December 2003 - cypherpunks-legacy

Re: Keyserver service outage
by Graham Toal 17 Dec '03

17 Dec '03

: Not true. The problem is copyright, which is honored by Berne Convention : signers even if they don't have software patents or patent-after-publishing : rules like the US. This includes Europe, the U.S., and many other places. : ViaCrypt 2.4 is copyrighted by ViaCrypt, and RSAREF is copyrighted by RSA, : so you won't be able to use 2.5 source outside the US either; not sure about : binaries. : There's an easy cure for this, though - if some non-North-American wants to : write an RSAREF-compatible software package in C and distribute it as freeware, : then it can be used in non-US versions of things that require RSAREF. You misunderstand what the RSAREF stuff does - it isn't an alternative encryption - it's being used to replace the extended precision etc stuff in pgp to make a 100% compatible version. So the current pgp *is* already 100% compatible, as long as its version number is >= 2.4 (which by an amazing coincidence mines happens to be since I've had to edit a couple of mission-critical comments since I got 2.3a ;-) ) Even if 2.5 checks version numbers or *any* internal details in the pgp packets, as long as it is constrained by being compatible with ViaCrypt 2.4, we can always *guarantee* to be able to make a compatible free pgp based in 2.3a. And since the RSA and IDEA patents aren't valid in Europe, this is 100% kosher. You guys use MIT-PGP and we'll use free pgp 2.5 G

3 2

Exactly.
by paul＠hawksbill.sprintmrn.com 17 Dec '03

17 Dec '03

Chael, I've noticed that anon messages originating from nowhere recently do not have a "subject" or "organization" in the header. (I tried this by sending a message to myself and it doesn'y use this format anymore.) Has this been changed to something else, such as "x-subject"? - paul

2 2

Text of MIT PGP Announcement
by Hal 17 Dec '03

17 Dec '03

> MIT has just officially announced the upcoming availability of PGP 2.5. > The announcement was just made at Networld+Interop '94 in Las Vegas by > Jeff Schiller, MIT's Network Manager. The text of the actual > announcement is available via WWW at http://www.media.org/. Look under > "MIT PGP Security Announcement." Here is what I found there: [IMAGE] MIT PGP ANNOUNCEMENT _________________________________________________________________ These pages constantly under construction _________________________________________________________________ [IMAGE] Jeffrey Schiller _________________________________________________________________ The Massachusetts Institute of Technology announces that it will shortly distribute PGP version 2.5, incorporating the RSAREF 2.0 cryptographic toolkit under license from RSA Data Security, Inc., dated March 16, 1994. In accordance with the terms and limitations of the RSAREF 2.0 license of March 16, 1994, this version of PGP may be used for non-commercial purposes only. PGP 2.5 strictly conforms to the conditions of the RSAREF 2.0 license of March 16, 1994. As permitted under its RSAREF license, MIT's distribution of PGP 2.5 includes an accompanying distribution of the March 16, 1994 release of RSAREF 2.0. Users of PGP 2.5 are directed to consult the RSAREF 2.0 license included with the distribution to understand their obligations under that license. This distribution of PGP 2.5, available in source code form, will be available only to users within the United States of America. Use of PGP 2.5 (and the included RSAREF 2.0) may be subject to export control. Questions concerning possible export restrictions on PGP 2.5 (and RSAREF 2.0) should be directed to the U.S. State Department's Office of Defense Trade Controls. [IMAGE] Return to Cyberstation Home mail commentsto webmaster(a)media.org

1 0

PGP 2.3a keys
by SINCLAIR DOUGLAS N 17 Dec '03

17 Dec '03

I know I could just read the source to find this, but... Is the version number on a PGP public key inside the security wrapper or not? If not, it should be possible to write a program that would take a 2.3a key and spit out an identical 2.5 key. The keyserver database could be updated in this manner, and everybody would be happy.

