December 2003 - cypherpunks-legacy

I will be in Detroit/Cleveland/Akron area this weekend
by collins＠newton.apple.com 17 Dec '03

17 Dec '03

...and cities between. I could also stop in Ann Arbor. Any cypherpunks in these towns who want to sign keys, etc, email asap; I might not be able to retrieve it after I depart. Be seeing you, Scott Collins | "That's not fair!" -- Sarah | "You say that so often. I wonder what your basis 408.862.0540 | for comparison is." -- Goblin King ................|.................................................... BUSINESS. fax:974.6094 R254(IL5-2N) collins(a)newton.apple.com Apple Computer, Inc. 5 Infinite Loop, MS 305-2D Cupertino, CA 95014 ..................................................................... PERSONAL. 408.257.1746 1024:669687 catalyst(a)netcom.com

1 0

Re: Regarding my 500/1 Lurk/Post ratio
by jamiel＠sybase.com 17 Dec '03

17 Dec '03

> funny think about garcia, his first time ever post on c'punx was about > larry too...... strange times indeed when a newbie bursts on the scene > knowing all about us My question is why it even matters. Does anyone out there really think this is some sort of safe space? I know _I'd_ never post anything I didn't want to see in WiReD magazine a few months down the road... -j

1 0

Re: Regulatory Arbitrage
by rah＠shipwright.com 17 Dec '03

17 Dec '03

Excuse me while gush... As usual, Eric is right. [great discussion about how regulation only creates markets elsewhere...] Arguably (only arguably...) some economic regulation is good for us: like a *few* pharmaceutical and food regulations, maybe. Eric points out that internet commerce and e-money, e$ for short, reminds one of something that has been going on for a long time with another E$, this time Eurodollars. (Kind of like AOL, eh?) Eurodollars were invented to get around American tax and currency regulations, and those of other countries. You had all these American corporations funding themselves through subsidiaries in Carribbean countries like the Netherlands Antilles. (Any time you see "Companyname, N.V.", the "NV" is Dutch for "we funded this with offshore dollars" ;-). George Soros, who founded Quantum Fund, N.V., is evidently happy with the results of this knowlege. He recently made the fastest billion dollars in history pointing out the folly of the European currency exchange rate mechanism, much to the chagrin of the Bank of England and other central banks whose money he pocketed. I remember a Milton Friedman quote, something to the effect that regulations only benefit a market's producers, not its consumers. Current day Japan, states with barber and bartender "licences", and Smoot/Hawley America in the 1930's might be good examples of that. If there's a market for those goods/services elsewhere, people *will* buy there. With internet commerce and e$ ,"elsewhere" is everywhere... But we know that already, don't we? I can't wait until the rest of the information, or the software, or the intellectual services buying public figure that out. The only way to prevent that is to regulate economic commerce on the internet, which makes me shudder to think about. Although, if the paradigm holds, it won't make much difference. It'll be like stopping capitalism itself. Cheers, Bob Hettinga ----------------- Robert Hettinga (rah(a)shipwright.com) "There is no difference between someone Shipwright Development Corporation who eats too little and sees Heaven and 44 Farquhar Street someone who drinks too much and sees Boston, MA 02331 USA snakes." -- Bertrand Russell (617) 323-7923

3 2

NIST to propose cryptographic APIs
by paul＠hawksbill.sprintmrn.com 17 Dec '03

17 Dec '03

extracted from: Network World volume 11, number 23 June 6, 1994 page 3 NIST to propose cryptographic APIs by Ellen Messmer Washington, D.C. -- The National Institute of Standards and Technology (NIST) will soon issue a set of application program interfaces (API) that would enable vendors to integrate their products with the cryptography systems used by the federal government. Federal security managers are supporting the idea because it will simplify purchasing and bring some interoperability to cryptography products. But the move will mean more work for vendors. Once the APIs are approved as a federal mandatory purchasing standard, software and hardware vendors that want to sell to the government would have to modify any products they sell with cryptographic functions to support the government-required APIs. Several vendors, including Apple Computer, Inc., Lotus Development Corp., Novell, Inc. and WordPerfect Corp., have already integrated functions for digital signatures, encryption and decryption into the latest versions of their products. They have licensed cryptography technology from RSA Data Security, Inc., and the APIs used in their products are based on an open specification called the Public Key Cryptography Standard. In spite of the work on these industry-standard APIs, vendors may have to revamp their products to suit the government. NIST said it will detail how the government wants vendors to change their products to support a high-level API in all products sold to federal agencies. "There would be an advantage to having a common set of services calls," said Miles Smid, manager of the security technology group at NIST. "You wouldn't be locked into a single vendor. In the future, if you added more equipment or changed it, the software would still be compatible." Smid said the API service calls will include commands to sign or verify a message electronically, and encrypt or decrypt it. The calls would invoke the functions from a PCMCIA card, a smart card, software or other means. With the APIs, the user's application could make use of any cryptographic algorithm, regardless or whether it's Digital Encryption Standard, Skipjack or RSA, Smid said. "It's a great idea," said Jim Robinette, security manager at the Internal Revenue Service, which makes considerable use of both private- and public-key technology. "It's a necessity for us. From the user's perspective, it would make life very simple." A high-level API would still allow vendors free rein in how they implement their systems at a lower level, Robinette said. But he added that it may not necessarily be easy for vendors to implement the APIs. RSA President James Bidzos criticized the cryptography API plan as another swipe at his firm, which has been battling the government on patent rights issues for years. "They're not trying to work with industry on this," he said. NIST plans to unveil the APIs in about a month.

