December 2003 - cypherpunks-legacy

NSC_lub
by John Young 17 Dec '03

17 Dec '03

1-22-96. W$J: "VeriFone and Netscape Plan Software To Ease Internet Credit-Card Payments." They aim to simplify payments with software for both banks and merchants. The bank software would allow banks to use their existing computer systems to read and process transactions. The merchant software would allow merchants to buy just one software package to put up an electronic storefront and payment system on the Web. Netscape said the software will include a new encryption technology that Visa and MasterCard are expected to announce in two to three weeks. That technology would break sensitive information into 1,024 bits instead of the 128 bits used currently. "AOL, Netscape Are Discussing An Alliance." Netscape and America Online Inc. are in talks to forge an alliance aimed at furthering their lead over the on-line push by software giant Microsoft Corp. "If you can't beat 'em, unguent 'em," Case-squirted an a-oiler. NSC_lub

1 0

NYT New Web Site
by John Young 17 Dec '03

17 Dec '03

NYT reported today that it has set up a new web site: http://www.nytimes.com It offers most of the daily articles as well as some from archives. More info on subscription and the offerings at the home page. Subscription is free, for now. Though there is a charge for downloading, and a battery of whistling-in-the-dark copyright proclamations and threats and pleadings. For the Times-addicted, today's WSJ has a page one article on NYT-leadership squabbling, fomented by board member Gerstner, infamous IBM-Lotus espionage-enabler.

1 0

Lan Manager security
by lws＠transarc.com 17 Dec '03

17 Dec '03

Have you seen an analysis of the security of the LanMan authentication scheme? It strikes me as better than K4, but worse than K5. I wonder if you concur. Since Don and Ted have probably not seen this before, here's the technique as I understand it (summarized from the SAMBA docs). The password is uppercased and truncated to 14 bytes (or padded to 14 bytes with nulls). This is split (0..6,7..13) into two DES keys which are each used to encrypt a static 8-byte value. The resulting 16 byte key is stored at the server. To authenticate a connection, the server issues an 8 byte random challenge. I presume this is returned in the clear since the docs don't specify otherwise, but I haven't sniffed one. The randomness of the challenge doesn't matter so much if it crosses the network in the clear (though I can't understand why they did this), as long as the period of the generator is large enough to prevent replay attacks. The client then pads the 16-byte key to 21 bytes (with zeros, natch), splits it in thirds, {0..6}, {7..13}, {14,15,NUL,NUL,NUL,NUL,NUL}, uses each third to DES-encrypt the challenge, concatenates the ciphertexts, and returns the response to the server. I don't want to prejudice you too much by posting my own thoughts on this protocol, but here are a couple of things that should be obvious: 1. It doesn't hand back free samples of enciphered known plaintexts to all comers for offline attack. This is a Good Thing, unlike some other NOTABLE EXAMPLES. 2. This business with padding the keys out with zero bits really simplifies cryptanalysis. Where my limited expertise breaks down, is identifying just how easy it makes things. 3. I'm kind of boggled as to why they do this multiple encryption of things and then *concatenate* the ciphertexts. If you're going to do multiple encryption, it seems to make sense to pipeline the stages. Doesn't it?

1 0

CIA Stashes
by John Young 17 Dec '03

17 Dec '03

Reuter has a brief story today about "80 secret U.S. weapons arsenals that remain scattered across Austria for 40 years after they were hidden in case of a Soviet invasion" for use by resistance fighters. It says the CIA stockpiled the weapons without telling the Austrian government. The Austrian paper Kurier quotes the U.S. Ambassor as saying the CIA only recently informed Congress about the weapons stash. Does anyone in Austria or elsehere have more on this? ----- In a related matter, on Friday C-SPAN 2 aired several hours of comments and proposals by intel experts before the US Commission on Intelligence Reform. Mephistophelean former NSA head Admiral Bobby Ray Inman proposed among other brain-wavers to reorganize the thirteen or so bloated, bumbling, cat-fighting intelligence agencies: 1. Establish a new International Operations Agency to combine all operations units -- civilian and military -- into one, separate from the CIA -- which he thinks has irretrievably lost operations credibility. 2. CIA to do all intelligence analysis, but no collecting, to avoid contamination caused by "ownership of the data." The military to do intelligence collection and analysis only needed for immediate operations. 3. FBI to do all counter-intelligence, domestic and international, with agents stationed overseas. 4. Defense to do all imagery. 5. NSA/NRO/???, though not named in open session, presumably would continue ELINT and SIGINT. 6. All this will be very expensive, he roostered, intelligence on the cheap is worthless. 7. The total intelligence budget to be made public but no further breakdown of how the the pot of gold is distributed to supplicants is to be confessed. Former Ambassador to China Tilley, a 25-year veteran of CIA operations, emphasized the importance of continuing Non Official Cover operations, which, he said, are invaluable very-long term penetrations. He cited those he set up in China as COS and then revisited fifteen years later as ambassador -- still ferreting deepest of demon red-commie secrets, he black-comicly glowered to the glazed-eyes. NOC, while very expensive, is crucial, he, too, parroted. For the full eye-opening pack of lies to replenish the pot of gold, Tilley co-conspired that a closed session was needed. But all the intel gold-digging experts testified to that, grinning malevolently, thus continuing the grand tradition of looting national treasuries top-secret cloaked by national interest. So, where are all those not-yet-reported CIA Non Official Cover stashes of gold bullion (or $100 bills) to pay the world-wide "resistance fighters" for illusory supremacy?

