December 2003 - cypherpunks-legacy

HR 3627? Success or failure?
by Michael Handler 17 Dec '03

17 Dec '03

So? Did the good guys win this time, or were we just tilting at windmills again? -- Michael Brandt Handler <grendel(a)netaxs.com> Philadelphia, PA PGP v2.6 public key on request

1 0

Re: Cypherpunks' mail database does exist (fwd)
by osten＠hurricane.seas.ucla.edu 17 Dec '03

17 Dec '03

> > It does my heart good to hear someone use the term 'grok' -- I don't > hear many folks use that term very much anymore. ,-) > > - paul > > What does it mean?

5 4

Re: DES w/ variable S-boxes
by Matthew Ghio 17 Dec '03

17 Dec '03

Ben.Goren(a)asu.edu wrote: | However, as Bruce Schneier points out (p. 242), *variable* S-boxes make | | differential cryptanalysis impossilbe, as such an adaptive plaintext attack | | relies on knowledge of the composition of the S-boxes. If the boxes and | | their contents change with both keys used and plaintext--probably with the | | help of a strong RNG--then the only way such an attack could work would be | | by first figuring out what causes the changes in the S-boxes; in that case, | | the attack is probably already finished, by other means. Perhaps, even, the | | S-boxes could change with so many chunks of text--again, variable, of | | course. | You should take a look at Michael Paul Johnson's Diamond Encryption Algorithm. It uses variable S-boxes as you describe. Source code and documentation is availiable on ftp csn.org. /pub/mpj/...

1 0

You know you're getting old when...
by Bill Garland 17 Dec '03

17 Dec '03

When a cypherpunk posts this: >> It does my heart good to hear someone use the term 'grok' -- I don't >> hear many folks use that term very much anymore. ,-) >> >> - paul >What does it mean? Then I guess redundancy takes on a new meaning. Bill Garland, whose .sig is whose .sig is

1 0

C'punks mail database
by sglass＠netcom.com 17 Dec '03

17 Dec '03

Operating System: SunOS 4.1.3 Site: netcom X-Mailer: ELM [version 2.4 PL23] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Content-Length: 798 -----BEGIN PGP SIGNED MESSAGE----- C'punks, I've used lynx to connect to PMIP to see the c'punx list like: lynx http://pmip.maricopa.edu/crypt/cypherpunks I connect okay, but get the message that the requested URL isn't on the server if I want to see anything but the Parent Directory selection. Maybe this is an "under construction" effect? Sheldon - -- sheldon glass | Plauger's Dogma sglass(a)netcom.com | No program may leave its sanity #include <std.disclaimer> | at the mercy of its input. finger for PGP -----BEGIN PGP SIGNATURE----- Version: 2.3a iQBVAgUBLf+PA7GlKhzDiFoxAQHhyQH/bKgtyhhfWHKjXiJNpcY+9KSBnKooQsYf t3vlKY+UdaaWzducsorPp2tTTQ0Eum/OxHDnXejGC3phHNur1oN9Zw== =G/Th -----END PGP SIGNATURE-----

1 0

Encrypted databases
by Ben.Goren＠asu.edu 17 Dec '03

17 Dec '03

In _Applied Cryptography,_ Bruce Schneier describes a method of encrypting a database in such a way that it's easy to get individual entries but "impossible" to get the whole database. Basically, the first field is a hash of the individual's last name, the second is encrypted (symmentrical algorithm) w/ that name and contains the rest of the info. Are there any readily available implementations of this or anything equivalent? I've a use for such, but I'm not likely to have the time to start writing anything like that for a month or two. Thanks, b& -- Ben.Goren(a)asu.edu, Arizona State University School of Music net.proselytizing (write for info): Protect your privacy; oppose Clipper. Voice concern over proposed Internet pricing schemes. Stamp out spamming. Finger ben(a)tux.music.asu.edu for PGP 2.3a public key.

1 0

DES w/ variable S-boxes
by Ben.Goren＠asu.edu 17 Dec '03

17 Dec '03

Are there any implementations of DES-variants that use variable S-boxes? I've not seen any, and it seems to me that such an algorithm could be quite strong, considering the continuing strength of DES (i.e., only the rich or large gov'ts are likely to be able to break it today, and only by brute force). If not, is there likely to be enough demand that I should start coding? b& -- Ben.Goren(a)asu.edu, Arizona State University School of Music net.proselytizing (write for info): Protect your privacy; oppose Clipper. Voice concern over proposed Internet pricing schemes. Stamp out spamming. Finger ben(a)tux.music.asu.edu for PGP 2.3a public key.

2 1

Jus Curious
by nobody＠shell.portal.com 17 Dec '03

17 Dec '03

Pardon me-- So ViaCrypt sells PGP for $98.00 big ones huh, how much of that does Philip get??

1 0

Re: Cypherpunks' mail database does exist (fwd)
by Ben.Goren＠asu.edu 17 Dec '03

17 Dec '03

Actually, this has nothing to do with the mail database or RAH. Just wanted to let you know that your .sig made me smile. b& -- Ben.Goren(a)asu.edu, Arizona State University School of Music net.proselytizing (write for info): Protect your privacy; oppose Clipper. Voice concern over proposed Internet pricing schemes. Stamp out spamming. Finger ben(a)tux.music.asu.edu for PGP 2.3a public key.

1 0

Remailer reorder and delay
by ghio＠cmu.edu 17 Dec '03

17 Dec '03

I added a reorder and delay feature to my remailer <ghio(a)kaiwan.com> Here's how to use it. Add a header Latent-Time: with the time (in HH:MM:SS format). You must 24 hour time, no AM/PM accepted. The seconds are optional and may be omitted. Example: > To: ghio(a)kaiwan.com > Subject: Anonymous Mail > From: punk(a)crypto.com > > :: > Anon-To: cypherpunks(a)toad.com > Latent-Time: 00:00:00 > > This message will be sent to cypherpunks at midnite pacific daylight time. You can also have it delayed a certain amount of time. To do this, put a plus before the time. Example: > To: ghio(a)kaiwan.com > Subject: Anonymous Mail > From: me(a)my.domain.com > > :: > Anon-To: recipient@site > Latent-Time: +01:30 > > This message will be delivered one hour and thirty minutes after it is > received by ghio(a)kaiwan.com. Random reordering is possible by adding r to the time. > To: ghio(a)kaiwan.com > Subject: Hello tentacle > From: detweiler(a)tmp.com > > :: > Anon-To: medusa(a)pseudospoof.com > Latent-Time: 18:00:00r > > This message will be delivered at random, but no later than 6 PM pacific > standard time. > To: ghio(a)kaiwan.com > Subject: Exterminate PGP > From: sternlight(a)netcom.com > > :: > Anon-To: alt.security.pgp(a)nic.funet.fi > Latent-Time: +04:00:00r > > This meaningless drivel will be delivered at random, sometime within the > next four hours. The longest delay time possible is 24 hours. Don't expect on the minute delivery - there are many things beyond my control which can delay mail. "Anon-To" and "Latent-Time" do not need to go in the body of the message; they may be placed in the headers if your mailer supports it. Let me know if you have any questions or problems.

1 0