1 0

digital world
by Richard D. Enegage 17 Dec '03

17 Dec '03

Please send me info about your group or whatever the hell it is. I saw people wearing the "cypherpunk criminal" shirts at digital world, and recognized it from my Windows background .BMP. See ya around the datasphere- -reneGage renegag(a)eis.calstate.edu

1 0

Re: NIST to propose cryptographic APIs
by bshantz＠spry.com 17 Dec '03

17 Dec '03

In regards to the NIST API's > RSA President James Bidzos criticized the cryptography API plan as >another swipe at his firm, which has been battling the government on >patent rights issues for years. "They're not trying to work with >industry on this," he said. As usual, Bidzos has a stick up his butt. There is nothing in the NIST plan that is a slam at RSA. (as such...Bidzo's seems to think that everyone hates RSA. Everyone's out to get them.) > NIST plans to unveil the APIs in about a month. >With the APIs, the user's application could make use >of any cryptographic algorithm, regardless or whether it's Digital >Encryption Standard, Skipjack or RSA, Smid said. I'd be more interested in what kind of an API they have for SkipJack. Are they real API's or are we talking BlackBox programming? :::::::::::::::::<<< NETWORKING THE DESKTOP >>>::::::::::::::::: Brad Shantz Internet : bshantz(a)spry.com SPRY Inc Ph# (206) 447-0300 316 Occidental Avenue S. 2nd Floor FAX (206) 447-9008 Seattle, WA 98104 ---------------------------------------------------------------- "In gopherspace no one can hear you scream." ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::

1 0

RE: NIST to propose cryptographic APIs
by p.v.mcmahon.rea0803＠oasis.icl.co.uk 17 Dec '03

17 Dec '03

> NIST to propose cryptographic APIs > patent rights issues for years. "They're not trying to work with > industry on this," he said. This is unfair. NIST have made efforts to work in both US, and international industry groups on crypto APIs. For example NIST are represented this week (here) along with IBM, HP, Novell, Olivetti, Bull, ICL, Amdahl, SCO, Sun, SNI, Andersens etc at the X/Open Security Working Group. > NIST plans to unveil the APIs in about a month. The NIST draft FIPS has already been contributed, along with other inputs from industry and government such as the draft X.9 Layered API for Cryptographic Modules, IBM crypto APIs, Mosaic Interface Control document, SESAME Basic Cryptographic APIs, Olivetti Cryptographic APIs (etc), as input to X/Open. I recall that the NIST crypto APIs work was also presented to IEEE POSIX last year. > >With the APIs, the user's application could make use > >of any cryptographic algorithm, regardless or whether it's Digital > >Encryption Standard, Skipjack or RSA, Smid said. > > I'd be more interested in what kind of an API they have for SkipJack. > Are they real API's or are we talking BlackBox programming? I guess more black than "real". Example: The following are the main paremeters for the Encipher primitive: identifier 1 selects DES, 2 selects Skipjack mode ECB, CBC, cipher feedback, output feedback plaintext key iv feedback number of bits chain whether chaining required, if so: where in chain status - pvm

1 0

Cop On The Net - Watch Your ***
by NetSurfer 17 Dec '03

17 Dec '03

Just when you thought it was safe to surf in the sunlight... -NetSurfer #include standard.disclaimer >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> == = = |James D. Wilson |V.PGP 2.4: 512/E12FCD 1994/03/17 > " " " |P. O. Box 15432 |finger for key / Viacrypt Reseller > " " /\ " |Honolulu, HI 96830 |====================================> \" "/ \" |Serendipitous Solutions| Also NetSurfer(a)sersol.com > >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> ---------- Forwarded message ---------- Date: Fri, 10 Jun 1994 00:13:43 -0400 From: E-d-u-p-a-g-e <info(a)ivory.educom.edu> Subject: E-d-u-p-a-g-e 06/09/94 CYBERCOP A former New Jersey police officer now spends his time cruising for suspects in cyberspace and has been involved in dozens of criminal investigations, including a sting operation that nabbed a pedophile who lured young rape victims via a bulletin board service. (Tampa Tribune 6/8/94 BayLife 5) E-MAIL PRIVACY A survey of 301 companies by Macworld Magazine showed that 78.4% of the firms do not spy on employee e-mail or search their electronic files. Sen. Paul Simon (D-Ill.) has drafted legislation requiring that companies tell their workers that their e-mail might be monitored. (Tampa Tribune 6/8/94 BayLife 5) PAT ROBERTSON EYES VIETNAMESE CABLE TV Religious broadcaster Pat Robertson wants to build a cable-TV system in Vietnam and is confident a deal can be struck after meeting with government and TV officials in Hanoi. The proposed system will use microwave technology to beam dozens of channels to homes. (Investor's Business Daily 6/8/94 A9)

1 0

Remailer Chaining Security?
by nobody＠shell.portal.com 17 Dec '03

17 Dec '03

What level of security is achieved by the practice of "chaining" messages through various "anonymous remailers"? Do these servers not keeps logs by which a post could be traced back through the chain to the source? If there is a REAL level of security afforded, then the question arises "how much is enough"? =======

1 0

hi
by lile＠netcom.com 17 Dec '03

17 Dec '03

Just thought I'd say hi... :) -lile

1 0