December 2003 - cypherpunks-legacy

Re: The sorry state of non-US crypto
by Damien.Doligez＠inria.fr 17 Dec '03

17 Dec '03

>Italy: ftp://ftp.dsi.unimi.it/pub/security/crypt/ >UK: ftp://ftp.ox.ac.uk/pub/crypto/ >Croatia: http://pgp.rasip.fer.hr/ >Germany: ftp://ftp.darmstadt.gmd.de/pub/crypto/ Don't forget Australia: http://psych.psy.uq.oz.au/~ftp/Crypto/ It's especially relevant because there is a version of Mosaic that uses 128-bit SSL (i.e. truly secure). I have most of these pointers in my SSL crack Web page (which has evolved quite a bit in one week). -- Damien

1 0

Denning questions/reverses her position?
by Attila T. Hun 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I'm too old for this! I never thought I would see the day that Dorothy Denning would terminate her star role as a shill for the Clinton/LEA encryption ban! from: http://www.news.com/News/Item/0%2C4%2C13000%2C00.html?nd Two supporters of Clinton administration's stance on encryption released a report today finding that encryption has not inhibited law enforcement efforts, with at least one author questioning her belief in the administration's position. The authors--Dorothy Denning, a Georgetown University computer science professor, and William Baugh Jr., vice president of Science Application International Corporation-- ______________________________________________________________________ "attila" 1024/C20B6905/23 D0 FA 7F 6A 8F 60 66 BC AF AE 56 98 C0 D7 B0 -----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: latin1 Comment: No safety this side of the grave. Never was; never will be iQCVAwUBM+Eh5L04kQrCC2kFAQF9wwP+INGEAnc+1akKc+dP7re8fleX4PJrmsYU UKzxgBZAsWcZC7L5WkaOygckHznOc+a37iHzDFtt3sr86DP0D/4j675qJdt/O4B+ jbxXumJ8EXmTN9bOvXK8x9JRGjR9aWzjeaJKN3X+fH4Bjbw76FR9xIFkhhNvZqnM ahBzZyL2cZ4= =MlQZ -----END PGP SIGNATURE-----

1 0

PGP for elm
by Ferreira, Ben 296-4158 17 Dec '03

17 Dec '03

Anyone know if there is a PGP interface or elm version that supports PGP?

1 0

Re: DES & RC4-48 Challenges
by dan＠milliways.org 17 Dec '03

17 Dec '03

On Wed, 23 Aug 95 11:53:22 -0500 you wrote: >Dan Bailey writes: >> According to Biham and Shamir's Differential Cryptanalysis of DES, >> "An interesting feature of the new attack is that it can be applied > >If I read this correctly, then the keys used for generation of the chosen >plaintext-cyphertext pairs is irrelevant and once the required computation is >done, one can crack any '...one of the keys can be cputed in real time while >it is still valid.'.. > I haven't read this entire book, mainly because a lot of it is over my head with some pretty esoteric proofs. The impression I got was that if the cryptanalyst is steadily keeping up with the key changes until he collects the required 2^36 from a pool of 2^47 valid plaintext/cyphertext pairs, he then can recover the last key used. I don't understand what constitutes a "valid" pair in this context. Also, I'm not sure if all the computation he's done to get to that point is applicable in his attack on the next key. It appears not. If all of his precomputation was somehow salvagable, I think we'd already have heard about someone actually doing it. But then again, I don't understand how his precomputation could *not* be applicable. He'd just have to drop off the computations done for the first key. Perhaps the difficulty in this problem comes from not knowing when the source is changing keys. According to Schneier, "To get the requisite data for this attack, you have to encrypt a 1.5Mbits/second data stream of chosen plaintext for almost three years." (240) With the massively-parallel nature of Cypherpunks, this is probably feasible, assuming we could figure out what needed to be done. Another angle is cracking a reduced-round version of DES. 8-round DES can be analyzed in 2^9 using differential cryptanalysis. Since I'm sure the press doesn't really understand using multiple rounds in iterated cryptosystems, maybe that little detail would slip by. 2^9 could easily be handled by an Alpha in the evening. Dan >So what, exactly does this mean? Can I do most, if not all of the feeding of >chosen plaintext into my personal DES box in my basement, do the required >computation (admittedly there is a lot of work to do here), then go out and >start breaking wire-transfers with a minimal of chosen plaintext? That is >what the above quotation would seem to imply. > >Seems incredible... I surely must be reading much more into the passage than >is really there... > >andrew > > > ****************************************************************************** "I think, therefore I am" - Descartes Dan Bailey "I don't think, therefore I'm a moustache." - Sartre dan(a)milliways.org Worcester Polytechnic Institute and The Restaurant at the End of the Universe ******************************************************************************

1 0

Denning questions/reverses her position?
by Attila T. Hun 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I'm too old for this! I never thought I would see the day that Dorothy Denning would terminate her star role as a shill for the Clinton/LEA encryption ban! from: http://www.news.com/News/Item/0%2C4%2C13000%2C00.html?nd Two supporters of Clinton administration's stance on encryption released a report today finding that encryption has not inhibited law enforcement efforts, with at least one author questioning her belief in the administration's position. The authors--Dorothy Denning, a Georgetown University computer science professor, and William Baugh Jr., vice president of Science Application International Corporation-- ______________________________________________________________________ "attila" 1024/C20B6905/23 D0 FA 7F 6A 8F 60 66 BC AF AE 56 98 C0 D7 B0 -----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: latin1 Comment: No safety this side of the grave. Never was; never will be iQCVAwUBM+Eh5L04kQrCC2kFAQF9wwP+INGEAnc+1akKc+dP7re8fleX4PJrmsYU UKzxgBZAsWcZC7L5WkaOygckHznOc+a37iHzDFtt3sr86DP0D/4j675qJdt/O4B+ jbxXumJ8EXmTN9bOvXK8x9JRGjR9aWzjeaJKN3X+fH4Bjbw76FR9xIFkhhNvZqnM ahBzZyL2cZ4= =MlQZ -----END PGP SIGNATURE-----

