December 2003 - cypherpunks-legacy

Re: PGP .DLL
by Jonathan Cooper 17 Dec '03

17 Dec '03

> I'm way behind on messages currently, so maybe somebody mentioned > this... but have you looked at RSAREF? I know the license is > restrictive, but take a look at it architecturally. That is basically the way that I'd envisioned it functioning. Details have to be nailed down... anyone who is interested in helping, please mail me so we can take this chatter off the main cypherpunks list. -jon ( --------[ Jonathan D. Cooper ]--------[ entropy(a)intnet.net ]-------- ) ( PGP 2.6.2 keyprint: 31 50 8F 82 B9 79 ED C4 5B 12 A0 35 E0 9B C0 01 )

1 0

test file
by Gary Jeffers 17 Dec '03

17 Dec '03

This is only a test file.

1 0

I-D ACTION:draft-ietf-pppext-encryption-00.txt (fwd)
by Adam Shostack 17 Dec '03

17 Dec '03

A while ago, someone asked bout encryptde slip/ppp. Three news drafts are also available on security, authentication, and encapsulation for IPv6. Same place as the other drafts. draft-atkinson-ipng-esp-00.txt draft-atkinson-ipng-sec-00.txt draft-atkinson-ipng-auth-00.txt | From ietf-announce-request(a)IETF.CNRI.Reston.VA.US Fri Nov 18 14:07:30 1994 | Mime-Version: 1.0 | Content-Type: Multipart/Mixed; Boundary="NextPart" | To: IETF-Announce:; | cc: ietf-ppp(a)merit.edu | Sender: ietf-announce-request(a)IETF.CNRI.Reston.VA.US | From: Internet-Drafts(a)CNRI.Reston.VA.US | Reply-to: Internet-Drafts(a)CNRI.Reston.VA.US | Subject: I-D ACTION:draft-ietf-pppext-encryption-00.txt | Date: Fri, 18 Nov 94 11:43:13 -0500 | X-Orig-Sender: cclark(a)CNRI.Reston.VA.US | Message-ID: <9411181143.aa04644(a)IETF.CNRI.Reston.VA.US> | | --NextPart | | A New Internet-Draft is available from the on-line Internet-Drafts | directories. This draft is a work item of the Point-to-Point Protocol | Extensions Working Group of the IETF. | | Title : The PPP Encryption Control Protocol (ECP) | Author(s) : G. Meyer | Filename : draft-ietf-pppext-encryption-00.txt | Pages : 8 | Date : 11/17/1994 | | The Point-to-Point Protocol (PPP) [1] provides a standard method for | transporting multi-protocol datagrams over point-to-point links. | PPP also defines an extensible Link Control Protocol. | | This document defines a method for negotiating data encryption | over PPP links. | | Internet-Drafts are available by anonymous FTP. Login with the username | "anonymous" and a password of your e-mail address. After logging in, | type "cd internet-drafts" and then | "get draft-ietf-pppext-encryption-00.txt". | A URL for the Internet-Draft is: | ftp://ds.internic.net/internet-drafts/draft-ietf-pppext-encryption-00.txt | | Internet-Drafts directories are located at: | | o Africa | Address: ftp.is.co.za (196.4.160.2) | | o Europe | Address: nic.nordu.net (192.36.148.17) | | o Pacific Rim | Address: munnari.oz.au (128.250.1.21) | | o US East Coast | Address: ds.internic.net (198.49.45.10) | | o US West Coast | Address: ftp.isi.edu (128.9.0.32) | | Internet-Drafts are also available by mail. | | Send a message to: mailserv(a)ds.internic.net. In the body type: | "FILE /internet-drafts/draft-ietf-pppext-encryption-00.txt". | | NOTE: The mail server at ds.internic.net can return the document in | MIME-encoded form by using the "mpack" utility. To use this | feature, insert the command "ENCODING mime" before the "FILE" | command. To decode the response(s), you will need "munpack" or | a MIME-compliant mail reader. Different MIME-compliant mail readers | exhibit different behavior, especially when dealing with | "multipart" MIME messages (i.e., documents which have been split | up into multiple messages), so check your local documentation on | how to manipulate these messages. | | For questions, please mail to Internet-Drafts(a)cnri.reston.va.us. | | | Below is the data which will enable a MIME compliant mail reader | implementation to automatically retrieve the ASCII version | of the Internet-Draft. | | --NextPart | Content-Type: Multipart/Alternative; Boundary="OtherAccess" | | --OtherAccess | Content-Type: Message/External-body; | access-type="mail-server"; | server="mailserv(a)ds.internic.net" | | Content-Type: text/plain | Content-ID: <19941117165933.I-D(a)CNRI.Reston.VA.US> | | ENCODING mime | FILE /internet-drafts/draft-ietf-pppext-encryption-00.txt | | --OtherAccess | Content-Type: Message/External-body; | name="draft-ietf-pppext-encryption-00.txt"; | site="ds.internic.net"; | access-type="anon-ftp"; | directory="internet-drafts" | | Content-Type: text/plain | Content-ID: <19941117165933.I-D(a)CNRI.Reston.VA.US> | | --OtherAccess-- | | --NextPart-- |

