December 2003 - cypherpunks-legacy

Re: GUCAPI (Grand Unified Crypto API)
by cactus＠seabsd.hks.net 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- In article <199412070014.AA13652(a)sequoia.itd.uts.EDU.AU>, Matthew Gream <M.Gream(a)uts.EDU.AU> wrote: >Ohh, I misinterpreted. You're talking about a high level interface that >assumes cryptographic operations are already being used for specific >purposes (ie. `signature', `GetMIC', `VerifyMIC', `Wrap', `Unwrap'). > >I was thinking more about the layer below this, the primitive operations >that don't make assumptions on what the user is going to do; and >limitations placed thereupon. Actually, both interfaces are reasonable for the scope of this discussion. I don't have specific goals in mind yet: I want to bounce around ideas before coming up with something more specific. The GSSAPI has the advantage that Kerberbos services have already been provided for that API: There's no reason, however, that the two goals need to be mutually exclusive. I'll have to read the GSSAPI doc carefully and get a sense of what problems it solves. >I found >out yesterday that I've taken out a prize for the best work conducted >by someone under the age of 26. There is a certain irony in being >awarded the prize by a Government department :-). Nevertheless, congratulations! - -- Todd Masco | "'When _I_ use a word,' Humpty-Dumpty said, in a rather cactus(a)hks.net | scornful tone, 'it means just what I choose it to mean - cactus(a)bb.com | neither more nor less.'" - Lewis Carroll - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBLuUhSyoZzwIn1bdtAQFmRwF7BtmxdCQCHirWle87iUsqz2GnCt+dSvCR JzONMasccbF08lWnfRc0ACAQNyQIfEkD =L3dn -----END PGP SIGNATURE-----

1 0

Re: backing ecash
by jrochkin＠cs.oberlin.edu 17 Dec '03

17 Dec '03

At 10:47 PM 12/06/94, Paul Ste. Marie wrote: >Isn't there a problem with net-based distribution of ecash? It would >seem that Eve could intercept the ecash and spend it first. Encrypted >email return of the ecash would seem to violate the anonymity of the >ecash. Some sort of one-time encrypted return address would seem to >be necessary, but better yet would be a vending machine that took a >floppy disk and some currency and stuck the ecash on the floppy. Diffie-Hellman would seem appropriate here. Look it up in Schneier. Vending machines seem a good idea too, but one unlikely to develop any time soon. Or possibly ever, if the net becomes so prevalent that no one would think of doing anything offline that could just as well be done online.

1 0

(Fwd) Read this, Virus info!!
by John Young 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I have received two versions of this warning about "Good Times" virus, this one from mail list Design-L and a similar one from list Fiction-of-Philosophy. Some forwarded headers have been removed from this version. Has anyone on c'punks got further info or comment? John PGP 262 Key ID 34EE1095 - ------------------- Forwarding Design-L mail by: WAYDE(a)UTKVX.UTCC.UTK.EDU (Wayde Justin Tardif) on - ------------------- From: IN%"ripp0009(a)frank.mtsu.edu" "Matthew D. Hamilton" 6-DEC-1994 22:42:53.89 To: IN%"xbuj17a(a)prodigy.com", IN%"agratz(a)aol.com", IN%"wayde(a)utkvx.utk.edu", IN%"hbaldry(a)utkvx.utk.edu" CC: Subj: Read this A.S.A.P.-- VIRUS (fwd) [Multiple headers elided] - ------------------- * WARNING * THere is a virus being sent on Online America by E-mail. If you get anything called "Good Times", DO NOT READ IT OR DOWNLOAD IT. I repeat, do not read it or download it. It is a virus that will earase your hard drive. Please forward this message to everyone you have an address for. It will help them a lot. ***************************************************************** ***** "We're going to play for you now a little Oriental song. It's called Tu Ning" ***************************************************************** ***** Raenna infinit(a)umich.edu - ------------------- End Forward - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBLuU+YSoZzwIn1bdtAQExhwGArGY8XPi++RcOQF67mN/o3dyPhZAmA2Pe 9WlSEtNQNno1y1JjFgXERUAG6CxVT19p =/0Vy -----END PGP SIGNATURE-----

