December 2003 - cypherpunks-legacy

New Encryption Scheme
by Terry Ott 17 Dec '03

17 Dec '03

I was told to post here by the kind people on alt.security. I didn't know where to start, and they led me on the path to truth. :):):) Alllll-right, to the heart of the matter: I've designed a new encryption scheme for passwords (or any short string), not for files, as of yet. It might have some glaring holes that you who are knowledgeable could see right through. Since you DO have a pretty good clue what's up, I'd love to see what you all think. I'm willing to give out source code, but I'd love to see what you can do without it. =] Thanks in advance, -Terry +=========================+======================+==========================+ | "Joke 'em if they | U U U U | Terry Ott | | can't take a screw!" | U U U U | Steve.Ott(a)m.cc.utah.edu | | | UUUU Of UUUU | | | --Robin Williams | University Utah | Optimystique Software | +=========================+======================+==========================+

1 0

Contacts for my next trip to Beijing (fwd)
by Sandy Sandfort 17 Dec '03

17 Dec '03

C'punks, Thought this might be of interest to the list. The People's Liberation Army seems to be on the cutting edge. S a n d y ---------- Forwarded message ---------- Date: Mon, 6 Jun 1994 02:13:27 +0200 From: Miguel Gallardo <gallardo(a)BATMAN.FI.UPM.ES> To: Multiple recipients of list CHINANET <CHINANET(a)tamvm1.tamu.edu> Subject: Contacts for my next trip to Beijing I will be in Beijing from 7th to 13th of July. I will be teaching Cryptology and Electronic Signatures there. I have some friends at China Embassy in Madrid that arranged me this wonderful trip to Beijing. Of course, most of my official conferences will be for Chinesse Army, but I am completely free to have any interview there. At the moment, I do not know my hotel or phone number there, but I am interestedin any contact with people related with technology business there. Any suggestion for me? Thanks before hand. _ _ _ _ Miguel A. Gallardo, President of APEDANICA ' ) ) ) // Alcala de Henares University Lecturer / / / o __ _ // P.O. Box 17083 - E-28080 Madrid (Spain) / ' (_<_(_//_/_</_</_ Tel: (341) 474 38 09 - FAX: 473 81 97 _/ E-mail: gallardo(a)batman.fi.upm.es Cervantes dreamed "El Quijote" close to the place where my PC is now!

1 0

Request Address, Please!
by john.nieder＠tigerteam.org 17 Dec '03

17 Dec '03

Will someone, by netmail, tell me what subscription drill is for the list? Thanks. ___ Blue Wave/QWK v2.12

1 0

Re: CNN Covers Blaze's Clipper Flaw
by lile＠netcom.com 17 Dec '03

17 Dec '03

Yes!!!!!!!!! *beaming* -lile ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Lile Elam | "Remember... No matter where you go, there you are." lile(a)netcom.com | Un*x Admin / Artist | Buckaroo Banzai ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

1 0

Anonymous Remailers
by Matthew Ghio 17 Dec '03

17 Dec '03

Anonymous says: > There are a number of good text files out on anonymous mail > forwarding servers, but nothing that really "ties it all > together", so to speak. If you know of such a thing, please post > it. Anyway, let me ask a few specific questions: Well, there's a lot of stuff on the gopher site at chaos.bsu.edu... Some of it was a bit out of date last time I checked tho. > I read that fingering ghio(a)andrew.cmu.edu will produce a current > status of all "Cypherpunk" remailers. I did so and it was quite > informative. However, "remailer(a)soda.berkeley.edu" was omitted > from the list. Is there a reason for that? Yeah, it didn't answer the pings my software sent out because it doesn't support Request-Remailing-To. I changed it to Anon-Send-To, and it's in the list now. > Do any of the other CP remailers (other than soda.berkeley.edu) > offer a post-to-Usenet gateway? If so, do they use the same > syntax? Yes and no. I think vox.hacktic.nl can post to usenet with X-Anon-To: alt.whatever.usenet.group > Is there a way to disable the encrypted reply address at the > Berkeley remailer? It won't include the reply block if you send mail to remailer@soda from another remailer. (I haven't tried this using all the remailers tho, so I don't know if it will recognize them all as being non-replyable addresses.) Otherwise, you can chain from soda to my remailer and use the Cutmarks: feature to snip it. > I know that a few of the CP remailers have a certain adddress, > like "help@<address>" which will provide an info sheet by return > mail. Do any of the others support that? If so, would "help" be > used, or something else? Well, there's mg5n+remailers(a)andrew.cmu.edu ...