2 1

Re: Crypto Chip in Eastern Europe
by lcottrell＠popmail.ucsd.edu 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- >Does anyone know any more details on the crypto chip listed in the HTML >http://jep.pld.ttu.ee/? It seems that this is a hardware PGP (uses RSA to >encrypt IDEA key) project. They mention having prototype available RSN, as >in December... or is this just some very interesting vapor-ware? > > Adam Philipp > >-- >PGP Key available on the keyservers. Encrypted E-mail welcome. > >Sub rosa: Confidential, secret, not for publication. > -Black's Law Dictionary I have been in contact with these people for some time. They are a bit behind schedule, but seem to be a real product. I am planning on using their chip as the basis of a secure phone. -----BEGIN PGP SIGNATURE----- Version: 2.6 iQCVAwUBLs/RilVkk3dax7hlAQFE2AP+LND1WzVwE4VQq8AM1C0bxYvcRXJf+p0s VYmQouUW9e0JeSNPuAU46PJTuGpYFHZYEp9oyTe0ry+8oBcRwtj1RO7nYYfp02kO CABEInJ+rryJB5M2VMynCbAv5nYRg1wgIkbjITYqCpyaVbM+h/dTuEgJIlkewYc8 gk9kK4qWVls= =pKPa -----END PGP SIGNATURE----- -------------------------------------------------- Lance Cottrell who does not speak for CASS/UCSD loki(a)nately.ucsd.edu PGP 2.6 key available by finger or server. Encrypted mail welcome. Home page http://nately.ucsd.edu/~loki/ Home of "chain" the remailer chaining script. For anon remailer info, mail remailer(a)nately.ucsd.edu Subject: remailer-help "Love is a snowmobile racing across the tundra. Suddenly it flips over, pinning you underneath. At night the ice weasels come." --Nietzsche

1 0

Re: Islands in the Net
by jgrubs＠voxbox.norden1.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- tcmay(a)netcom.com (Timothy C. May) writes: > bshantz(a)spry.com wrote: > > (quoting James Donald) > > > >So Tim, in this matter you will very likely wind up being > > >assimilated by the forces of evil located at Redmond. > > > > I disagree, Tim. Stand firm and you will not be assimilated. "I am Bill > > Gates of MicroBorg, resistance is futile. You too will be assimilated just > > Intuit was..." It's not gonna happen. > > For a fraction of the $1.5 billion or so Microsoft paid for Intuit, I > will _gladly_ be assimilated!! "I am Tim, of Borg, VP of the Crypto > Anarchy Product Group." > > (I can't believe a mere checkbook balancing program just got sold for > more than a billion dollars! There are interesting, list-relevant > implications here (*).) Quicken is not Intuit's only product. They also make commercial accounting, payroll, and inventory packages for both small and large businesses. Also, less than a year ago, they acquired the company that makes the popular TurboTax series, both personal and professional. This company is also big into electronic returns. -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBLs/OFd74r4kaz3mVAQE6+AP9H6FITUprwN1ZKMPw2GPTE/UIAx18/TQ2 +CsUz88B5qp/ojJBEliVfcVuUfwaAUyGa8QtMlcVdGN7uJtTEnM+njA6ityQKzNT kSlH1PMf5GF8befxSUZ6OX0i5KsZL3gMzv+8ayuKl7dvHNCgTWd9wKRDnj5Y+RNL v95AhR21M/M= =0mi9 -----END PGP SIGNATURE----- ... "The greatest dangers to liberty lurk in the insidious encroachment of men of zeal, well meaning but without understanding." - Justice Louis Brandeis -- jgrubs(a)voxbox.norden1.com (James C. Grubs, W8GRT) Voxbox Enterprises, 6817 Maplewood Ave., Sylvania, Ohio 43560-1956 Tel.: 419/882-2697

