December 2003 - cypherpunks-legacy

Re: New World Encryption
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 2:49 AM 11/11/95, James M. Cobb wrote: > > >Friend, > > >An item in 11 09 95 Edupage summarizes a NY Times new- >sstory revealing Clinton's wish to spy on the world: > >OPPOSITION TO ADMINISTRATION'S ENCRYPTION STAND "Friend," I'm sure your intentions are good in forwarding this and other similar items to the Cypherpunks mailing list, but if you are reading the list, you should surely know that this item--including both summaries and the complete article--have already been posted to the Cypherpunks list. Two days ago, in fact. If for some reason you are _not_ reading the CP list, or not paying attention, then you really should not be forwarding stuff to it. I'm copying the CP list on this to remind folks to "stay on the page" as to what's already been posted. We are already becoming a kind of "automatic cc:" for a variety of announcements, spams, and other earthshattering items. --Tim May Views here are not the views of my Internet Service Provider or Government. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 | black markets, collapse of governments. "National borders are just speed bumps on the information superhighway."

2 1

Q: Bookshop in Seattle
by Jonathon Fletcher 17 Dec '03

17 Dec '03

Can someone point me towards a bookshop in Seattle that is likely to have the second edition of Applied Cyptography ? Sincerely, -Jon -- Jonathon Fletcher, j.fletcher(a)stirling.ac.uk

1 0

Re: ACLU Cyber-Liberties Update: Nov. 8, 1995
by James A. Donald 17 Dec '03

17 Dec '03

At 05:15 PM 11/8/95 -0500, ACLUNATL(a)aol.com wrote: > According to the government's own statistics, 1,800 innocent conversations > are intercepted each and every time a wiretap or other form of electronic > surveillance is placed. This seems curiously inefficient, even for government work. --------------------------------------------------------------------- | We have the right to defend ourselves | http://www.jim.com/jamesd/ and our property, because of the kind | of animals that we are. True law | James A. Donald derives from this right, not from the | arbitrary power of the state. | jamesd(a)echeque.com

3 2

Re: Timed-release crypto - Proactive security plug
by Amir Herzberg 17 Dec '03

17 Dec '03

A small note/plug: the schemes by Tim and Michael are based on `long lived' secret sharing, i.e. you trust each share of your secret to a server for a really long time. Some people may be concerned that such a long time would allow an attacker to break into most servers and reconstruct the secret (key). A solution to this is proactive secret sharing, as described in [HJKY95]. In this protocol, the secret shares are periodically refreshed (i.e. new shares are computed distributively and then the old shares are erased). In this manner, an attacker has to break into most servers during the same period; shares from one period are worthless on the next period. Best, Amir [HJKY95] `Proactive Secret Sharing', A. Herzberg, H. Krawczyk, S. Jareski, M. Yung, Crypto 95. > At 12:09 AM 11/7/95, Michael Shields wrote: > > >In the May proposal, when you have a message to be encrypted, you > >encrypt it with a session key, optionally split that key with an n-of-m > >scheme, and then send the key into a network of escrow agents, which are > >instructed to hold the message for a given period of time. You then > >hold onto the encrypted message, though you need not keep it secret. > >Conceptually, you have encrypted a message and then remailed the key to > >yourself in such a way that it will take X length of time to arrive. > > --Tim May > > Views here are not the views of my Internet Service Provider or Government. How do you know that? :-)

2 1

RE: POTP Security
by Paul Koning 1695 17 Dec '03

17 Dec '03

> From: Paul Jackman <jacktech(a)delphi.com> >Newgroups: talk.politics.crypto > Subject: Re: Elementrix One-Time Pad >.. > The algorithm will be published when patent protection is assured. > It is currently patent pending in several countries. I saw that comment earlier. It's rather a curious statement, given that the rule of publication vs. patents is that publication before FILING kills your ability to get the patent (in most countries) whereas publication after filing but before grant is not an issue at all. This explains why you often see a mad scramble in companies when something patentable is about to be announced at a trade show, or explained in a white paper... the filing has to be in the mail before that happens. But only just before... whether the patent office takes days or years to grant the patent doesn't matter. paul

