December 2003 - cypherpunks-legacy

Re: Nx2 DES Found Weak
by wcs＠anchor.ho.att.com 17 Dec '03

17 Dec '03

> How is this different from a birthday attack ? In Nx2 DES, you have A -k1-> B -k2-> C . In a birthday attack, you try values of k1' and k2' until you get k1', k2' s.t. E(A,k1') = B' = D(C,k2') but that's only true for that particular plaintext set A,C. If you have B' = the same value of B that the original k1,k2 produced, you win, but there may be many other values of B' besides the one for k1'=k1, k2'=k2.

1 0

strick misses physical
by strick＠versant.com 17 Dec '03

17 Dec '03

To those people I said I would see at the Mountain View Physical cypherpunks meeting -- I unfortunately will miss it. (My father's brother had cancer for several years and died a couple of days ago; I'm in Oklahoma for the weekend for the funeral.) regretfully, strick

1 0

Poor Detweiler Forgery
by wcs＠anchor.ho.att.com 17 Dec '03

17 Dec '03

Someone pretending to be "L." Deteiler posted an article, pretending to be from Detweiler's account, that had a forgery of Tim May posting to all the Cyphertentacles about how well the work he and Eric were doing is going. The real "L." Detweiler, of course, wouldn't have done so, because that would be saying the tentacles are sufficiently different humans that they need to send mail to each other, rather than merely talking to herself; he or she would have posted a fake announcement to the net or something like that. :-)

2 1

Forbidden math?!
by qwerty-remailer＠netcom.com 17 Dec '03

17 Dec '03

You guys are kidding, right?! Schedule I math? Please stop it. It must be a joke. It's got to be a joke. It's a joke. Why aren't I laughing? -=Xenon=-

2 1

My letter to Gore
by Carl Ellison 17 Dec '03

17 Dec '03

Date: Sat, 12 Feb 1994 01:08:37 -0500 From: Carl Ellison <cme> Message-Id: <199402120608.BAA04637(a)ellisun.sw.stratus.com> To: vice_president(a)whitehouse.gov Subject: Re: Clipper Chip Newsgroups: alt.security In article <helen.760998516@access1> you write: > But Gore indicated Thursday that the administration's >position is "not locked in stone." > "Our determination to solve the problem is locked in stone, >and our determination to proceed with this in the absence of a >better solution is locked in stone," he said "...the burden is >on those who say there is a better solution because no solution >for the national security dimension of the problem >is unacceptable to us." Dear Mr. Vice President, I enjoy a good challenge and I am educated in cryptography. I am also an opponent of Clipper. If you would describe the national security dimension of this problem to us, I would endeavour to find a solution to that piece of the problem. However, the only expression of the problem which I have seen is a claim/fear that criminals can get access to strong cryptography (true and always has been true [cf., David Kahn's "The Codebreakers"]) and the claim that Clipper will somehow prevent that situation (false and never substantiated). The main supporter of Clipper in the technical community, Prof. Dorothy Denning, recently said in a public posting that the real reasons for Clipper are classified and therefore we the people have no ability to see the facts and must therefore leave decision making up to you and the President. I beg to differ. We must discuss this issue in public. We can not have a secret committee making such decisions. We are talking about a basic privacy right which the American people have held since the founding of this country -- the right to invent, disseminate and use cryptography as strong as the human mind can invent without any sharing of secret keys with the government. So, please Mr. Vice President, bring this issue into the public for debate and follow through on that debate. Last Spring, in response to NIST, I submitted a list of questions, most of which have never been answered. If those questions had been answered, perhaps we would have had a resolution by now of the "national security problem" to which you referred. Sincerely, Carl M. Ellison 2130 Mass Ave. #5B Cambridge MA 02140-1918 e-mail: cme(a)sw.stratus.com -- - <<Disclaimer: All opinions expressed are my own, of course.>> - Carl Ellison cme(a)sw.stratus.com - Stratus Computer Inc. M3-2-BKW TEL: (508)460-2783 - 55 Fairbanks Boulevard ; Marlborough MA 01752-1298 FAX: (508)624-7488

1 0

Rant pointer
by catalyst-remailer＠netcom.com 17 Dec '03

17 Dec '03

Pointer to S.Boxx rant "DEATH TO CLIPPER!! DEATH TO DENNING!" appearing on sci.crypt and other groups. Brace yourselves for another onslaught of rants.