2 1

Re: NSA vacuuming down Internet traffic
by Rick Smith 17 Dec '03

17 Dec '03

alanh(a)infi.net (Alan Horowitz) asks: >Is there any open source - or otherwise - knowledge or speculation about >which words/phrases the Terra-cycle cpu's are text-searching *for*? If it >were your responsibility to eavesdrop on Iranian terrorists ... >... would you know for sure which words/phrases to key on? It >doesn't sound like a tractable problem to me. There are two parts to this question. First, how do you choose targets? It's been a few years since I read Bamford's book (when *is* the next edition coming out, anyway?) but I seem to remember that there is some sort of "committee" that agrees on what to aim at. It probably contains the usual collection of bureaucrats from military and civilian agencies. Despite the lofty budgets, even the NSA's vacuum cleaner has a hose of limited size. The committee allocates the available resources to prioritized objectives. You can probably predict targets by estimating political priorities and clout of the various agencies, and, of course, by watching CNN. Second, how do you ensure that you capture relevant traffic? I'm sure you start with the obvious -- look at traffic that's definitely relevant and set up filters to find more of it. While it's attractive to want to treat this as a state detection problem (message is/isn't relevant) you really want more of a signal analysis solution (measure likelihood of relevance). Also, a high priority target would probably have its hit behavior evaluated by real humans to ensure that the expected amount of relevant traffic is continuously sucked up. My first job, twenty years ago, involved a prototype speech recognition system under contract for Rome Air Development Center (a traditional cover for TLA research). The machine was supposed to go beep whenever a specified word or phrase was heard over the input voice stream. We joked about testing for the term "Russian Spy" but settled on looking for "Kissinger" instead. That let us run tests by listening to news broadcasts of the time. We built custom boards with Schottky TTL and a blazing fast 120ns cycle time. Times change, eh? Rick. smith(a)sctc.com secure computing corporation

1 0

Re: NYT New Web Site
by take＠imasy.or.jp 17 Dec '03

17 Dec '03

Dear Mr. John Young, This is Tsuyoshi Hayashi. At 11:18 AM 96.1.22 -0500, John Young wrote: >NYT reported today that it has set up a new web site: >http://www.nytimes.com Now I visiting there. It's very worth for me. Very very thanks for your info. (^^) >For the Times-addicted, today's WSJ has a page one article on Does WSJ have there own web site, too? - Tsuyoshi Hayashi <take(a)imasy.or.jp> --- hayashi(a)scs.sony.co.jp is no longer valid. --- Please update to take(a)imasy.or.jp

1 0

An IDEA whose time has come (Notes from the RSA Conference)
by Jonathan Zamick 17 Dec '03

17 Dec '03

Well the RSA Security Conference is over, and I finally had time to sleep. Thus, I'll give you all a bit of my impressions. First, there were a heck of a lot more merchants this year. Last year, there were about 400 people. This year it was 1100, with a couple hundred waiting. Thus the conferences were a bit more mixed in level of topic. (As one person put it, the more interesting the title, the more likely it is a blatant plug for a product.) On the other hand there were a number of great conferences too. Sadly, I was busy at the Consensus booth and didn't have time for many of them. Last year Clipper was the big issue, but export controls were predicted to be the big issue this year. This year export controls were the big issue, but certificates were predicted to be the big issue next year. Lotus got low marks in everyone's book for setting the precedent of giving the government 24 bits of their key. (As if France is going to be satisfied with that solution.) I didn't meet many Cypherpunks at this conference. Partially it may have been because I was dirt tired after planning the booth in only two weeks, and running it. They had a lot of nice giveaways. I have a metal backed dayrunner which is cute, an etch-a-sketch keychain which is causing rabid jealousy in the office, and a nifty t-shirt with the logo 'A good marketing organization listens to its customers'... then the picture of a woman on the phone w/ two spooks listening in.. finally 'We Hear You... Your NSA'. Needless to say, I like it. Anyway here is the point of the subject from this message. A while back I asked for all your wish lists. One of the big issues was making IDEA available w/ RSAREF. Well, I did even better, you can now license IDEA from Consensus whether you use RSAREF or not. This was the biggest hit at our booth. A number of groups saw a very strong, fast, Swiss block cypher as a nifty thing. Imagine, you can use 128 bits in Europe. Right now I'm trying to convince Ascom to develop a crippled version of IDEA to simply give away if anyone wants it for export. (Like most of the folk here, I don't see a 40 bit key as very valuable, but it is useful for companies which don't have contacts in Europe.) As a little promo, Ascom, the company which developed IDEA, and will be licensing it in Europe, announced a challenge. If you can break one ciphered message in the next year, they'll send you on a vacation to the Matterhorn, give you a nice dinner w/ the creators of IDEA, and be really impressed. :) Anyway, I'll be putting more information up on our web pages about IDEA. If anyone wants info on my Etch-A-Sketch keychain, feel free to send me some mail. If you want info on anything else, you can send email for that too. Take care all. Jonathan ------------------------------------------------------------------------ ..Jonathan Zamick Consensus Development Corporation.. ..<JonathanZ(a)consensus.com> 1563 Solano Ave, #355.. .. Berkeley, CA 94707-2116.. .. o510/559-1500 f510/559-1505.. ..Mosaic/WWW Home Page: .. .. Consensus Home Page ..