4 3

Re: Good times virus (ANSI BOMB?)
by adam.philipp＠ties.org 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- >On Dec 7, 1:04am, ADAM GERSTEIN, _THE_ MACGURU wrote: >> Need I remind you of a certain Robert T. Morris? Does the "Internet Worm" >mean >> anything to you? Sure, it wasn't actual email, but it did use email and other >> means of transport to cripple the net in a matter of hours. > >The Internet Worm used the sendmail DEBUG mode to execute commands on >a remote system. It did not propogate itself via email messages, which was >what the original (ridiculous) warning claimed. > >I can't feel a lot of sympathy for people who took this announcement >seriously. Such stupidity reaps its own rewards. Although the concept of "text viruses" seems a bit far fetched to some people, there these lovely toys known as ANSI bombs. Essentially they work in a similar method to the some techniques used in the sendmail bug, but they are MS-DOS specific, they will use embedded ANSI codes to run programs as the files is viewed... anyone know what will happen if deltree /XXX (where XXX represents an unpublished string of characters) is run from the root directory of a DOS hard disk? Its gone, quickly. Sure the files can be undeleted, but undeleting a whole disk is tricky business... Maybe Good Times is a hoax, but ANSI bombs exist and using a DOS ANSI text viewer will surely be a foolish thing to do on any downloaded text file... If anyone feels the need for proof I collected a few a while back, but really don't see the need to post them...heh heh. Adam Philipp PS: Please no comments about superiority of MACs or LINUX boxs because they are immune to ANSI boms...that ought to be clear enough... - -- PGP Key available on the keyservers. Encrypted E-mail welcome. SUB ROSA: Confidential, secret, not for publication. -Black's Law Dictionary GJ/CS d H S:+ g? p? au+ a- w+ v++ c++ UL+ UU+ US+ P+ 3 E N++ k- W++ M-- V po- Y++ t++ 5+ jx R G' tv+ b+++ D++ B--- E+++ u** h-- f++ r+ n+ y++-- - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBLuVnPSoZzwIn1bdtAQEjeAF+Pi65kg9SMBZ1bzO5gJBsumi5x2vJFgqC o0hc3bMaqLYb5WY/jlaAtWURtzXzOUc6 =/53s -----END PGP SIGNATURE-----

7 7

Re: crypto email to France
by Rich Salz 17 Dec '03

17 Dec '03

Have your French office contact the American Consulate as a way of getting started. I believe the short and effective (albeit not 100% correct) answer is\ that digital privacy is not allowed unless you give the gov't the keys. /r$

1 0

Good times virus thing-a-ma-bobber
by ADAM GERSTEIN, _THE_ MACGURU 17 Dec '03

17 Dec '03

Michael K. Sanders is believed to have said: >Has anyone actually seen this 'Good Times' thing? I highly doubt >it. And seriously, an e-mail virus? Get real. Need I remind you of a certain Robert T. Morris? Does the "Internet Worm" mean anything to you? Sure, it wasn't actual email, but it did use email and other means of transport to cripple the net in a matter of hours. adam -=-=-=- Adam J. Gerstein MacGuru to the stars Available at: GERSTEIN(a)SCSU.CTSTATEU.EDU MACGEEK(a)SCSU.CTSTATEU.EDU A GERSTEIN(a)AOL.COM MACGEEK(a)eWorld.com an41389(a)anon.penet.fi (for anonymity) -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= -----BEGIN PGP SIGNATURE----- Version: 2.6 iQBWAwUBLq/fYbXVc2UFUOWNAQHu4QIBAQzD1aOCh4DV3Dg4DSJPmNu+1xGDRxND 0PavaUaBFP7GGT6EneTBwVX1ddL1PFFKdeMf8qo9FgWfG0EOHuHJTkY= =6rlg -----END PGP SIGNATURE-----

