December 2003 - cypherpunks-legacy

Re: PGP 2.5--some questions.
by gtoal＠an-teallach.com 17 Dec '03

17 Dec '03

: From: m1tca00(a)newfed.frb.gov (Thomas C. Allard) : > > To respond to the sender of this message, send mail to : > > remailer(a)soda.berkeley.edu, starting your message with : > > the following 7 lines: : > > :: : > > Response-Key: ideaclipper : > : > > ====Encrypted-Sender-Begin==== : > > MI@```$US^P;+]AB?X9TW6\8WR:>P&2'9,7.YM5[D5-D0)[3;\@M3L:625SRF : > > E&M(.3FCF)SX,HK/F!CHPO!/>L.D#Z=4(++Q872W\KAK[:?GOT``` : > > ====Encrypted-Sender-End==== : > : > Thus the NSA just needs to crack the "soda" key in order to get hold : > of a person who knows something about an ITAR infringement. : > : > Is there a way to instruct a cypherpunk remailer to omit the last : > seven lines? : He most likely used a chain of remailers. That's the REASON for : the last seven lines (instead of a simple anonXXXX-type address. : When you send those 7 lines to the soda remailer, it decrypts it : and finds ANOTHER address to send it to. It can do this as many : times as you like. When this feature was put in recently, in response to a suggestion of mine (which I now regret because of...), I intended for each posting to be encrypted with a different randomly-generated key, and for the key to be deleted after being reused on reply. Unfortunately Eric chose not to implement it that way, and although he promised to cycle the keys periodically, he seems not to have done so. I agree with whoever it was above that was in fear of the key being compromised - it *is* a possibility, and that's why I wouldn't use that remailer, if I ever had to use a remailer. G

1 0

Secure RPC?
by danisch＠ira.uka.de 17 Dec '03

17 Dec '03

Hello, where can I get specs and informations about secure RPC? Thanks Hadmut

3 2

RE: Secure RPC?
by p.v.mcmahon.rea0803＠oasis.icl.co.uk 17 Dec '03

17 Dec '03

For ONC RPC, see Internet Draft ietf-draft-oncrpc-rpcv2-00.txt

1 0

public key of Lady Ada ???
by catalyst-remailer＠netcom.com 17 Dec '03

17 Dec '03

Where is the public pgp key of Lady Ada?

1 0

Smithsonian class on cryptography - with the NSA!
by Stanton McCandlish 17 Dec '03

17 Dec '03

Forwarded message: Date: Fri, 20 May 1994 11:24:04 -0400 From: ssteele(a)eff.org (Shari Steele) Subject: Smithsonian class on cryptography Hi all. I am not making this up. In today's Weekend section of the Washington Post, the Smithsonian has a full page ad for its Campus on the Mall. Mixed in with classes called "Ice Cream, Ice Cream: Food for the Gods" and "Learning to Love Opera" is the following: "Intelligence and Cryptology" "The (Berlin) wall is down and the (Iron) curtain is up. This course peers into the world of cryptologic intelligence and information security. With tour of the National Cryptologic Museum at Fort Meade. Cosponsored with the National Security Agency. (Code U323-700) Wed, 6 pm July 6 -- Aug 10 (6 sessions) Members $76; Nonmembers $106" Anyone interested in signing up? Shari -- Stanton McCandlish * mech(a)eff.org * Electronic Frontier Found. OnlineActivist "In a Time/CNN poll of 1,000 Americans conducted last week by Yankelovich Partners, two-thirds said it was more important to protect the privacy of phone calls than to preserve the ability of police to conduct wiretaps. When informed about the Clipper Chip, 80% said they opposed it." - Philip Elmer-Dewitt, "Who Should Keep the Keys", TIME, Mar. 14 1994

1 0

Re: D-H key exchange - how does it work?
by Hal 17 Dec '03

17 Dec '03

From: hughes(a)ah.com (Eric Hughes) > > In addition, changing the modulus can have unpleasant effects on > > traffic analysis, if not done properly. > > Of what sort? > > For D-H, the modulus must be transmitted in the clear. Unless you use > a different modulus for each conversation, there is a persistency to > the moduli that gives rise to a pseudo-identity. I don't follow this. If you never change the modulus (which is what it sounds like Eric was recommending), then isn't there an even greater persistency? Or is it the assumption that everyone uses the same modulus in that case? Hal

