeR7lalmMBhfka2kpmeZNN2Cev52WQgr8ahWQ NZ20pnfDhLY= =dAdE - -----END PGP SIGNATURE----- Regards, Jim Ray "The people will again respect the law when the law again respects the will of the people." Jim Ray, Campaign '92 - ------------------------------------------------------------------------ PGP key Fingerprint 51 5D A2 C3 92 2C 56 BE 53 2D 9C A1 B3 50 C9 C8 Key id. # E9BD6D35 - ------------------------------------------------------------------------ Support the Phil Zimmermann (Author of PGP) Legal Defense Fund! email: zldf(a)clark.net or visit http://www.netresponse.com/zldf ________________________________________________________________________ - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBMCmPtioZzwIn1bdtAQFmTQF/SHKgZ/eKjEvBY4HBkDPKIMqpbiCP1agy aFuGk5ly6YePLPHo2bEn0KWIvrqSrd9j =f+JI -----END PGP SIGNATURE-----

1 0

Re: "S1" encryption system (was: this looked like it might be interesting) (fwd)
by gt7508b＠prism.gatech.edu 17 Dec '03

17 Dec '03

Forwarded message: > On a fair number of occassions I have been told that federal type folks > have made statements to the effect that there is no such thing as a "TOP > SECRET" classification of US government docs. Since really secret things > tend to get neither confirmed nor denied, I am inclined to believe this. > Thus SECRET is the top classification in today's government/military. If > anybody knows otherwise I would be interested in the information. > > JWS > In high school I was in JROTC and was put in charge of security for our batallion. I read the army's guides to physical security. These books were dated early 80's and late 70's, so the situation might have changed, but I doubt it. They denoted three information security clearance levels. CLASSIFIED, SECRET, and TOP SECRET. If TOP SECRET doesn't exist now, it definately did just a few years ago. -- =-=-=-=-=-=-= Tom Cross AKA The White Ninja / Decius 6i5 */^\* -=-=-=-=-=-=-=- -=-=-=-=-=- TWN615(a)mindvox.phantom.com GT7508B(a)prism.gatech.edu =-=-=-=-=-=-= =- "Government is not a reason, not an eloquence; it is a force. Like fire, =- -=- it is a dangerous servant and a fearful master." -- George Washington -=-=

3 2