December 2003 - cypherpunks-legacy

Detweiler Files on FTP
by Robert A. Hayden 17 Dec '03

17 Dec '03

Following the announcement last week that I'd be willing to hold the "detweiler files" (sounds like a FOX television show), they are now available on FTP: vorlon.mankato.msus.edu: /home/ftp/pub/cypherpunks/detweiler_files/detweil.zip Enjoy. ____ Robert A. Hayden <=> hayden(a)vorlon.mankato.msus.edu \ /__ -=-=-=-=- <=> -=-=-=-=- \/ / Finger for Geek Code Info <=> I do not necessarily speak for the \/ Finger for PGP Public Key <=> City of Mankato or anyone else, dammit -=-=-=-=-=-=-=- (GEEK CODE 2.0) GJ/CM d- h-- s-:++>s-:+ g+ p? au+ a- w++ v* C++(++++) UL++++$ P+>++ L++$ 3- N+++ K+++ W M+ V-- -po+(---)>$ Y++ t+ 5++ j r+++$ G- v+ b D+ b--- e+>++(*) u** H* f r-->+++ !n y++**

1 0

The Detweiler Files on FTP
by rishab＠dxm.ernet.in 17 Dec '03

17 Dec '03

Thanks to Joichi Ito and Robert Hayden, The Detweiler Files should now be available by ftp at: eccosys.com/pub/incoming vorlon.mankato.msus.edu/pub/cypherpunks It includes an earlier CRaP post from Detweiler: > From: vikram!an12070(a)anon.penet.fi (Cryptoanarchist Assassination Squad ) > X-Anonymously-To: cypherpunks(a)toad.com > Date: Tue, 14 Dec 1993 15:56:58 UTC > Subject: Surrender or Die > There has been some extremely strong speculation as to our > identity lately. It's time for us to identify ourselves. We are > Operation CRaP, the Cryptoanarchist Repression and Poison, and > we have infiltrated your own conspiracy to the most sensitive > levels. L.Detweiler retypes most notes to prevent style analysis > and inference detection that would lead to our identities. > We have infiltrated the *interesting* mailing list, have a > 'bug' planted at crl.com, and a brilliant spy in one of your > ... ----------------------------------------------------------------------------- Rishab Aiyer Ghosh "Clean the air! clean the sky! wash the wind! rishab(a)dxm.ernet.in take stone from stone and wash them..." Voice/Fax/Data +91 11 6853410 Voicemail +91 11 3760335 H 34C Saket, New Delhi 110017, INDIA

1 0

Re: ID card from hell
by rishab＠dxm.ernet.in 17 Dec '03

17 Dec '03

Duncan says: > Opposed to [German] model is the Anglo Saxon model of individual rights. > (X.25 vs TCP/IP to you networking types.) Ha! I like that. Also X.400 vs RFC-822. ----------------------------------------------------------------------------- Rishab Aiyer Ghosh "Clean the air! clean the sky! wash the wind! rishab(a)dxm.ernet.in take stone from stone and wash them..." Voice/Fax/Data +91 11 6853410 Voicemail +91 11 3760335 H 34C Saket, New Delhi 110017, INDIA

1 0

Re: The Detweiler Files on FTP
by rah＠shipwright.com 17 Dec '03

17 Dec '03

a detweiler testicle says: >> L.Detweiler retypes most notes to prevent style analysis >> and inference detection that would lead to our identities. sheesh. You folks weren't kidding about the "net.loon" stuff... His self-reference in the third person says a lot more than he lets on, I bet... But he's right, though, he *is* a conspiracy. ;-)^h^h^h (oops, smiley detester present...). On the other hand, how old is this guy? 12? I mean what do we really know about him? Do these archives have anything on him besides his spam and the resultant fusilades? Has anyone actually met him? Not that I'd like to, I guess... I'm curious about this guy for no legitmate reason. He just seems bright, and he must have done some crypto once. He is listed as a contributor on my copy MacPGP, for instance, and before he started spamming it, his posts to imp-interest could make sense on occasion. If this discussion is not applicable to crypto (I can't imagine how it really could be) send me e-mail, please. cheers, Bob Hettinga ----------------- Robert Hettinga (rah(a)shipwright.com) "There is no difference between someone Shipwright Development Corporation who eats too little and sees Heaven and 44 Farquhar Street someone who drinks too much and sees Boston, MA 02331 USA snakes." -- Bertrand Russell (617) 323-7923