1 0

Re: usenet-to-mail
by tim werner 17 Dec '03

17 Dec '03

>Date: Sat, 19 Nov 1994 18:35:52 -0800 >From: shamrock(a)netcom.com (Lucky Green) >> I'm afraid of losing >>my full feed along with my account when I finish my masters. I don't >>want to go for a PhD just so I can keep browsing the alt groups. > > Better >yet, find a private service provider that will let you use their >newsserver. How do you inted to access the newsserver without an account, >anyway? Well, like I said, it's the alt groups that I'm worried about. I have an excellent net connection at work, being employed by a subsidiary of Rockwell, but our news feed is politically correct. I have access to two accounts with full feeds, but one is not a shell account, and the other one is the school account which goes away in a another year (depending on how long I can drag out the degree), unless I start taking post-grad classes. So, my hope is that I can use gnus to talk to some other newsserver than the censored local one. I will try some of the places that were posted. As far as the private newsserver provider goes, I'd go for it (when the time comes), if I could buy just access to Usenet for a discount. For that matter, maybe a couple of years from now the Republicans will have figured out a way to shut down the alt groups. ;-) I'm better off if I keep taking classes, anyway. Don't know about the rest of the folks on this list, but I don't feel like what I know about computers today will carry me through retirement. tw

1 0

REMAILER PROPOSAL
by Sandy Sandfort 17 Dec '03

17 Dec '03

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ SANDY SANDFORT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C'punks, I put together the following proposal to demonstrate a quick and dirty way to implement a pay-to-play remailer system. I don't care much about the details. Change any of them you feel like. My main concern is the basic pre-paid postage system concept. If those of you who are--or plan to be--remailer operators like it, it's yours. No charge. If you don't like it, well, I guess it's back to the old drawing board. S a n d y P.S. I love the name Spoon-E; everyone else will probably hate it. Consider it one of those details that you should feel free to change. * * * THE ELECTRONIC MAIL FORWARDERS GUILD A Proposal In this Proposal, I briefly discuss the elements a mail forwarders guild might include. My main purpose, however, is to outline a low-tech, anonymous postage system that such a guild could deploy today. My proposed system is intended to serve only as a bridge until a more sophisticated, digital postage/money system is available on the Net. MISSION STATEMENT--The purpose of the Electronic Mail Forwarders Guild (EMFG) would be to: 1. Encourage the proliferation and use of privacy oriented electronic mail forwarding sites, 2. Encourage the adoption of privacy oriented electronic mail forwarding standards and protocols, 3. Create and deploy new products and services on existing electronic mail forwarding sites, 4. To provide mutual aid and assistance with regard to technical, legal and other problems, 5. Establish and maintain an anonymous electronic postage system acceptable by all EMFG members. ANONYMOUS ELECTRONIC POSTAGE SYSTEM POSTAGE RATES--The first questions the EMFG will have to decide concern how much the members wished to charge for their services. Such questions would include: Should each forwarding hop cost the same, or should first and/or last hops receive a premium? Should message lengths be limited? Should longer messages cost more than short ones? Should each kilobyte cost the same, or should each successive kilobytes cost less--or more? Will the EMFG support any free forwarding? What net postage-per-service should EMFG member receive? POSTAGE "STAMP" NAME--The basic unit of postage should be given a "brand name." Using a name instead of an amount, permits bulk discounts and allows price adjustments as circumstances warrant. I favor, "Spooner Electronic Postage Unit" or "Spoon-E" for short (pronounced, "spoonie"). Thus, no matter what a Spoon-E costs, it would always take one Spoon-E to go through one forwarder or whatever. SPOON-E STRUCTURE--Spoon-Es are random 12-digit numbers generated by the clients. POSTAGE ISSUER--The EMFG will need someone to issue Spoon-Es. The EMFG could elect any of the following options: Rotate the uncompensated job among its members, Have member bid for the job in exchange for fixed fee or a percentage cut of each Spoon-E issued, Hire a third-party to issue Spoon-Es in exchange for a fixed fee or a cut. PAYMENT AND ISSUANCE MECHANISM--There are various levels of anonymity available to clients. The choice will depend upon the client's degree of paranoia. They all, however, are processed following these steps: 1. Clients randomly generate a series of 12-digit numbers. 2. These random numbers, plus an extra random 12-digit ID number, are encrypted using the Issuer's public key. 3. This encrypted message and payment are sent to the Issuer. 4. After payment has been accepted, the Issuer puts the clients' random numbers into an "Outstanding Spoon-E" database, and lists the corresponding ID numbers on a "Just Issued Spoon-Es" bulletin board. 5. Clients may access the bulletin board to check when their Spoon-Es have been validated for use. The level of anonymity is determined by the clients' method of payment and transmission. Payment via money order is the most anonymous; personal check, the least. (Cash is even more anonymous, but with its own obvious risk.) The least anonymous method of transmitting the client's 12-digit numbers is via direct e-mail. The most anonymous is via an s-mailed floppy. E-mail through a forwarder is somewhere in between. USE OF POSTAGE--The following steps would be performed in order to forward messages through a series of EMFG sites: 1. Clients consult the Issuer bulletin board to verify that their Spoon-Es are valid. 2. Clients write their messages and include the appropriate number of Spoon-Es within each nested and encrypted "envelope" for each forwarding hop they intend to use. 3. Upon receipt, each forwarder strips out the Spoon-Es for that hop. The message is added to a mix file of other messages until a threshold number is reached. 4. When the threshold is reached, the forwarder contacts the Issuer and verifies the validity of the Spoon-Es. Valid Spoon-Es are removed from the "Outstanding Spoon-E" database and the corresponding messages are forwarded out of mix file in random order. The forwarder's account is credited with the appropriate payment. Messages with invalid or missing Spoon-Es go to the bit or into the free service channel if there is one. 5. Step "4" is repeated through each forwarder until the message is delivered to its ultimate destination. The various mix files help defeat traffic analysis and permit the Spoon-Es to be verified before the forwarding service is performed. CONCLUSIONS The existence of a for-profit (or at least self-funding), privacy enhanced, electronic mail forwarding system does not need to await the development of on-line digital money schemes. It can be deployed today, using readily available, low-tech methods. Such a system benefits from economies of scale, and thus argues in favor of the creation of a group of mail forwarders such as the EMFG. Sandy Sandfort 20 November 1994 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

