December 2003 - cypherpunks-legacy

Mandatory key escrow bill text, backed by FBI
by Declan McCullagh 17 Dec '03

17 Dec '03

All encryption products distributed in or imported into the U.S. after January 1, 1999 must have a key escrow backdoor for the government, according to an FBI-backed proposal circulating on Capitol Hill. The measure would impose a similar requirement on "public network service providers" that offer data-scrambling services. FBI Director Louis Freeh talked about this proposal, without disclosing legislation existed, at a Senate subcommittee haring on Wednesday. Domestic use and sale of encryption has never been regulated. Attached is an excerpt from the draft "Secure Public Networks Act" dated August 28. -Declan ------- SEC. 105. PUBLIC ENCRYPTION PRODUCTS AND SERVICES (a) As of January 1, 1999, public network service providers offering encryption products or encryption services shall ensure that such products or services enable the immediate decryption of communications or electronic information encrypted by such products or services on the public network, upon receipt of a court order, warrant, or certification, pursuant to section 106, without the knowledge or cooperation of the person using such encryption products or services. (b) As of January 1, 1999, it shall be unlawful for any person to manufacture for sale or distribution within the U.S., distribute within the U.S., sell within the U.S., or import into the U.S., any product that can be used to encrypt communications or electronic information, unless that product: (1) includes features, such as key recovery, trusted third party compatibility or other means, that (A) permit immediate decryption upon receipt of decryption information by an authorized party without the knowledge or cooperation of the person using such encryption product; and (B) is either enabled at the time of manufacture, distribution, sale, or import, or may be enabled by the purchase or end user; or (2) can be used only on systems or networks that include features, such as key recovery, trusted third party compatibility or other means, that permit immediate decryption by an authorized party without the knowledge or cooperation of the person using such encryption product. (c) (1) Within 180 days of the enactment of this Act, the Attorney General shall publish in the Federal Register functional criteria for complying with the decryption requirements set forth in this section. (2) Within 180 days of the enactment of this Act, the Attorney General shall promulgate procedures by which data network service providers sand encryption product manufacturers, sellers, re-sellers, distributors, and importers may obtain advisory opinions as to whether a decryption method will meet the requirements of this section. (3) Nothing in this Act or any other law shall be construed as requiring the implementation of any particular decryption method in order to satisfy the requirements of paragrpahs (a) or (b) of this section. ------- MSNBC's Brock Meeks on above FBI proposal & White House support: http://www.msnbc.com/news/108020.asp My report on the September 3 "mandatory key escrow" Senate hearing: http://jya.com/declan6.htm Transcript of FBI director Louis Freeh's remarks at Sep 3 hearing: http://jya.com/fbi-gak.txt Reuters' Aaron Pressman on Commerce Dept backing away from FBI: http://www.pathfinder.com/net/latest/RB/1997Sep05/248.html -------

4 3

Is Diana News?
by Tim May 17 Dec '03

17 Dec '03

There have been a bunch of messages about this. Some satirical, some serious. I've avoided any comment (so far as I remember). But is it news? I think so. Not necessarily for Cypherpunks. But I hear people saying this isn't news, that other things are more important. Sure, in some cases. But what is more important this week? News from Mars, news that Congress is back in session? Sometimes "personality" stories are more important than "normal event" stories. This story involves many interesting issues--freedom of speech, rights of privacy, the accomplishments of Diana, the issue Toto raised that Diana is surely a better role model than Diane (Feinstein), the monarchy, the boycott of tabloids, etc. No firm conclusions, but I reject completely the idea that routine reports of Congress being back in session, or that several people were blown up in Jerusalem, are bigger new stories than this. This is headed for being the biggest news story of 1997, barring, of course, an even bigger news story. Get used to it. --Tim May There's something wrong when I'm a felon under an increasing number of laws. Only one response to the key grabbers is warranted: "Death to Tyrants!" ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^1398269 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