1 0

unsubscribe list
by cryptic531＠aol.com 17 Dec '03

17 Dec '03

not what i thought it was. get me off this f...ing list please

1 0

Need ride from SF to CP meeting
by mbriceno＠netcom.com 17 Dec '03

17 Dec '03

I need a ride from SF to Saturday's meeting. If you are going there and would like to split the cost for gas, email me with your phone number or leave a message on my voice mail at (415) 435-7939. Please respond before 11 a.m. TIA, -- Marc Briceno <mbriceno(a)netcom.com> PGP public key by finger Big Brother Chips? The Clinton Administration has decided to foster use of "Clipper Chips" in government communications equipment, thus allowing the FBI et al. to eavesdrop on computerized messages. The FBI reportedly is also investigating increased use of "sniffer" programs, which steal passowrds and access to private data on the Internet. Time Magazine, February 14, 1994, page 18

1 0

Magic Money bug removed
by remailer＠merde.dis.org 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Anonymous writes: >It appears that the problem with bigendian magic money is specific >to the "mint" function. Minting one coin works OK, but minting more >than one causes every coin after the first to be rejected by the client. >Creating a coins.dat file with the -p function of the client works OK, >even with more than one coin. Sending the output.asc to the server works >OK too, as does handling the ascii file that comes back from the server. >Only minting fails. Thank you for finding this one. That was not a big-endian problem, that was simple stupidity on my part. When I added the coinid field to the protocoin structure, I forgot to move the free(pc); down to the next line. So the coinid was getting freed and then written. Version E is on its way to csn.org. By the way MPJ, did you get pgptl10b? Pr0duct Cypher mp_modexp_crt(c->c.value,pc->c.value,sk->p.value,sk->q.value, dp,dq,sk->u.value); free(pc); <-------------------- DUMB MISTAKE pgp_fix_mpi(&c->c); f=fifo_file_create(fp); fifo_put(MM_REGCOIN,f); fifo_aput(pc->coinid,16,f); pgp_create_mpi(f,&c->e); pgp_create_mpi(f,&c->c); fifo_destroy(f); free(c); <-------------- MOVE IT HERE! free(d); } -----BEGIN PGP SIGNATURE----- Version: 2.3a iQCVAgUBLVtnbsGoFIWXVYodAQHaZgP+JfohckwzIVLvFB3K+r+ywl9ee53h5387 XycJ+qqjnHvLyPp4wTgfYaYnpqLAOzYDGZkq834pQ3EoE83fr++OmA70CpugXwX/ 6cFTFtc3mK3Lp+MTc5tKJxVe3ktuL4DFY1c80gcbapur4PCw/NS/BIWQQIZNXtwu gJH7lPjRno4= =I0+O -----END PGP SIGNATURE-----

1 0

MIRACL & Scramble
by uc022＠freenet.victoria.bc.ca 17 Dec '03

17 Dec '03

Was wandering the net tonight and came across this: ripem.msu.edu /pub/crypt/other 675558 Jan 27 15:37 miracl-3.23.zip There is a whole lot of source (c and cpp) for various bits of factoring, rsa, etc, and a few executables but most interesting is a program called "Scramble". Has anyone tried this out? I haven't had a chance to use it yet, but it appears to be a terminal program that uses IDEA encryption to make a secure link between two modems. From the .doc and loop function it appears to be quite functional. There are many interesting little tid bits in this, I'm just wondering why I have never heard of any of it? Drop me a line you know if this stuff is actually secure or not... Thanx uc022(a)freenet.victoria.bc.ca Darren Hill

1 0