December 2003 - cypherpunks-legacy

Re: Hash functions & Physical Analogies
by danisch＠ira.uka.de 17 Dec '03

17 Dec '03

Michael P. Brininstool wrote: > I seem to remember someone mentioning that a hash function, like the > one used in signatures in PGP, would show a large change for a small > change in the file, and a small change for a large change in the file. More important is that it is difficult (infeasible) to find a file for a given hash value. (This implies that small file changes result in large hash value changes.) > First question: > I think I have seen references to topology in discussions of > cryptography. I have never had a topography class, so I was > wondering, is Rubik's cube is a topology problem? No, it is a permutation group. Use the Schreier-Sims-Algorithm to find solutions. > Second question: > If Rubik's cube is a topo prob, is it a good analogy for trying > to describe hash functions to people? No. It is a simple thing to find a turn which fits to a given state of the cube. When the cube came out a german newspaper published a simple method for solving the cube. This means everyone can easily find a "message" which fits to a given "hash value". This must not be possible for a cryptographic hash function. The hash-function must be a one-way function, but the cube isn't one-way. Further more, the cube allows some kind of differential analysis. Since turning the front side only affects the front side, you can see what to do to turn the front side back. That's also not good for cryptographic context. > Third question: > If there is an analogy, how do you convince the lay person that the > hash is a one-way function? By demonstrating that it maps many to > one, and the Rubik's Cude maps one to one? It is still a problem to convince experts that a hash function is a one-way function... > Fourth question: > To sign a post with PGP (from within vi, under trn) Do I include > the header in the lines to be run through 'pgp -fast' or not? > (I have the cp list go into a news gateway on my home machine so > that threads are easier to follow) Should not do this. The header is modified by transport agents, e.g. paths and date are added. Hadmut

1 0

BYTE on Netscape
by John Young 17 Dec '03

17 Dec '03

Ben Smith writes supportively in the January 1995 issue on Netscape's products -- freebie and commerical. See pp.197-200. Two excerpts: "Netsite Commerce Server is Netscape Communications' most important product because it offers the basic requirements for secure transactions over the otherwise open-for-snooping-and-spoofing Internet." [Brief discussion of crypto system -- RSA, PGP similarity and difference.] "Netscape Communications may not be able to clean out the loose threads and cobwebs of the Internet, but its client and servers are the kinds of products the Internet needs to make the transition from being a cobweb of experimental projects to a serious commercial marketplace."

1 0

MEETING NOTICE: IEEE RSA/Diffie-Hellman Working Group
by eric＠remailer.net 17 Dec '03

17 Dec '03

The following is the notice for the IEEE P1363 working group. The official title includes RSA and Diffie-Hellman, but these two algorithms are on hold because of patent issues. The committee is going forward on elliptic curve systems. Here's how this committee works. The working group is composed of individuals, not representatives of companies. Anybody can show up and participate. The voting rules are as follows. If you've shown up at two of the last three meetings, you can vote. That's it. The next meeting is typically set at the current one. The meetings are held in conjunction with various security conferences, typically, to make it easier for everyone to attend. The last two meetings were at CRYPTO in mid August in Santa Barbara, CA and at the Fairfax, VA security conference in early November. The next one will be possibly at the Oakland, CA conference held in May at the Claremont Hotel. I'd urge all interested parties to make an effort to attend. Eric ----------------------------------------------------------------------------- Date: Wed, 21 Dec 94 11:35:47 PST From: burt(a)RSA.COM (Burt Kaliski) To: p1363(a)RSA.COM Subject: MEETING NOTICE: IEEE RSA/Diffie-Hellman Working Group IEEE P1363: Standard for RSA, Diffie-Hellman and Related Public-Key Cryptography MEETING NOTICE Thursday, January 12, 1995, 9:00-4:00pm Hotel Sofitel, Redwood Shores, California This fifth meeting of the P1363 working group, open to the public, will review draft sections of a standard for RSA, Diffie-Hellman and related public-key cryptography. The meeting follows the 1995 RSA Data Security Conference, held January 9-11 at the same location. AGENDA 1. Approval of Agenda 2. Approval of Minutes from November Meeting 3. Officers' Reports 4. Review of Draft Standard a. General material b. Elliptic curves c. Hardware support d. Random number generation 5. Proposals for New Sections 6. New Work Assignments 7. Meeting Schedule If you'd like to participate, contact Burt Kaliski, the working group's chair, at RSA Laboratories, 100 Marine Parkway, Redwood City, CA 94065. Phone: (415) 595-7703, FAX: (415) 595-4126, E-mail: <burt(a)rsa.com>. Draft sections and copies of previous minutes are available via anonymous ftp to rsa.com in the "pub/p1363" directory. The working group's electronic mailing list is <p1363(a)rsa.com>; to join, send e-mail to <p1363-request(a)rsa.com>. There is no meeting fee this time. Hotel Sofitel is at 223 Twin Dolphin Drive in Redwood Shores, California, about 12 miles south of San Francisco International Airport. From U.S. 101, take the Redwood Shores Parkway exit, and turn left at the second traffic light. Phone: (415) 598-9000.