1 0

Card Playing Protocol?
by kentborg＠world.std.com 17 Dec '03

17 Dec '03

Something that frustrates me in fighting about crypto issues is the amazing quantities of ignorance available on the subject. I wish people knew more. Yes, if they understood how a meet-in-the-middle attack works that would be nice, but I would settle with something far simpler: It would be really nice if people had practical experiance *using* cryptography in a friendly, innocent, and non-threatening way. Familiarity breeds comfort. How to do this? What about a multi-player game which requires cryptography to implement the play? One possiblity would be a cryptographic implementation of playing cards. This has very obvious and easy to understand graphical implementations. So simple a small child can easily understand the product--which means possibly even the ITAR police would get the concept. This "digital deck of cards" would be flexible enough to allow the playing of most card games with the addition of the same manual book-keeping as is needed with physical cards. For assistance in keeping score, bidding--or God forbid--betting, there would be a journaled, low-bandwidth communication channel which would be--very important here--in the clear. The digital cards would be cryptographically strong. Players would appreciate that cheating could be accomplished by cracking the codes, and yet no one seems to be able to cheat. (Note, cheating through collusion in a game like bridge would still be possible.) The cards would not be suitable for distributing porn, bomb making secrets, or drugs, yet would drive the ITAR police *crazy*. What if a deck of the these cards were to be illegally exported from the country?!?!? Try telling all those Regular Citizens who are getting on the net and discover they can play cards that the cards are dangerous munitions. What a wonderful way to make the ITAR police look completely silly. Oh, and to be sure they *do* get upset, make the cards just open enough that they *do* constitute something more general-purpose. (Make calls to PGP, or let others make calls to the crypto functions in the digital cards--something like that.) Comments? Suggestions for a game other than cards that would be better or more suitable? Is anyone already working on a Card Playing Protocol? -kb, the Kent who tries to cause trouble -- Kent Borg +1 (617) 776-6899 kentborg(a)world.std.com kentborg(a)aol.com Proud to claim 32:00 hours of TV viewing so far in 1994!

5 4

Re: Key length security (calculations!)
by Hal 17 Dec '03

17 Dec '03

solman(a)mit.edu writes (quoting someone else initially): >> You mention Shamir, etc. However I would point out that even if any of the >> original RSA mathematicians found a better factoring algorithm, they'd be >more >> than likely to keep it under lock and key. The obvious reason is that their >> money supply depends on such an algorithm being suppressed. >What about Shamir's triple pass key exchange protocol (explained briefly >below). Its the perfect key exchange algorithm. It obsoletes Public key >systems entirely as long as you only need to exchange keys and not >authenticate. I'd say that is pretty decent evidence that he does still >do things to help the field when it might hurt RSADSI. (although I wouldn't >say the same thing about all of them) I suspect this protocol is covered by the Diffie-Hellman patent, which is quite broad, covering many sorts of key exchanges. Diffie-Hellman is now owned by PKP, the sister company to RSA. If so, Shamir has not undercut his own financial interests by this work. (Also, this does not obsolete PK since it requires several exchanges before communication can occur, making it inappropriate for high-latency communications, such as for most email.) Hal