1 0

Australia and Encryption Policy (fwd)
by Michael Froomkin 17 Dec '03

17 Dec '03

Don't know quite how I became a Denning <--> cypherpunks conduit, but there you are; anyway this time she is passing on Orlowski's response to Ross Anderson. I have no part in this debate, honest. A. Michael Froomkin | +1 (305) 284-4285; +1 (305) 284-6506 (fax) Associate Professor of Law | mfroomki(a)umiami.ir.miami.edu U. Miami School of Law | P.O. Box 248087 | It's hot here. And humid. Coral Gables, FL 33124 USA | See (experimentally & erratically) http://viper.law.miami.edu/~mfroomki ---------- Forwarded message ---------- Date: Wed, 23 Aug 1995 15:29:17 -0400 (EDT) From: Dorothy Denning <denning(a)cs.cosc.georgetown.edu> To: MFROOMKI(a)umiami.ir.miami.edu Cc: denning(a)cs.cosc.georgetown.edu Subject: Australia and Encryption Policy ----- Begin Included Message -----

1 0

is there...
by Perry E. Metzger 17 Dec '03

17 Dec '03

Is there an online version of Raph's anonymous remailer list for FTP or on the web? I suddenly need to give it to someone. .pm

3 2

Denning questions/reverses her position?
by Attila T. Hun 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I'm too old for this! I never thought I would see the day that Dorothy Denning would terminate her star role as a shill for the Clinton/LEA encryption ban! from: http://www.news.com/News/Item/0%2C4%2C13000%2C00.html?nd Two supporters of Clinton administration's stance on encryption released a report today finding that encryption has not inhibited law enforcement efforts, with at least one author questioning her belief in the administration's position. The authors--Dorothy Denning, a Georgetown University computer science professor, and William Baugh Jr., vice president of Science Application International Corporation-- ______________________________________________________________________ "attila" 1024/C20B6905/23 D0 FA 7F 6A 8F 60 66 BC AF AE 56 98 C0 D7 B0 -----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: latin1 Comment: No safety this side of the grave. Never was; never will be iQCVAwUBM+Eh5L04kQrCC2kFAQF9wwP+INGEAnc+1akKc+dP7re8fleX4PJrmsYU UKzxgBZAsWcZC7L5WkaOygckHznOc+a37iHzDFtt3sr86DP0D/4j675qJdt/O4B+ jbxXumJ8EXmTN9bOvXK8x9JRGjR9aWzjeaJKN3X+fH4Bjbw76FR9xIFkhhNvZqnM ahBzZyL2cZ4= =MlQZ -----END PGP SIGNATURE-----

1 0

Pointer to InfoWeek article: "Internet Thieves"
by Martin Janzen 17 Dec '03

17 Dec '03

The current online issue of InformationWeek contains an article about new threats to data security. Nothing in the article should be new to most Cypherpunks readers, but those who are interested can find the article at: http://techweb.cmp.com/iw/current/42mtweb.htm To its credit, IW has no obnoxious registration procedure; just click and read. Here's a sample: =============================================================================== INTERNET THIEVES Trade in black-market data is a growing problem for business. What, if anything, can be done? By Clinton Wilder and Bob Violino (Issue date: August 28, 1995) The new frontier of cyberspace represents vast opportunities for innovation, entrepreneurship, and profit-making. But there is also a dark side to the online world, one that poses a worrisome threat to the security of corporations. The Internet has spawned an illegal market in which thieves use the latest Net software tools to trade stolen information, including corporate trade secrets. [...] =============================================================================== -- Martin Janzen janzen(a)idacom.hp.com

1 0

Denning questions/reverses her position?
by Attila T. Hun 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I'm too old for this! I never thought I would see the day that Dorothy Denning would terminate her star role as a shill for the Clinton/LEA encryption ban! from: http://www.news.com/News/Item/0%2C4%2C13000%2C00.html?nd Two supporters of Clinton administration's stance on encryption released a report today finding that encryption has not inhibited law enforcement efforts, with at least one author questioning her belief in the administration's position. The authors--Dorothy Denning, a Georgetown University computer science professor, and William Baugh Jr., vice president of Science Application International Corporation-- ______________________________________________________________________ "attila" 1024/C20B6905/23 D0 FA 7F 6A 8F 60 66 BC AF AE 56 98 C0 D7 B0 -----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: latin1 Comment: No safety this side of the grave. Never was; never will be iQCVAwUBM+Eh5L04kQrCC2kFAQF9wwP+INGEAnc+1akKc+dP7re8fleX4PJrmsYU UKzxgBZAsWcZC7L5WkaOygckHznOc+a37iHzDFtt3sr86DP0D/4j675qJdt/O4B+ jbxXumJ8EXmTN9bOvXK8x9JRGjR9aWzjeaJKN3X+fH4Bjbw76FR9xIFkhhNvZqnM ahBzZyL2cZ4= =MlQZ -----END PGP SIGNATURE-----

1 0