1 0

Merry Cryptmas
by bart＠netcom.com 17 Dec '03

17 Dec '03

For the holidays I recommend Tim's latest essay, available from ftp.netcom.com:/pub/tc/tcmay/Anarchy for your reading pleasure. This is a reasoned, balanced presentation that will surely propagate the memes of cypherpunk interest to the broader public. Pass it on.

1 0

alpha.c2.org software upgrade
by admin＠alpha.c2.org 17 Dec '03

17 Dec '03

It is now possible to send outgoing mail via the alias remailer at alpha.c2.org. To send a message, create a message of the following format: From: me(a)alpha.c2.org (My Nym) Password: mypass Subject: test To: alt.test(a)demon.co.uk This is my message. Encrypt this with the public key for the remailer and send it to alias(a)alpha.c2.org. It will decrypt it and send your message (after verifying and removing the password line.)

2 1

Steganography Software
by John.Schofield＠sprawl.expressnet.org 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I am working on a review of the various steganography programs out there for the March/April issue of Keep Out magazine. I have a pretty good list of the stuff that's available in the DOS world, but I may have missed plenty of stuff available on the Internet. If anyone is aware of later versions of these programs, or of a program not listed here that should be, *please* let me know. (Please include an FTP site and directory and/or a BBS to download it from.) I want this review to be as complete and accurate as possible. Questions, comments, and suggestions are of course welcome. Here's everything I have so far, including partial descriptions: HDSK41.ZIP Hide and Seek v 4.1b. Data hiding/seeking using GIF files. JSTEGV4.ZIP This version of the Independent JPEG Group's JPEG Software (release 4) has been modifed for 1-bit steganography in JFIF output files. MANDLEXE.ZIP MandelSteg V1.0, including GIFExtract V.10, for DOS. These two programs allow you to hide confidential data in fractal GIF images. PGE10B.ZIP Pretty Good Envelope (P.G.E.) v1.0. PGE will "insert" your data into a GIF or JPG file. S-TOOLS.ZIP S-Tools for Windows. Version 2.00. Steganography program for Windows. S-Tools (Steganography Tools) brings you the capability of `hiding' files within Windows sound files (.WAV), bitmap (.BMP) and CompuServe GIF files. STEGO.ZIP Send encrypted messages and files which are undetectible and REQUIRE NO KEY! Programs and messages are submerged into a graphic file (usually a B/W TIF file). Once the object has been hidden the TIF appears unchanged. STEGODOS.ZIP StegoDos aka Black Wolf's Picture Encoder, Version 0.90b. For 320x200x256 only. WNS210.ZIP White Noise Storm: Data Encryption/Steganography package. You can use this to hide files in PCX pictures so nobody will see them. Thanks very much! John Schofield Publisher, Keep Out -----BEGIN PGP SIGNATURE----- Version: 2.7 Comment: Call 818-345-8640 voice for info on Keep Out magazine. iQCVAwUBLvp8M2j9fvT+ukJdAQHDkgP/Uh9aEhOz4Gu7FnUbFOTaOLAmlJBSRgjG 5nFRkWudlKejB/89tXFV64mg+iCPpkF9OJg1+szkzskPmRXmJ+K6WafBxlEAD9Tp I+vI/QAxQDT8XCn9e4fQ0QaEfp/Ek9GBZ2qSJvq6wbJmBM/iuLfHukEI7l9uSp/K KhAM9nnqbo8= =P+mn -----END PGP SIGNATURE----- **EZ-PGP v1.07 ... I thought about being born again, but mum said no. --- Blue Wave/RA v2.12 -- |Expressnet: John Schofield 11:310/12 |Internet: John.Schofield(a)sprawl.expressnet.org | | Standard disclaimer: The views of this user are strictly his own.