2 2

Probabilistic encryption works!
by rishab＠dxm.ernet.in 17 Dec '03

17 Dec '03

solman(a)MIT.EDU: > Here is how it works: > > First, choose two large prime numbers that are one less than a multiple of > [...] > plaintext and append the final seed and you get your cyphertext. Congratulations! You've just described the Blum-GoldWasser Efficient Probabilistic Public-Key Encryption Scheme, first outlined in Crypto 84. Nice description in Schneier, who says it's much faster and more secure than any other PK scheme, but can obviously only be used one-way as it's vulnerable to a chosen plaintext attack. It would be possible to cook up a protocol to allow for signatures as well, but it'd be tricky. > algorithms for that anyway. What this provides is a public key system based > on the hardness of factoring that is faster than RSA and apparently not > covered by the RSA patent. (although I've asked for opinions on this last > point in another post) But we don't know whether it's covered by any Blum-Goldwasser patent... or the PKP ones. ----------------------------------------------------------------------------- Rishab Aiyer Ghosh "Clean the air! clean the sky! wash the wind! rishab(a)dxm.ernet.in take stone from stone and wash them..." Voice/Fax/Data +91 11 6853410 Voicemail +91 11 3760335 H 34C Saket, New Delhi 110017, INDIA

2 1

Re: Card Playing Protocol?
by kentborg＠world.std.com 17 Dec '03

17 Dec '03

hughes(a)ah.com wrote some interesting stuff: >Duplicate games won't work Damn! People are paying attention. It was an off-hand remark. Any bells and whistles along those lines are certainly banned from any early version. >There is a non-crypto issue of how one finds playing partners without >a central server. My mind wandered to that very point this very morning. The simplist way to find players is the same we currently find email addresses: the hard way. Type in the addresses of the other players. (Assuming the software is already running on those nodes, those players would not have to retype the other addresses, accepting the invitation to play would be more like a single "click".) I think anything more elaborate along these lines is a candidate for banning from 1.0. (One problem is that the "I'm looking for a game."-problem is at least as big and interesting as building a deck of cards.) >I would strongly suggest the separation of the communications, user >presentation, and decision parts of the client software. And that is one of the wonderful sort of engineering problems I love: keeping the different parts clear of each other's private parts yet still considerate of their desires and needs. >client software My instinct is for a peer-to-peer design. Yes, they will serve each other cards, etc., but I would like to avoid the user confusion of having two different sorts of software needed. (At a comms protocol level there might always be a single server per game--I don't know yet--but I would like to hide that sort of stuff from users.) -kb, the Kent who will be driving to Pasadena early in the morning, but not to watch soccer. -- Kent Borg +1 (617) 776-6899 kentborg(a)world.std.com kentborg(a)aol.com Proud to claim 35:00 hours of TV viewing so far in 1994!

3 2

Re: Card Playing Protocol
by kentborg＠world.std.com 17 Dec '03

17 Dec '03

rarachel(a)prism.poly.edu writes about problems with card protocols, >Anyway, you can ask him about it, his address is rvslyke(a)prism.poly.edu I will once I am sure I will understand the answer. Thanks, -kb, the Kent who does have some reading ahead of him -- Kent Borg +1 (617) 776-6899 kentborg(a)world.std.com kentborg(a)aol.com Proud to claim 35:00 hours of TV viewing so far in 1994!

3 2

ATTENTION: OPERATION `WOODCOCK BLUDGEON' WILL COMMENCE SHORTLY
by catalyst-remailer＠netcom.com 17 Dec '03

17 Dec '03

To Whom It May Concern: We will shortly be commencing operation Woodcock Bludgeon. During this period you will experience some confusion and chaos due to secondary effects of our meme carrier launchings in cyberspace. This is a warmup `proof of principle' test for our more important, larger scale meme construction, fabrication, and penetration projects. We assure you that these operations will help advance cyberspatial development past the current major blockages in the Matrix and combat future insidious perversions in the continuum (many of which you may be personally familiar with). Emphasis and urgency will be focused on the most drained and threatened meme areas. Please exercise the utmost discretion in your personal meme possession and conveyance during this period of transition. We apologize in advance for any inconvenience this may cause. \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ _________ _________ _________ / / \ \ / / \ \ / / \ \ / / / / / / / / ______ / / / / / / ~~~~ / / / / / __ \ / / / / / / / ~~~ __/ ~~~_/ / / ~~~ / / / ____ / /~\ \ /~~~~_ / / /~~~~~~~ \ \ / / / / \ \ \ ~~~ _ \ / / ~~~~~~~~~ ~~~~ ~~~~ ~~~~~ ~~ ~~~~ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ \ C y b e r a n a r c h i s t R e p r e s s i o n a n d P o i s o n

4 3