2 1

Lady ada's Key
by VACCINIA＠UNCVX1.OIT.UNC.EDU 17 Dec '03

17 Dec '03

From: IN%"anonymous(a)extropia.wimsey.com" 5-MAY-1994 22:31:20.18 To: IN%"cypherpunks(a)toad.com" CC: Subj: Return-path: <owner-cypherpunks(a)toad.com> Received: from relay2.UU.NET by UNCVX1.OIT.UNC.EDU (PMDF V4.3-7 #6908) id <01HBZVPDJ1SG0005GD(a)UNCVX1.OIT.UNC.EDU>; Thu, 5 May 1994 22:31:10 EDT Received: from toad.com by relay2.UU.NET with SMTP (5.61/UUNET-internet-primary) id AAwoqr08382; Thu, 5 May 94 22:25:45 -0400 Received: by toad.com id AA29828; Thu, 5 May 94 19:22:41 PDT Received: from wolfe.wimsey.com by toad.com id AA29820; Thu, 5 May 94 19:22:36 PDT Received: by wolfe.wimsey.com (Smail3.1.28.1) id m0pzFYZ-0002PqC; Thu, 5 May 94 19:22 PDT Received: by xtropia id AA16656 (5.65c/IDA-1.4.4 for cypherpunks(a)toad.com) ; Thu, 5 May 1994 19:10:43 -0700 Date: Thu, 05 May 1994 19:10:43 -0700 From: anonymous(a)extropia.wimsey.com Sender: owner-cypherpunks(a)toad.com To: cypherpunks(a)toad.com Message-id: <199405060210.AA16656@xtropia> Content-transfer-encoding: 7BIT Remailed-By: remail(a)extropia.wimsey.com Precedence: bulk Comments: This message was anonymously remailed. Do not reply to the address in the From: line, unless you wish to report a problem. Thank you. Ah, the problems of anonymity. In order to prevent impersonation, I'm passing my public key to the list. Future messages from me will be signed with this key. -Lady Ada -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.3a mQCNAi2rMQAAAAEEALehNDQG2UpPhFLspypt6dPLFjSB1wnwFW9p8cEftZ+ga/ZU 06mywff21ODSYily2NMwOpw+mxSkxiOTJDdjJ3kenRW4qwpvmBGs96AK+0yv2DDh R3ff9cpOlIu3tUcJhmdTcSj+MXlkYwJwhJoA9o4uCFXahN5W1KXNQdJx1hMZAAUR tBZMYWR5IEFkYSA8bm93aGVyZUBhbGw+ =K9ps -----END PGP PUBLIC KEY BLOCK-----

1 0

Re: Patent infringement (fwd)
by Brian Beker 17 Dec '03

17 Dec '03

---------- Forwarded message ---------- Date: Fri, 20 May 1994 13:43:10 -0700 (PDT) From: Netcom Support <support(a)netcom.com> To: david(a)sternlight.com Cc: Brian Beker <beker(a)netcom.com> Subject: Re: Patent infringement [Deleted; copy of Mr. Sternlight's original letter of complaint about my PGP2.3a key in my .plan file] You should take the matter up with him; we thank you for your information and opinions but will be taking no further action at this time. If you wish to pursue this matter legally you should have RSADSI's lawyers contact him directly. ___________________________________________________________________________ Support support(a)netcom.com Technical Support Staff NETCOM On-line Communication Services

1 0

Re: Complaint against beker@netcom.com (fwd)
by Brian Beker 17 Dec '03

17 Dec '03

With this and the previous response to Mr. Sternlight from Netom, this matter is for now laid to rest. Brian Beker ---------- Forwarded message ---------- Date: Fri, 20 May 1994 13:46:29 -0700 (PDT) From: Netcom Support <support(a)netcom.com> To: david(a)sternlight.com Cc: Brian Beker <beker(a)netcom.com> Subject: Re: Complaint against beker(a)netcom.com David Sternlight writes: > From strnlght Thu May 19 12:31:19 1994 > Return-Path: <strnlght> > Received: by netcom.com (8.6.8.1/SMI-4.1/Netcom) > id MAA01913; Thu, 19 May 1994 12:30:20 -0700 > From: strnlght (David Sternlight) > Message-Id: <199405191930.MAA01913(a)netcom.com> > Subject: Complaint against beker(a)netcom.com > To: support (Netcom Support) > Date: Thu, 19 May 1994 12:30:18 -0700 (PDT) > In-Reply-To: <199405191033.EAA29745(a)spot.Colorado.EDU> from "Richard Johnson" at May 19, 94 04:33:51 am > Reply-To: david(a)sternlight.com > X-Mailer: ELM [version 2.4 PL23] > MIME-Version: 1.0 > Content-Type: text/plain; charset=US-ASCII > Content-Transfer-Encoding: 7bit > Content-Length: 6613 > > I mailed a complaint to netcom support. At the suggestion of the netcom > support person I spoke to on the phone, I sent a copy to the user in > question as well. > > That user posted a copy of the complaint to a newsgroup without my > permission. This is, of course, a violation of my copoyright. Thus he has > compounded his violation of RSADSI's patent in PGP with a violation of my > copyright in my e-mail. > > By trying to make what should be a private matter between the user and > netcom support, and myself and netcom support into a public cause celebre, > and generate pressure mail on netcom support such as that below, I believe > the user in question has further violated his agreement, and request netcom > to take appropriate action. This time I have a personal interest in seeing > this resolved. Postng another person's email, while annoying, is not necessarily a violation of copyright in our eyes. Again, we have no intention of taking action at this time; if you want to pursue the matter legally, then have your lawyer talk to him. ___________________________________________________________________________ Support support(a)netcom.com Technical Support Staff NETCOM On-line Communication Services

1 0

RSA's "Sink Clipper" poster
by snyderra＠dunx1.ocs.drexel.edu 17 Dec '03

17 Dec '03

Got home today, and found a poster tube attached to my doorknob. Inside I found a poster from RSADSI ("Because some things are better left unread.") with the picture of a ship going down and the words "Sink Clipper!" on it. It's not a bad poster, saying how Clipper "allows government to eavesdrop on the communications of criminals, suspects, and unfortunately, law-abiding citizens alike," and lists what you can do to stop it. (Boycott, write Washington, and, of course, buy only real RSA products :-) ) It's a pretty good poster. I believe I got it because I inquired of their various products and PEM services a while back. I don't know what their policy is, but I don't suppose it'd hurt to mail info(a)rsa.com and ask. Bob -- Bob Snyder N2KGO MIME, RIPEM mail accepted snyderra(a)dunx1.ocs.drexel.edu finger for RIPEM public key When cryptography is outlawed, bayl bhgynjf jvyy unir cevinpl.

1 0