December 2003 - cypherpunks-legacy

pgplib
by Tim Newsham 17 Dec '03

17 Dec '03

Where is pgplib located? I looked on soda.berkeley.edu and couldnt find it. Email reply please as I am no longer subscribed to this list. Tim N.

1 0

Clarification RE: Nazis on the Net
by an57322＠anon.penet.fi 17 Dec '03

17 Dec '03

DrZaphod wrote: > That may have been just a snide comment.. but I'll address >it anywayz... are you applying the old logic of "Germany is screwed up", >"Germany is democratic", "U.S. is democratic -- we MUST be screwed up!" >Cuz that logic doesn't work in real life.. maybe on the net, tho. Sorry for being unclear. This is what I was trying to say: I am an anarchist and don't like Nazis. However, I believe that everyone should have the right to say what they believe needs to be said. By making it illegal to let certain parts of society know how to start a newspaper (assuming this is true), the German government employs the very same principles it is trying to fight. Furthermore, I believe that a government in power that use fascist methods (such as taking away one's right to publsh a paper) is more dangerous to society as a whole than some juvenile hotheads, whose crazy ideas probably would be rather discredited than being help by putting out for everyone to read. As for the analogy to the US: I see the constant increase in attempts to censor the media as a warning that perhaps some day soon it may be illegal to tell someone in the US how to go about publishing your own paper. Peace, -= T.A.Z. ------------------------------------------------------------------------- To find out more about the anon service, send mail to help(a)anon.penet.fi. Due to the double-blind, any mail replies to this message will be anonymized, and an anonymous id will be allocated automatically. You have been warned. Please report any problems, inappropriate use etc. to admin(a)anon.penet.fi.

1 0

Re: Oh No! Nazis on the Nets
by greg＠ideath.goldenbear.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- "Perry E. Metzger" <uunet!lehman.com!pmetzger> writes: > I'll remind you that the supreme court has held that text-only works > can not be held to be obscene. You can write anything you want, > including explicit descriptions of sodomizing dead children, and it > can not be censored. As I mentioned to Perry in E-mail, the above is incorrect. Pure text can be obscene and hence unprotected by the First Amendment. Kaplan v. California, 413 U.S. 115, 118-119, 93 S.Ct. 2680, 2683-2684 (1973). Others here (Mike Godwin?) can likely provide a much better discussion of just where this fits into First Amendment law; Shepherds' reveals no more recent decisions which modify the holding in Kaplan. -----BEGIN PGP SIGNATURE----- Version: 2.4 iQCVAgUBLVxTKX3YhjZY3fMNAQEd2wP7BmUq0bUzhdhSg9+/Y/+by1C+p0dEu2ef Q8c0nlzkux6cUBQPrr18/c+dAmMQ4x+Dofr/0N1jF+q9uffnVmeVa9qQjzB1SzJy 9PCsXI7x/7B1bNZFuegliJvUn7aD7UqBBS9Au7/nlZ6Ky8Gb6G0HadrIaZyP9yQy PuQh+QDXTnY= =F0SC -----END PGP SIGNATURE----- -- Greg Broiles ".. has bizarre Cyberanarchist theories relating greg(a)goldenbear.com to human punishment." -- L. Detweiler