3 2

DCSB: Boston D-H expiration Party at Doyles on Saturday.
by Robert Hettinga 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- In utter anthesis of the way we normally do things at DCSB, The Digital Commerce Society of Boston Presents An Utterly Unplanned Last-Minute Spur of the Moment Boston Pub-Crawling Celebration of the Expiration of the Diffie-Hellman Public Key Patent Saturday, September 6, 1997 3pm - Whenever we give up at The William Braddock Cafe, A.K.A Doyles's 3484 Washington Street, Boston (Jamaica Plain) This all started out several months ago in my head as a spiffy whoop-de-do black-tie webcasted countdown with sponsors and free champaigne and a groaning buffet and penguin waiters and a cash bar at the Harvard Club with a donation to a worthy cause, but, well, we couldn't get a time on the patent, so the countdown was out, and we couldn't get sponsors (remembering the last cocktail party, maybe there's a reason?), so the free bubbly and munchies was out, PETA got us on the way we wanted to make the penguins groan, and we couldn't think of a worthy enough cause, so that was out, and, finally, the Club is closed on Saturday, anyway. Feh. So, we're losers, okay? What can we say? Shoot us, already... Meanwhile, we're sitting here watching the Bay Area, and Austin, do something, and then Declan and the Washingtoonians do something, but the *final* straw came when Peter Wayner calls up and says: "WELL???? Are you guys in Boston going to DO something? I'm gonna file a story in the Times tomorrow that SAYS you are..." And so, bowing to the pressure of the media culture in memory of recent events on the continent <ewwwww>, (and my own cravings for porkchops and Pickwick Ale, <ewwwww>) I, Robert Hettinga, by the power vested in me by the August (or maybe it was July) membership of the Society as Their Moderator, do hereby unilaterally declare an Official Social Function of the Digital Commerce Society of Boston to occur at Doyle's, 3484 Washington Street, Jamaica Plain, Boston, tomorrow, Septmber 6, 1997, at 3PM Eastern Standard Time, my God have mercy on our souls. Bring your own money. :-). Be prepared to buy the moderator a drink. If Doyle's gets boring, we'll crawl elsewhere, but only after an hour has elapsed. If Doyle's isn't boring, we'll drink ourselves under the table, or at least face-down on it, or until we're shown the door, or maybe until our wives come and take us home, or something. And, so, to paraphrase that great statesman, one David 'Davey' Crockett: "Y'all can go to Hell. [or, Washington, or the Valley, or Texas, as the case may be...] *I'm* going to Doyle's." See you there. Cheers, Bob Hettinga (Im)Moderator, The Digital Commerce Society of Boston -----BEGIN PGP SIGNATURE----- Version: PGP for Personal Privacy 5.0 Charset: noconv iQEVAwUBNBB/dsUCGwxmWcHhAQHS5QgAiTxcMdjWlN3g3KWBDldUBxuXtCWmVmjQ XjYzy7iBEIEPYi0Stdvvsr+puH304G50UQA7+FEL4zq5X40oQJtBJSrjHVrMAidq A0fzfVYZD8/fulrpiX+K0W7DILUxvSrQVyQNKukEDMytSF4JKC8INRczPHeUyjgX 5yc1V9m5AoqAErOdKrZo6MGkrPQqHc5yoBxJzxGrlWpGF+/kMqzIN8hKtRpTu+R5 VEShulvjCXXcNRgdprDejD58Y60LgoUd0eM+wTBftFBzBjIXWHgNWTHXt15GEsOb EDeHONj6qSXvFA4uLxKnebVZR/7lOz9d3zxsCkhGMMtIPx93h4r9EA== =ouHW -----END PGP SIGNATURE----- ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' The e$ Home Page: http://www.shipwright.com/

2 2

Re: LYING FUCKS! / Behind the ELECTROMAGNETIC CURTAIN
by Syniker＠aol.com 17 Dec '03