2 1

Re: unsuscribe all news groups
by Mark Murray 17 Dec '03

17 Dec '03

> I wish to unsuscribe to all news groups as I feel I should be on a different planet. > Could somebody notify all newsgroups on on my behalf please. > > Sincerely yours Please send a one line message containing only HELP to majordomo(a)toad.com to get help on doing this. M -- Mark Murray 46 Harvey Rd, Claremont, Cape Town 7700, South Africa +27 21 61-3768 GMT+0200 Finger mark(a)grumble.grondar.za for PGP key

3 2

Re: Lotus Notes RSA Implementation Question
by Charlie Kaufman/Iris 17 Dec '03

17 Dec '03

>If anyone on the list has knowledge of the following items, I would be >very gratefull. > >1) What is the key size used by the USA licensed version? > Notes V3 (the one currently deployed) uses 512 bit RSA keys in both the USA and exportable versions. Notes V4 (currently in Beta) uses 512 bit RSA keys for encryption in the exportable version and bigger keys for signatures in all versions and for encryption in the USA version. I'm not sure I'm allowed to say what the key size will be ahead of the product shipping. >2) Considering RC4 is a proprietary scheme, have there been any >concerted efforts to validate it's strength or lack of? If so, could >you give a pointer to any documents I could review. > There has been considerable discussion of the security of RC4 on this list, and some subtle (i.e. worrisome but not disasterous) weaknesses have been found. Lotus Notes' use of RC4 is not subject to the weaknesses disclosed to date because it does not encrypt recognizable plaintext with the first few bytes of the RC4 stream. >...Bob Glassley > --Charlie Kaufman (charlie_kaufman(a)iris.com)

3 2

Re: coding and nnet's
by frantz＠netcom.com 17 Dec '03

17 Dec '03

At 14:17 11/10/95 -0500, Atp3000(a)aol.com wrote: >I just resently got interested in coding and cryptography, and I was >wondering if you could suggest 3 or 4 papers that adresses the aplication of >neural networks in cryptography. Perhaps neural nets could be used in an unknown plain text, brute force attack to automatically select possible decryptions for human examination. I don't know of any papers on the subject. Bill ----------------------------------------------------------------- Bill Frantz Periwinkle -- Computer Consulting (408)356-8506 16345 Englewood Ave. frantz(a)netcom.com Los Gatos, CA 95032, USA

2 1

SA: Confidential Communication on the Internet
by Aleph One 17 Dec '03

17 Dec '03

On the December issue of Scientific American there is an article by Thomas Beth, "Confidential Communication on the Internet". Lite on the technical side but good reading anyway. Aleph One / aleph1(a)dfw.net http://underground.org/ KeyID 1024/948FD6B5 Fingerprint EE C9 E8 AA CB AF 09 61 8C 39 EA 47 A8 6A B8 01

2 2

Re: credit card conventional wisdom
by wiltship＠iccu6.ipswich.gil.com.au 17 Dec '03

17 Dec '03

You wrote... >While not as familiar with the US system as the Canadian, I can give as a >simple example, the bank clearing system for paper checks. In Canada, we >can clear a check from one side of the country to the other overnight. We >have 24 hour clearing. While this is far from "perfect", our existing >paper systems allow for a degree of efficiency which I don't believe is >engineered into the US clearing system. Here in Australia most banks take 5 working days to clear a cheque.. even if it's deposited at a bank just up the road from drawer's bank. cheers Peter Flight to Quality Wiltshire Productions Pty Ltd Brisbane, Queensland, Australia Intl Voice 61 7 3376 3535 Intl Fax 61 7 3279 4027 Email wiltship(a)gil.com.au PGP Key ID 3E584C7D PGP Fingerprint 01 03 FB F4 BE F8 2B F3 5D 84 6B 69 37 80 FE 10

1 0