1 0

remailer security, sendmail
by David A. Wagner 17 Dec '03

17 Dec '03

I just read an interesting post on alt.hackers. Apparently you can figure out who's sending mail to who by repeatedly running the command /usr/lib/sendmail -bp. I just tested this out and it *seems* to work, as does running /usr/ucb/mailq repeatedly. How's that for an obscure feature? Does anyone run a remailer on a multi-user machine where sendmail is used? Is this sendmail feature a problem? If so, how would one fix it? (write a wrapper for sendmail? but that requires root access *sigh*) Am I missing something? ------------------------------------------------------------------------------- David Wagner dawagner(a)princeton.edu

2 1

Re: usenet-to-mail
by merriman＠metronet.com 17 Dec '03

17 Dec '03

> >I'm better off if I keep taking classes, anyway. Don't know about the >rest of the folks on this list, but I don't feel like what I know about >computers today will carry me through retirement. > Hmmmmph. If you're gonna stay in school until you know enough about computers to carry you through retirement, you're gonna be there a *long* time. Best you can hope for is to be current when you get out, and keep up with it (or at least, not lose _too_ much ground each year as things evolve_. Dave Merriman - who remembers stuff like "64K? *64K*?! I don't know what I'd _do_ with 64K!" and when only the filthy rich had hard drives. - - - - - - - - - - - - - - - - - - - - - - - - - - Finger merriman(a)metronet.com for PGP public key and fingerprint. PGP encrypted Email welcome and encouraged. War is Peace. Freedom is Slavery. Ignorance is Strength. No?

1 0

Back in the mists of time.....
by merriman＠metronet.com 17 Dec '03

17 Dec '03

Having turned 40 earlier this month (jeez - if I'd known I was gonna live this long, I'd have taken care of myself :-), I'm apparently feeling the effects of Reagan's Disease. Could someone kindly refresh my memory as to when the Gummit decided it was okay to: * seize alleged drug money and not have to give it back unless the person could prove it was 'honest' money; * make banks and others tell them when someone moved more than $10,000; * take away our gold & silver coins for nickeled copper slugs (Kennedy-era, I believe; I seem to recall the tv coverage); * take us off the gold standard (Nixon?); Email preferred, so I don't waste any (more) bandwidth..... Dave Merriman - - - - - - - - - - - - - - - - - - - - - - - - - - Finger merriman(a)metronet.com for PGP public key and fingerprint. PGP encrypted Email welcome and encouraged. War is Peace. Freedom is Slavery. Ignorance is Strength. No?

1 0