2 1

CPSR Alert 3.03 (Clipper Up
by Dave Banisar 17 Dec '03

17 Dec '03

CPSR Alert 3.03 (Clipper Update) ============================================================== @@@@ @@@@ @@@ @@@@ @ @ @@@@ @@@@ @@@@@@ @ @ @ @ @ @ @ @ @ @ @ @ @ @ @@@ @ @@@ @@@@@ @ @@@ @@@ @ @ @ @ @ @ @ @ @ @ @ @ @ @@@@ @ @@@ @ @ @ @ @@@@ @@@@ @ @ @ ============================================================= Volume 3.03 February 11, 1994 ------------------------------------------------------------- Published by Computer Professionals for Social Responsibility Washington Office (Alert(a)washofc.cpsr.org) ------------------------------------------------------------- Contents [1] CPSR Launches Clipper Campaign [2] Sign the Clipper Petition! [3] Clipper FAQ [4] EPIC to Provide Clipper Analysis [5] CPSR Needs Your Support! [6] RFD for CPSR Newsgroups [7] New Files at the CPSR Internet Library [8] Upcoming Conferences and Events ------------------------------------------------------------- [1] CPSR Launches Clipper Campaign The electronic petition begun by CPSR to oppose Clipper has generated more than 8,500 responses in less than 10 days. The number is increasing at a faster rate than occurred with the successful 1990 campaign to stop Lotus Marketplace. Details of the petition follow. If you have already signed on, ask your friends and colleagues to sign. Call up your parents. Tell them to get an email account and then to sign the petition. Check your rolodex. Call old friends. Send email to former business partners, lovers, etc. In your very next email message, ask the person you are writing to if he or she has signed the CPSR Clipper petition. The number of people who have opposed Clipper already far exceeds the number of lawful wiretaps conducted by all government officials last year. Other upcoming milestones: 10,000 Current government orders for Clipper chip (est.) 12,000 Number of computer networks connected to the Internet 15,000 Estimated number of total lawful wiretaps, 1968-1994 70,000 Anticipated number of Clipper purchases this year More details on the petition follow. ------------------------------------------------------------- [2] Sign the Clipper Petition! Electronic Petition to Oppose Clipper *Please Distribute Widely* On January 24, many of the nation's leading experts in cryptography and computer security wrote President Clinton and asked him to withdraw the Clipper proposal. The public response to the letter has been extremely favorable, including coverage in the New York Times and numerous computer and security trade magazines. Many people have expressed interest in adding their names to the letter. In response to these requests, CPSR is organizing an Internet petition drive to oppose the Clipper proposal. We will deliver the signed petition to the White House, complete with the names of all the people who oppose Clipper. To sign on to the letter, send a message to: Clipper.petition(a)cpsr.org with the message "I oppose Clipper" (no quotes) You will receive a return message confirming your vote. Please distribute this announcement so that others may also express their opposition to the Clipper proposal. =========================================================== The President The White House Washington, DC 20500 Dear Mr. President: "We are writing to you regarding the "Clipper" escrowed encryption proposal now under consideration by the White House. We wish to express our concern about this plan and similar technical standards that may be proposed for the nation's communications infrastructure. "The current proposal was developed in secret by federal agencies primarily concerned about electronic surveillance, not privacy protection. Critical aspects of the plan remain classified and thus beyond public review. "The private sector and the public have expressed nearly unanimous opposition to Clipper. In the formal request for comments conducted by the Department of Commerce last year, less than a handful of respondents supported the plan. Several hundred opposed it. "If the plan goes forward, commercial firms that hope to develop new products will face extensive government obstacles. Cryptographers who wish to develop new privacy enhancing technologies will be discouraged. Citizens who anticipate that the progress of technology will enhance personal privacy will find their expectations unfulfilled. "Some have proposed that Clipper be adopted on a voluntary basis and suggest that other technical