1 0

Re: Making sure a program gets to the receiver intact
by lcottrell＠popmail.ucsd.edu 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- >On Thu, 22 Dec 1994 an169306(a)anon.penet.fi wrote: >> 2: Someone breaking into my apt, sticking a keyboard monitor on, getting >> my passphrase and key. > >I'm quite concerned about that myself. Is there a way to tell if your >computer has been tampered with? Assume that looking at the case doesn't >do much good (they get by that easy), and if they want to hide the bug >they can. Voltage monitoring? You might consider putting the computer in a strong ventilated metal box, and using some kind of wax or lead seal. It is unlikely that any black bag team would have the right tools to cover any traces of tampering. > >> Pardon the anonymous ID, as my reputation with my REAL user id is not >> so great. (No, I am not Lance, but not that better off due to tons >> of dumb mistakes with my regular ID on this list.) > >Ah. Glad you put in the "No, I'm not Lance" part. I was wondering when I >read that paragraph. :) Hey! hey! Nothing wrong with the name Lance. It is all a matter of the LAST name. -----BEGIN PGP SIGNATURE----- Version: 2.6 iQCVAwUBLvncF1Vkk3dax7hlAQG3EAP+LzjBc9VucFREojyDztb29axVs8pYVbwf 5Xz3IzITYLAjgjb9fIj/PQvxQwn9CE3tRAJ3wMh08bzJqJlZqHryRVR+gErtC5Yt 4Y4N1SWZq+UUwhHAS9cxoWkYkqvEI/h3eAaLHN9Ukd3y9IGdk0V9YZ3Opm7aZbny nEaMan16FQc= =ngYK -----END PGP SIGNATURE----- -------------------------------------------------- Lance Cottrell who does not speak for CASS/UCSD loki(a)nately.ucsd.edu PGP 2.6 key available by finger or server. Encrypted mail welcome. Home page http://nately.ucsd.edu/~loki/ Home of "chain" the remailer chaining script. For anon remailer info, mail remailer(a)nately.ucsd.edu Subject: remailer-help "Love is a snowmobile racing across the tundra. Suddenly it flips over, pinning you underneath. At night the ice weasels come." --Nietzsche

1 0

Re: Breaking into girlfriend's files
by blancw＠pylon.com 17 Dec '03

17 Dec '03

Snappy comeback to msg by Mark Terka: "GROAN! What the hell is this list about anyway?????? I think we are losing perspective about encryption, privacy etc etc... >From the 'Welcome' message for new subscribers to the list: "Cypherpunks will make the networks safe for privacy." It doesn't say "Cypherpunks will make it possible to mount crypto invasions against your opponents." "To make judgement calls is WAY out of line and a hell of a bad precedent for this group." Yes, it's bad precedent, seeing as how everyone on the list is unoriginal, followers who are likely to take any ideas presented as incentive to act, as sanctioned by the members. Everyone knows that, that's why the list is always so quiet. .. Blanc

1 0

Re: Breaking into girlfriend's files
by blancw＠pylon.com 17 Dec '03

17 Dec '03

Responding to msg by Mark Terka, who is having a bad crypto day: I don't recall seeing too much in the waqy of condemnation of the guy that posted RC4 to this list ..... but as soon as we see something that touches close to home like male/female relationships, the shit hits the fan!!!!! ............................................................ Don't you distinguish between the evil that governments can do, and the evil that female opponents in relationships (of dubious merit) can achieve? Are you proposing that some people make it a policy to cheat on their friends, just as some governments do, and should be dealt with in like manner, automatically and without further consideration? It were a wise & just government, which could not distinguish between the good, the bad, and the all rest. And who appointed you the list censor, anyway? If it makes sense that a cypherpunk could provide instructions for breaking a password, it also makes sense that they could choose to withhold it. After all, if they are smart enough to know how to do this, they should also be capable of making a reasoned decision about when it might be reprehensible - with or without your approval. .. Blanc

1 0

NYT Correction on Sonofusion
by John Young 17 Dec '03

17 Dec '03

Correction today: "A headline in Science Times on Tuesday about attempts to create thermonuclear fusion by aiming sound waves at microscopic bubbles misstated the process involved. It is high-temperature fusion, not cold fusion." Note: The NYT advertises an email address for "comments on published articles about science and suggestions for coverage": <scitimes(a)nytimes.com>

1 0