17 Dec '03

alright... i finally figured a way around ctrl-alt-delete on my aol account here, so here is my first post... bear with an old fart, who is trying to learn encryption... and who when he does, will pass it along to whoever he can... yes -- we need to do ALL these things... but we need to do it ... ENCRYPTED... by as many as possible... as SOON as possible... the thing that is missing here -- to beat freeh and the other freaks... is that PGP -- or whatever -- must be POPULARIZED -- and by that, i mean -- the 'learning and doing' -- an encrypted email... must be made easy enough -- so that the average aol user... will -- FIRST -- think it's something they should have and use... and SECOND ... they'll have a way they can use it quickly and easily... figure it this way -- if you could get ALL nine million aol users.... to send an encrypted email -- on the SAME day .... to everyone in gov that says FUCK OFF -- NO WAY MY KEY.... what the fuck is the gov gonna do about it?????? as in the internet at large, and the WWW -- it is the sheer number of us 'users' ... that is scaring shit out of govs everywhere... but right now -- they have a big, big advantage..... they are using the time-honored principle of 'divide-and-conquer' ... to extreme advantage -- and it is one that we can take from them with a little thought, organization, and planning....... the fight against CDA was greatly helped with the co-operative 'black-out' pages.... and that's the general idea.... whoever can write an icon-based gui -- point and click -- that will encrypt and send an email.... and includes an user friendly system for email spam filters......... gee -- could make a small fortune... [they are using 'spam' as a backdoor to GAK] maybe it's already been done? -- I've got eudora lite w/pgp on board -- but no time to try it out yet..... anyways -- dammit -- the key to this fight is in NUMBERS ....... if I was even forty or so -- I'd try it myself.... it's REAL important....... ldm

1 0

Please show me these encryption algorithms
by Nobuki Nakatuji 17 Dec '03

17 Dec '03

Does anybody know RC4,RC2,CDMF,MISTY,MULTI2 encryption algorithms? If you know these encryption algorithms, Please show me these encryption algorithms. ______________________________________________________ Get Your Private, Free Email at http://www.hotmail.com

2 1

EFF $10,000,0000 Challenge
by bureau42 Anonymous Remailer 17 Dec '03

17 Dec '03

The Electronic Forgery Foundation is proud to announce a major breakthrough in encryption technology -- Forged Encryption. We are offering a prize of $10,000,000.00 for anyone who can correctly decipher the following Forged Encryption message. -----BEGIN PGP MESSAGE----- Version: PGP for Personal Privacy 5.0 MessageID: od2CIT3fELE7K6bkIkKGJBj0MPUJ2TT8 hQCMA6ozRjzmqceZAQQAh02x0Dxer5vzZiSJ+v7bnMZQdgp425z5OH0NF/f/mXXc vInw+UsuTXqWNEV5rEQKYjU3qHoe6suCz5f9hEEnOIBacsD28pYU4ahkGOCTuTY6 N3xKrtDRqLPInB8PY7Kfd56jjQsVVRKmJBwXqHbPax4YyUB6ZbKKvSPiuUsAAQSl BAH3CFNKcmYjf+VtpjAVOpDNM/PMm1e6m33rZ01Sq6pXC0TTabCf7hkWscet0PCL VX0l1Zw5IKaFqo+pZ3EICRMF6HQrc30G7L9TFeKr//3YsO3/bC4VBgNQHA0qf2nD ldxAsTGPlRthBTxrzE0LjeOKi/pQOLXQMPQUwEIaL9rncjFgniplFoL6Nj0guJvW VvS+gxth8hpeWss7WlFFioV0vShsS/lahA+eg/9nVy8ken8pr4m484w2vwoiSdce CarVigVaRh6tCgh0jub7CHuDFg== =Q9+G -----END PGP MESSAGE----- The EFF doesn't have a copy of the correct answer locked away in a secret underground cave in Tibet, for verification, because the above Forged Encryption message is just a bunch of crap we typed in pretty much at random. Does the government want to keep your private key in escrow? Give them a copy of your EFF private key. Hell, give them _two_ copies, in case one is corrupted.{;>) Smile when you give them to the government agent. Ask him how his day has been. Offer him some coffe, and ask about his family. Tell him you will send him a Christmas card with another copy of your EFF private key, just in case the government misplaces the copies you gave them. Put your hand over your heart, salute the flag, and sing "God Bless America" as the government agent leaves. Then fart. Use the EFF Forged Encryption sofware regularly, to send messages with Subject:'s like "The Plot Against the PREZ," "Confirmation of the date of our armed assault," "The Nuke has arrived." Keep a copy of your EFF Forged Encryption secret key in a directory named "Off the Pigs." Most importantly, never reveal in your private email to others that you are a deaf, dumb and blind quadraplegic who has been homebound since birth. That way, the outrageous claims that government agents make against you in their secret deposition for a warrant to kick in your door and terrorize you will look all the more foolish during your trial. We at the Electronic Forgery Foundation realize that some of you wise guys are thinking that, for $10 million, it is well worth your while to write a program that will decipher the above message into something meaningful. Well, knock yourself out, dudes, but if you think that known forgers couldn't possibly be lying about the $10 million, then go directly to http://www.clueserver/fucking_idiot, do not pass GO and do not collect $200. --------------------------------------------------------------------- This message is copyrighted under the auspices of the Electronic Forgery Foundation. Any misquoting, misrepresentation, or other abuse of this message would be greatly appreciated. Hell, you can tell people you wrote it, if you want to. We don't really care. ---------------------------------------------------------------------