approaches will remain viable. The government, however, exerts enormous influence in the marketplace, and the likelihood that competing standards would survive is small. Few in the user community believe that the proposal would be truly voluntary. "The Clipper proposal should not be adopted. We believe that if this proposal and the associated standards go forward, even on a voluntary basis, privacy protection will be diminished, innovation will be slowed, government accountability will be lessened, and the openness necessary to ensure the successful development of the nation's communications infrastructure will be threatened. "We respectfully ask the White House to withdraw the Clipper proposal." ------------------------------------------------------------- [3] Clipper FAQ The Clipper Chip: Frequently Asked Questions (FAQ) What is the Clipper Chip? It is a cryptographic device purportedly intended to protect private communications while at the same time permitting government agents to obtain the "keys" upon presentation of what has been vaguely characterized as "legal authorization." The "keys" would be held by two government "escrow agents" and would enable the government to access the encrypted private communication. While Clipper would be used to encrypt voice transmissions, a similar device known as Capstone would be used to encrypt data. Who developed the underlying technology? The cryptographic algorithm, known as Skipjack, was developed by the National Security Agency (NSA), a super-secret military intelligence agency responsible for intercepting foreign government communications and breaking the codes that protect such transmissions. In 1987, Congress passed the Computer Security Act, a law intended to limit NSA's role in developing standards for the civilian communications system. In spite of that legislation, the agency has played a leading role in the Clipper initiative and other civilian security proposals. NSA has classified the Skipjack algorithm on national security grounds, thus precluding independent evaluation of the system's strength. CPSR has filed suit under the Freedom of Information Act seeking the disclosure of the secret algorithm and other information concerning the Clipper plan. What is the government's rationale for Clipper? The key-escrow system was developed at the urging of the FBI and other law enforcement agencies, which claim that the increasing availability of strong encryption programs will interfere with their ability to conduct wiretapping. No evidence in support of these claims has been released -- in fact, FBI documents obtained through litigation by CPSR indicate that no such difficulties have been reported by FBI field offices or other federal law enforcement agencies. How important is wiretapping to law enforcement agencies? Electronic surveillance is just one of many investigative techniques available to law enforcement. In fact, it is not a widely used technique -- in 1992, fewer than 900 wiretap warrants were issued to state and federal law enforcement agencies. It is to protect the viability of that small number of wiretaps from an unsubstantiated risk that the FBI and NSA have proposed to compromise the security of billions of electronic transactions. What is the current status of the Clipper plan? On February 4, the Administration announced the formal adoption of the "Escrowed Encryption Standard," which is the technical specification for the Clipper system. This action means that Clipper will become the encryption standard within the government -- all cryptographic products for government use must comply with the standard (i.e., contain the key- escrow mechanism) and all individuals and businesses wishing to transmit secure communications to government agencies will eventually be obliged to use the NSA-developed technology. Will the Clipper standard become mandatory? The Administration maintains that Clipper will be a "voluntary" standard outside of the government, but many industry observers question the reality of this claim. The government exerts enormous pressure in the marketplace, and it is unlikely that alternative means of encryption will remain viable. Further, the possibility of Clipper becoming mandatory at some time in the future is quite real given the underlying rationale for the system. If criminals do, indeed, intend to use encryption to evade electronic surveillance, they are unlikely to voluntarily use the Clipper