1 0

Re: Keyserver service outRAGE
by lefty＠apple.com 17 Dec '03

17 Dec '03

Some nobody writes: > >So that's it, isn't it? Clipperized PGP. The government has pressured >RSA into allowing a new version of PGP, in an attempt to displace the >use of freeware PGP, with the hope that they will then be able to >control it more. This stinks. Yep, you got it. Dig a hole, crawl inside, and pull it in after you. As soon as you can manage it. Personally, _I_ think the government's out to destroy this list by recruiting a bunch of low-IQ paranoid schizophrenics, denying them their medication, sitting 'em at terminals and giving 'em the Cypherpunks address and the address of an anonymous remailer. The half-wit quotient around here is definitely on the rise. -- Lefty (lefty(a)apple.com) C:.M:.C:., D:.O:.D:.

2 1

Re: Valid MacPGP??
by jamiel＠sybase.com 17 Dec '03

17 Dec '03

Sorry to everyone on the list about that last message from me. Teach me to watch the headers closer... -j

1 0

Re: Text of MIT PGP Announcement
by markh＠wimsey.bc.ca 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Subject: Re: Text of MIT PGP Announcement > PGP 2.5 strictly conforms to the conditions of the RSAREF 2.0 license > of March 16, 1994. Hmm... This version of the RSAREF 2.0 licence agreement did not have the definition of published interface that was included in later versions. (e.g. April 15, 1994) In particular, if you interpret "published interface" to be "all the routines one can call from an unmodified version of RSAREF 2.0", you would probably be able to build a version of PGP based on these. Here are some extracts from the March 16 1994 licence agreement > d. Prior permission from RSA in writing is required for any > modifications that access the Program through ways other > than the published Program interface or for modifications > to the Program interface. RSA will grant all reasonable > requests for permission to make such modifications. >... > 7. RSAREF is a non-commercial publication of cryptographic > techniques. My bet is that this involves some legal funny stuff with this version of the licence agreement. Another possibility is that PGP 2.5 will use triple DES. All just speculation. I don't have any inside information. Mark -----BEGIN PGP SIGNATURE----- Version: 2.4 iQBVAgUBLcljyWrJdmD9QWqxAQG4ywIAnXtDP6aKPP5VGtPuKxOiSWiKryP7qeHJ 7jfMkXC9QQJttzujStPXNl8UlDFf7CErfeNHleo+CCtOCOpqiz76SA== =aHYn -----END PGP SIGNATURE----- -- Mark Henderson markh(a)wimsey.bc.ca - RIPEM MD5: F1F5F0C3984CBEAF3889ADAFA2437433 ViaCrypt PGP key fingerprint: 21 F6 AF 2B 6A 8A 0B E1 A1 2A 2A 06 4A D5 92 46 low security key fingerprint: EC E7 C3 A9 2C 30 25 C6 F9 E1 25 F3 F5 AF 92 E3 cryptography archive maintainer -- anon ftp to ftp.wimsey.bc.ca:/pub/crypto

1 0

No Subject
by anonymous＠extropia.wimsey.com 17 Dec '03

17 Dec '03

Ah, the problems of anonymity. In order to prevent impersonation, I'm passing my public key to the list. Future messages from me will be signed with this key. -Lady Ada -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.3a mQCNAi2rMQAAAAEEALehNDQG2UpPhFLspypt6dPLFjSB1wnwFW9p8cEftZ+ga/ZU 06mywff21ODSYily2NMwOpw+mxSkxiOTJDdjJ3kenRW4qwpvmBGs96AK+0yv2DDh R3ff9cpOlIu3tUcJhmdTcSj+MXlkYwJwhJoA9o4uCFXahN5W1KXNQdJx1hMZAAUR tBZMYWR5IEFkYSA8bm93aGVyZUBhbGw+ =K9ps -----END PGP PUBLIC KEY BLOCK-----

1 0

Hell's Bells
by lile＠netcom.com 17 Dec '03

17 Dec '03

Hi, I am listening to the Hell's BElls broadcast on the MBone that's coming from Interop. I just heard that AT&T wants to control conduit *and* content! It's on the session: Cyberstation:audio feed -lile ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Lile Elam | "Remember... No matter where you go, there you are." lile(a)netcom.com | Un*x Admin / Artist | Buckaroo Banzai ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

2 1

Re: Hell's Bells...
by jim＠Tadpole.COM 17 Dec '03

17 Dec '03

I think if you look a bit more closely, the host attached to the 'name' is at Arlington National Labs. Jim

1 0