1 0

More SecureDrive News
by edgar＠spectrx.sbay.org 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- To: SecureDrive Users Since my last news bulletin I have been able to verify that the fix to the FPART utility, FPART13D.ZIP is now available on csn.org. Also file SECDR13E.ZIP is release 1.3d with the updated FPART files. The configureation of csn.org has changed somewhat: Anonymous ftp for csn.org has been moved to ftp.csn.net. There isn't any "pub" directory any more, so cd directly to mpj. get README or README.MPJ to the console and then cd to the directory name indicated. then cd to secdrv. The files are - -rw-r--r-- 1 5420 12461 May 26 20:51 fpart13d.zip - -rw-r--r-- 1 5420 115287 May 26 14:37 secdr13e.zip -----BEGIN PGP SIGNATURE----- Version: 2.3a iQCVAgUBLfLUTd4nNf3ah8DHAQEMDQP8DPvdAYZ7Ywfe8RjQscYCSThiKzEmFycs vJFwZuyoaqLAi6zGgUIDW+xl1IQMml1QKq2gWx+dd4FThCIFPfWrYB4+ya28Y45h YBLWdZbhlvhdlTwNEWEjs/IyDcAab4cxIR40N1b916LFRh9Rhr3XkXy8BmwQj6x1 27krqLextAU= =wrfL -----END PGP SIGNATURE----- -- edgar(a)spectrx.sbay.org (Edgar W. Swank) SPECTROX SYSTEMS +1.408.252.1005 Cupertino, Ca

1 0

Help A Novice Understand
by MWayne＠eworld.com 17 Dec '03

17 Dec '03

Greetings all-- I have been reading the list for a couple of months now and have come across the names of two people who seen to stir some very serious passions, David Sternlight, & L. Detweiller. Can someone tell me who they are and why C'punks hold them in such low esteem?? Thanks --Mitch

3 2

Ninth Amendment and privacy??
by rishab＠dxm.ernet.in 17 Dec '03

17 Dec '03

grendel(a)netaxs.com (Michael Handler): > control to anyone except married couples. The Supremes said that this was > an undue invasion of privacy, and that there *was* a Constitutional right > to privacy. They neglected to specify exactly where it was, though. ;) > However, they suggested that it was held somewhere under the Ninth Amendment. Amendment IX (1791) The enumeration in the Constitution, of certain rights, shall not be construed to deny or disparage others retained by the people. C'est tout. Sounds very clearly like a right to privacy to me ;-) ----------------------------------------------------------------------------- Rishab Aiyer Ghosh They came for the Jews, and I was silent because I was not a Jew; rishab(a)dxm.ernet.in They came for the Trade Unionists, and I did not protest, because I did not Voice/Fax/Data +91 11 6853410 belong to a trade union; Voicemail +91 11 3760335 They came for the Catholics, and I said nothing because I was not a Catholic; H 34C Saket And then they came for me. New Delhi There was no one left to say anything... INDIA ----Father Niemoeller

1 0

Re: Anonymous Remailers
by usura＠vox.hacktic.nl 17 Dec '03

17 Dec '03

ghio(a)kaiwan.com (Matthew Ghio) writes: >Anonymous says: > >> Do any of the other CP remailers (other than soda.berkeley.edu) >> offer a post-to-Usenet gateway? If so, do they use the same >> syntax? > >Yes and no. I think vox.hacktic.nl can post to usenet with >X-Anon-To: alt.whatever.usenet.group > That is correct, but it can only post to newsgroups that are carried by the hacktic newsserver [apr. 2800 newsgroups] >> I know that a few of the CP remailers have a certain adddress, >> like "help@<address>" which will provide an info sheet by return >> mail. Do any of the others support that? If so, would "help" be >> used, or something else? > >Well, there's mg5n+remailers(a)andrew.cmu.edu ... If you send a message to help(a)vox.hacktic.nl you will receive a help file, on the various remailers that vox.hacktic.nl supports [you can add your PGPpubKEY to my keyring, all mail to you will then be encypted, etc..] -- Exit! Stage Left. Alex de Joode <usura(a)vox.hacktic.nl>

1 0

Re: Black Eye for NSA, NIST, and Denning
by Hal 17 Dec '03

17 Dec '03

It was my understanding from what was posted here and on sci.crypt that Clipper chips were only going to be given to phone manufactureres who had an approved design. This would mean no pre-encryption of messages, and no hacks to defeat the LEAF block, would be allowed. It's not clear to me whether the same restrictions apply to the use of the Tessera plug-in card. It sounds, from what was posted here, like Blaze was able to feed sample LEAF's at his card until it accepted one. Is that correct? If so, apparently users of such cards have access to low-level functions which would allow this kind of trick to be used. Unless there is some way to get a supply of Clipper chips to allow you to make Clipper-compatible phones which still protect privacy, then all this theorizing is not too useful. I am inclined to agree with Deadbeat that if you want to give the impression that you are using Clipper on your phone calls (to blend in, to keep a low profile) but at the same time you want the key escrow not to work, then pre-encryption is a superior strategy to Matt Blaze's idea. Matt's trick only hides the session key if both sides are using it. And even in that case it appears to require particular key manage- ment techniques that may not be standard (one side provides the session key, or it is negotiated but both sides wait 30 minutes to talk). So it does seem that some pre-arrangement will be necessary in practice to allow Blaze's approach to successfully hide the session key. It's true that the Blaze technique hides the unit id, preventing traffic analysis. But that could be a negative. Playing paranoid, suppose that Clipper traffic is routinely decrypted with the family key. Then the fact that someone is using bogus LEAF's might be evident because the unit id would change with each call. Using pre-encryption makes you look like a good little boy until they bring out the escrowed keys. (Of course, they're not supposed to troll LEAF's, any more than they're supposed to break escrow, but I'm assuming that the former will be easier and more likely than the latter.) Hal

3 2