technology. What can I do to oppose Clipper? Sign the electronic petition against the Clipper plan that is being organized by CPSR. Stay informed of relevant developments by reading the CPSR Alert and other periodic announcements. And consider lending your financial support to CPSR's campaign to protect the privacy of electronic communications. ------------------------------------------------------------- [4] EPIC to Provide Clipper Analysis The Electronic Privacy Information Center (EPIC) will be providing policy information on the Clipper proposal. EPIC is a joint project of CPSR and the Fund for Constitutional Government, a national civil liberties organization. EPIC releases will soon be available to CPSR members through the CPSR Announce list. ------------------------------------------------------------- [5] CPSR Needs Your Support! If you have signed the CPSR petition, and would like to do more to help stop Clipper, please consider sending a cash contribution to CPSR. What do we do with the money? Pay staff salaries, telephone bills, rent, printing costs. The basics. Why support CPSR? Because we have a good reputation for our work on privacy and cryptography, and because our efforts on Clipper are already having an impact. We know it's a little scurrilous to ask for money on the network. We don't do this very often. The good news is that an anonymous donor has agreed to make a matching grant of $10,000 to support CPSR's Clipper campaign. That means that if you contribute $50 we receive $100. If you contribute $100 we receive $200 and so on. Please take a moment to write a check and send it to "CPSR, P.O. Box 717, Palo Alto, CA 94302." Write "Clipper" on the check. Thanks in advance. We appreciate your help. ------------------------------------------------------------- [6] Call for Discussion on CPSR Newsgroups CPSR has submitted a Request for Discussion (RFD) to create two new USENET newsgroups: comp.org.cpsr.news and comp.org.cpsr.talk. Comp.org.cpsr.news will be a reflection of the cpsr-announce mailing list. It will be moderated and only carry 1-2 messages per week including the CPSR Alert and other official CPSR releases, and announcements of relevant conferences. Comp.org.cpsr.talk will be an unmoderated discussion group. Topics will include privacy, the NII, working in the computer industry, and other areas of interest to CPSR members. Formal discussion on the newsgroups is taking place in news.groups. If you have any substantive comments, you may post them there or by e-mail to either news-groups(a)cs.utexas.edu or news.groups.usenet(a)decwrl.dec.com. If you just wish to express support for the new groups, please hold off until the voting begins in about one month. ------------------------------------------------------------- [7] New Files at the CPSR Internet Library The CPSR Internet Library is currently undergoing renovation to make it easier to use. File names are being revised, folders are being moved, and a better Gopher front-end is being designed. We apologize for any inconvenience in finding files. All Feb 4 White House releases on Clipper are available at /cpsr/privacy/crypto/clipper An analysis of US cryptography policy by Professor Lance Hoffman commissioned by NIST /cpsr/privacy/crypto/hoffman_crypto_policy_1994 The 1994 US State Department Human Rights Guide. 7.7 megs of files describing the situation of civil and political rights in every country in the world except the US. /cpsr/privacy/privacy_international/country_reports/1994_state_dept_guid e_human_rights 1993 GAO Report on misuse of the FBI's National Crime Information Center is also available. The CPSR Internet Library is a free service available via FTP/WAIS/Gopher/listserv from cpsr.org:/cpsr. Materials from Privacy International, the Taxpayers Assets Project and the Cypherpunks are also archived. For more information, contact ftp-admin(a)cpsr.org. ---------------------------------------------------------------- [7] Upcoming Conferences and Events "Highways and Toll Roads: Electronic Access in the 21st Century" Panel Discussion. 