1 0

No Subject
by owner-cypherpunks＠toad.com 17 Dec '03

17 Dec '03

January 15th Fortune (don't normally read it, but I picked up a free copy) has a lengthy and evidently well-researched article bylined Richard Behar on the efforts of BFI, a large regional trash hauler and recycler, to break into the (by most accounts) Mafia-controlled garbage collection industry in New York City. Cypherpunk relevance: BFI is cooperating closely with the DA in helping to prosecute its allegedly mob-affiliated competitors, which raises a lot of very interesting questions, for which I have yet to formulate any answers. Also a sidenote about how NYC's disclosure laws actually aid organized crime by helping the various bosses track who owns what territory. Electronic surveillance. Money laundering. Steganography (sending messages by way of the disembodied head of a dog). Open access to information and free-market capitalism versus violent bozos, with and without uniforms. Pen trumps sword. Rich says check it out. -- Rich Graves Fucking Statist

1 0

Re: Hassles taking App. Crypt. to Taiwan?
by p.ruhnau＠jinxed.dinoco.de 17 Dec '03

17 Dec '03

On 21 Jan 96, TCMAY(a)GOT.NET wrote: > On the Taiwan side, though, they may wonder why you brought an > expensive > U.S.-printed copy when you get the special rice-paper edition of "Applied > Cryptography, 2nd Ed." for the equivalent of $2.25 in Taipei's book stalls. Can anybody tell me the addresses of taiwanese mail-order bookstores, please? MfG, Peter -- #define putc(c,fp) (--(fp)->_pc<0 ? (*(fp)->_pt)(c,fp) : (*(fp)->_cp++=c))

1 0

DigiCash Ecash - 2 security topics
by Bryce 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- An entity calling itself "Marcel van der Peijl" <bigmac(a)digicash.com> is alleged to have written: > > (I wrote:) > > E.g. has there been a DigiCash response to Ian Goldberg's > > publication of a denial-of-service attack which operates by > > spending a coin with the same serial number as your victim's > > coin? > After discussing things with Ian we came up with several solutions. > One is encrypting more messages (which we will do in a next revision > of the protocol), the other is enabling ecash to work over ssl > servers. You may not see the answer directly in the list, but you > will see it in the next protocol revision. What kind of performance hit does this new encryption entail? (No additional performance hit if SSL does it, I know.) Are you considering having different protocols for SSL-protected transactions versus unprotected ones? Let me repeat something I said a couple of weeks ago: I suspect that the weakest point in DigiCash security is on the end-user's own harddrive. A malicious cracker could write a Trojan horse or even a virus which would steal the user's coins and send them to himself. Hm. Now that I think about it, if the user has a back-up copy of those coins then he can reveal their blinding factors to the bank after the theft, thus catching the thief! So the thief program would have to deposit those coins with the bank, make a new withdrawal (ouch!) and then steal the new coins. I'm not sure that anything can be done by DigiCash or by Ecash- issuing banks to prevent this, but I thought I'd mention it. (Hm. The program also has to steal the user's password in order to make the withdrawal.. This is getting to be a pretty smart program!) Regards, Bryce "Toys, Tools and Technologies" the Niche New Signal Consulting -- C++, Java, HTML, Ecash Bryce PGP sig follows -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Auto-signed under Unix with 'BAP' Easy-PGP v1.01 iQCVAwUBMQPWs/WZSllhfG25AQHv2gQAuJsZqQh+IF0vk8C2OY9zsvMlbqN0+GxN LinbZhWRDlqcRJ69dtzYDhbuvDphHuQYdNUJka5r3Bzplj5tim3sJ+wvEF2eiXTO vUSXrJ8DvnZPji+qEuv1Zs5D8gXdFs2ALsUbsDxQxVrVlcTbDKnz2EQel0apzqld VTV8CFvHaRY= =i3hX -----END PGP SIGNATURE-----

1 0