6 5

Breaking the NSA
by Tony.Gurnick＠nzdairy.co.nz 17 Dec '03

17 Dec '03

If you really want to test NSA. Encrypt some crypto code with pgp in an overseas public key(IE: non-us) then email the code to someone out of the us. This way you will find out 1 of 2 things. 1. That pgp is unbreakable by the NSA - Rsa with fairly log keys take so much work the nsa cant crack it with huge computers. This is a good thing - Idea, even though it is new, is a secure algorithm for the above reasons - You wont get in trouble as you are only sending random bits out of the country not code 2. PGP is BREAKABLE by the NSA (OUCH!) - You get in deep shit! or 3. PGP is breakable by the NSA but they dont tell anyone! (HMMM) - Well this would be an interesting one! - Since they are the ones that imposed the ITAR rule in the first place (them or the us gov) they have a prob! If they knew you were exporting crypto because they cracked pgp they could not convict you as that would imply they cracked pgp and they would tell the whole world what they can & cannot crack. It would be a big bummer for RSA and IDEA but at least we`d know! T

6 5

RE:
by Claborne, Chris 17 Dec '03

17 Dec '03

One of the reasons that Phil and Ralph get anything done is because they aren't subscribed to this list. Over 300 messages a week and growing.... How about cutting the flames, the Detweiler/DM junk, HEAT postings and post substantive info, questions, or discussion. 2 -- C -- ---------- >From: Anonymous User <remailer-admin(a)goldenbear.com> >--------------------------------------------------------------------------- --- >I don't know what is going on here. This list seems to have >bogged down in meta-issues. I am very disappointed with >Eric Hughes' recent display of feather-fluffing. He seems >to fail to understand that the list has absolutely NOTHING >to do with him personally. The full subscriber base could >MOVE IMMEDIATELY if so inclined, and indeed the atmosphere >seems to be getting a bit oppressive here. > >I hate to say this but it reminds me of when all the Detweiler >flames were erupting a long time ago. Detweiler seemed to >be especially enraged with the way that E.Hughes ran the list >in a dictatorial, "iron fist" way. He failed to understand >that his own role was merely that of a janitor, not a >celebrity with a personality cult. Is that all the cypherpunks >list is about? I tell you that this idea that "cypherpunks >code" does not mean anything. "cypherpunks talk about code >endlessly" but when it comes down to it, this whole list >is nothing but a lot of people STROKING EACH OTHER'S EGOS >while the outsiders (Phil Zimmermann, Ralph Levien) are the >only ones getting anything done!! > >

1 0

good times
by nobody＠c2.org 17 Dec '03

17 Dec '03

fnord -23

1 0

Ideal digital cash system?
by Johnathan Corgan 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- On page 123 of Applied Cryptography Bruce Schneier cites the work of two cryptographers and the digital cash system they invented that satisfies all six properties he listed on the same page. In his words: The authors consider this the first ideal untraceable electronic cash system. The reference [674] is: T. Oamoto and K. Ohta, Universal Electronic Cash Advances in Cryptology--CRYPTO '91 Proceedings Berlin: Springer-Verlag 1992 pp. 324-337 Is anyone here familiar with this work? Has anyone tried to implement this protocol in some manner? Also how would I go about obtaining the text of this work either in written form or online? ======================================================================= Johnathan Corgan "Violence is the last refuge of the incompetent" jcorgan(a)netcom.com -Isaac Asimov PGP Public Key: http://www-swiss.ai.mit.edu/~bal/pks-toplev.html Or send email to: pgp-public-keys(a)pgp.ai.mit.edu Subj: GET jcorgan ======================================================================= -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBLuVcyU1Diok8GKihAQGuIwP+KaH0arHX1MADCi+KHMWjSCq3VNoUR1O1 aIBagedXbegdXmzkcmdTebgfKYQKpZN3Ple8Bt1k3KzXepS/gcIZUGWeN7P5c+tC 2/zFbTLYhl+BCjZpRZ2PnxTZWYASUYoKnZ1sXeh18bYPxtR+g9BSCmleau1W5d/g yAi2QSuxdBg= =gTBc -----END PGP SIGNATURE-----

2 1