1994 AAAS Annual Meeting. San Francisco, CA. Feb. 21, 1994 2:30 - 5:30pm. Sponsored by the Association for Computing Machinery (ACM). Contact: Barbara Simons (simons(a)vnet.ibm.com) "Computers, Freedom and Privacy 94." Chicago, Il. March 23-26. Sponsored by ACM and The John Marshall Law School. Contact: George Trubow, 312-987-1445 (CFP94(a)jmls.edu) Directions and Implications of Advanced Computing (DIAC)-94 "Developing an Effective, Equitable, and Enlightened Information Infrastructure." Cambridge, MA. April 23 - 24, 1994. Sponsored by CPSR. Contact: cwhitcomb(a)bentley.edu or doug.schuler(a)cpsr.org. Computer-Human Interaction 94. Boston, Mass. April 24-28. Sponsored by ACM. Contact: 214-590-8616 or 410-269-6801, chi94office.chi(a)xerox.com "Navigating the Networks." 1994 Mid-Year Meeting, American Society for Information Science. Portland, Oregon. May 22 - 25, 1994. Contact: rhill(a)cni.org Rural Datafication II: "Meeting the Challenge of Providing Ubiquitous Access to the Internet" Minneapolis, Minnesota. May 23-24, 1994. Sponsored by CICNet & NSF. Contact: ruraldata-info-request(a)cic.net. Send name, mailing address and e-mail address. "Information: Society, Superhighway or Gridlock?" Computing for the Social Sciences 1994 Conference (CSS94). University of Maryland at College Park. June 1-3, 1994. Contact: Dr. Charles Wellford 301-405-4699, fax 301-405-4733, e-mail: cwellford(a)bss2.umd.edu. Abstracts for papers due March 1. Contact William Sims Bainbridge (wbainbri(a)nsf.gov) Grace Hopper Celebration of Women in Computer Science. Washington, DC June 9-11. Contact: 415 617-3335, hopper-info(a)pa.dec.com DEF CON ][ ("underground" computer culture) "Load up your laptop muffy, we're heading to Vegas!" The Sahara Hotel, Las Vegas, NV. July 22-24, Contact: dtangent(a)defcon.org. Conference on Uncertainty in AI. Seattle, WA. July 29-31. Contact: 206-936-2662, heckerma(a)microsoft.com. Symposium: An Arts and Humanities Policy for the National Information Infrastructure. Boston, Mass. October 14-16, 1994. Sponsored by the Center for Art Research in Boston. Contact: Jay Jaroslav (jaroslav(a)artdata.win.net) Third Biannual Conference on Participatory Design, Chapel Hill, North Carolina, October 27-28, 1994. Sponsored by CPSR. Contact: trigg(a)parc.xerox.com. Submissions due April 15, 1994. (Send calendar submissions to Alert(a)washofc.cpsr.org) ===================================================================== To subscribe to the Alert, send the message: "subscribe cpsr-announce <your name>" (without quotes or brackets) to listserv(a)cpsr.org. Back issues of the Alert are available at the CPSR Internet Library FTP/WAIS/Gopher cpsr.org /cpsr/alert Computer Professionals for Social Responsibility is a national, non-partisan, public-interest organization dedicated to understanding and directing the impact of computers on society. Founded in 1981, CPSR has 2000 members from all over the world and 22 chapters across the country. Our National Advisory Board includes a Nobel laureate and three winners of the Turing Award, the highest honor in computer science. Membership is open to everyone. For more information, please contact: cpsr(a)cpsr.org or visit the CPSR discussion conferences on The Well (well.sf.ca.us) or Mindvox (phantom.com) ===================================================================== CPSR MEMBERSHIP FORM Name ______________________________________________________________ Address ___________________________________________________________ ___________________________________________________________________ City/State/Zip ____________________________________________________ Home phone _____________________ Work phone _____________________ Company ___________________________________________________________ Type of work ______________________________________________________ E-mail address ____________________________________________________ CPSR Chapter __ Acadiana __ Austin __ Berkeley __ Boston __ Chicago __ Denver/Boulder __ Los Angeles __ Madison __ Maine __ Milwaukee __ Minnesota __ New Haven __ New York __ Palo Alto __ Philadelphia __ Pittsburgh __ Portland __ San Diego __ Santa Cruz __ Seattle __ Washington, DC __ Virtual Chapter (worldwide) __ No chapter in my area __ Loyola/New Orleans (Just started!) CPSR Membership Categories __ $ 75 REGULAR MEMBER __ $ 50 Basic member __ $ 200 Supporting member __ $ 500 Sponsoring member __ $1000 Lifetime member __ $ 50 Foreign subscriber __ $ 20 Student/low income members __ $ 50 Library/institutional subscriber Additional tax-deductible contribution to support CPSR projects: __ $50 __ $75 __ $100 __ $250 __ $500 __ $1000 __ Other Total Enclosed: $ ________ Make check out to CPSR and mail to: CPSR P.O. Box 717 Palo Alto, CA 94301 ------------------------ END CPSR Alert 3.03 -----------------------