3 2

Gao's Chaos Cryptosystem
by Nobuki Nakatuji 17 Dec '03

17 Dec '03

GCC(Gao's Chaos Cryptosystem) GCC uses the newest chaos logic and is conventional cryptosystem stream cipher encryption. It is high speed and allows variable-length keys, making it very reliable and suitable for use in multimedia. http://www.iisi.co.jp/reserch/GCC-over.htm Chaos InforGuard GCC(Gao's Chaos Cryptosystem) security application. High speed,variable-length keys,high reliability,and user friendliness allow you to easily encrypt an entire harddisc.Can be used with Windows3.1 & Windows95. http://www.iisi.co.jp/vcs/software/infoguard-e1621.html Chaos-mail Internet Mailer Using Gao's Chaos Cryptosystem Chaos-mail is a cryptosystem mailer for use on Windows95,which using GCC and Chaos MAM, gives you the ability to encrypt/decrypt and verify mail. Chaos-mail is a cryptosystem mailer for user on Windows 95 which, using GCC and Chaos MAM, gives you the ability to encrypt, decrypt, and verify mail. Not only is it fast, reliable, and user-friendly, but it is also very suitable for multimedia because of its non-biased treatment of data. http://www.iisi.co.jp/vcs/software/chaosmail-e.htm ______________________________________________________ Get Your Private, Free Email at http://www.hotmail.com

2 1

Cyber Threat Fud
by John Young 17 Dec '03

17 Dec '03

WaPo mocks today a prez panel's gurglng for a $1B "cyber security" cleaver to lop-hand the world's HRH Harry-Hackers: http://jya.com/pccipower.htm Read how 3xlegal-limit limo-liz-NSA hot-wires dire Di-car-alarms, pillar plow not, how to shuck for xtra bux spying foes inside your Net warfare.

1 0

Money, Sex, Technology and Home Bus
by scannmann＠nevwest.com 17 Dec '03

17 Dec '03

** Money, Sex, Technology & Home Based Business ** The 4 Most Powerful Forces On Earth Have Merged To Create The Most Explosive Opportunity Of This CENTURY! PLUS: FREE ADULT ENTERTAINMENT WEB SITE!!! Become a part of the biggest income opportunity to hit the Internet, while remaining TOTALLY ANONYMOUS. To receive additional information, send email to our automated system at omc(a)answerme.com or... Click Here ******* BY REQUESTING THIS INFO, YOU ARE CONFIRMING THAT YOU ARE AT LEAST 18 YEARS OF AGE *******

1 0

Usenet Propagation Sucks
by Mark Hedges 17 Dec '03

17 Dec '03

Mike Duvos <enoch(a)zipcon.net> wrote Fri 29 Aug 1997: >Theoretically, I was under the impression that Usenet consisted of a large >number of machines, which compared their news spools continuously, with >each giving the other all articles that were not on both machines. > >Practically, this seems to work a lot less well than the designers >envisioned. In practice, it's really tough to keep a good feed going. We happen to keep the alt.anon* stuff for a longer period of time. We've started keeping individual groups longer as requested by readers. This makes them happy, for the most part. It needs so much disk! We have two incoming server feeds and three outgoing and people still complain that their groups don't have enough messages for their liking. Plus the damn thing's history database has to be rebuilt twice a month, and at night lest the customers come for blood when they don't get their daily usenet, and it never seems to go right without someone (me namely) sleeping in the office keeping it company during the process. A server would need terabyte upon terabyte to store a good archive of Usenet for, say, the past year. I wonder if the designers could forsee Usenet's explosive popularity, or the taxing load the spammers place. Mark Hedges

2 1