1 0

Forbidden math?!
by qwerty-remailer＠netcom.com 17 Dec '03

17 Dec '03

You guys are kidding, right?! Schedule I math? Please stop it. It must be a joke. It's got to be a joke. It's a joke. Why aren't I laughing? -=Xenon=-

2 1

Re: Nx2 DES Found Weak
by wcs＠anchor.ho.att.com 17 Dec '03

17 Dec '03

> How is this different from a birthday attack ? In Nx2 DES, you have A -k1-> B -k2-> C . In a birthday attack, you try values of k1' and k2' until you get k1', k2' s.t. E(A,k1') = B' = D(C,k2') but that's only true for that particular plaintext set A,C. If you have B' = the same value of B that the original k1,k2 produced, you win, but there may be many other values of B' besides the one for k1'=k1, k2'=k2.

1 0

Poor Detweiler Forgery
by wcs＠anchor.ho.att.com 17 Dec '03

17 Dec '03

Someone pretending to be "L." Deteiler posted an article, pretending to be from Detweiler's account, that had a forgery of Tim May posting to all the Cyphertentacles about how well the work he and Eric were doing is going. The real "L." Detweiler, of course, wouldn't have done so, because that would be saying the tentacles are sufficiently different humans that they need to send mail to each other, rather than merely talking to herself; he or she would have posted a fake announcement to the net or something like that. :-)

2 1

strick misses physical
by strick＠versant.com 17 Dec '03

17 Dec '03

To those people I said I would see at the Mountain View Physical cypherpunks meeting -- I unfortunately will miss it. (My father's brother had cancer for several years and died a couple of days ago; I'm in Oklahoma for the weekend for the funeral.) regretfully, strick

1 0

My letter to Gore
by Carl Ellison 17 Dec '03

17 Dec '03

Date: Sat, 12 Feb 1994 01:08:37 -0500 From: Carl Ellison <cme> Message-Id: <199402120608.BAA04637(a)ellisun.sw.stratus.com> To: vice_president(a)whitehouse.gov Subject: Re: Clipper Chip Newsgroups: alt.security In article <helen.760998516@access1> you write: > But Gore indicated Thursday that the administration's >position is "not locked in stone." > "Our determination to solve the problem is locked in stone, >and our determination to proceed with this in the absence of a >better solution is locked in stone," he said "...the burden is >on those who say there is a better solution because no solution >for the national security dimension of the problem >is unacceptable to us." Dear Mr. Vice President, I enjoy a good challenge and I am educated in cryptography. I am also an opponent of Clipper. If you would describe the national security dimension of this problem to us, I would endeavour to find a solution to that piece of the problem. However, the only expression of the problem which I have seen is a claim/fear that criminals can get access to strong cryptography (true and always has been true [cf., David Kahn's "The Codebreakers"]) and the claim that Clipper will somehow prevent that situation (false and never substantiated). The main supporter of Clipper in the technical community, Prof. Dorothy Denning, recently said in a public posting that the real reasons for Clipper are classified and therefore we the people have no ability to see the facts and must therefore leave decision making up to you and the President. I beg to differ. We must discuss this issue in public. We can not have a secret committee making such decisions. We are talking about a basic privacy right which the American people have held since the founding of this country -- the right to invent, disseminate and use cryptography as strong as the human mind can invent without any sharing of secret keys with the government. So, please Mr. Vice President, bring this issue into the public for debate and follow through on that debate. Last Spring, in response to NIST, I submitted a list of questions, most of which have never been answered. If those questions had been answered, perhaps we would have had a resolution by now of the "national security problem" to which you referred. Sincerely, Carl M. Ellison 2130 Mass Ave. #5B Cambridge MA 02140-1918 e-mail: cme(a)sw.stratus.com -- - <<Disclaimer: All opinions expressed are my own, of course.>> - Carl Ellison cme(a)sw.stratus.com - Stratus Computer Inc. M3-2-BKW TEL: (508)460-2783 - 55 Fairbanks Boulevard ; Marlborough MA 01752-1298 FAX: (508)624-7488

1 0

Rant pointer
by catalyst-remailer＠netcom.com 17 Dec '03

17 Dec '03

Pointer to S.Boxx rant "DEATH TO CLIPPER!! DEATH TO DENNING!" appearing on sci.crypt and other groups. Brace yourselves for another onslaught of rants.

1 0