December 2003 - cypherpunks-legacy

Re: Kocher's RSA attack
by Hal 17 Dec '03

17 Dec '03

From: Derek Atkins <warlord(a)MIT.EDU> > I must disagree, software implementations of RSA can and probably do > allow the timing attacks. It all depends on the modexp implementation. > Most implementations that I know of, when performing an x^y mod n will > require a squarings and b multiplies, where a is the number of bits in > y and b is the number of 1-bits in y. This is not enough - Paul Kocher's attack depends on the individual modular multiplies taking different times. (Actually, that is for his attack on Diffie Hellman. The RSA CRT decryption attack uses a completely different principle, but I guess we are ignoring that for now.) The fact that timing a modular exponentiation would give information about the density of 1 bits in the exponent is not particularly new or surprising, as has been mentioned here. What is new is that you can actually figure out the specific exponent value. But that requires variable-timing modmult, not just variable-timing modexp. PGP is somewhat unique in having a multiplicity of modmult algorithms which can be selected at compile time. I am not sure which of these might be variable time and which might be fixed. The most likely place for time variation IMO is in the modular reduction rather than the multiply; the multiply is generally deterministic with no variation due to data values (although as was pointed out here, on some processors a hardware multiply instruction may take variable time depending on its inputs). Some modular reductions involve trial division to some extent or other, with different numbers of iterations possible depending on certain (maybe unusual) values. However I believe at least one of the PGP modular reductions consists of multiplying by the reciprocal of the modulus, followed by a fixed shift, and this one should be constant time on a machine which has constant-time multiplies and shifts. (This is just going from memory, I haven't looked at the algorithm in several years.) Hal

1 0

DCSB: Future Scenarios for e$
by rah＠shipwright.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- The Digital Commerce Society of Boston (Formerly The Boston Society for Digital Commerce) Presents Art Hutchinson and John Kelly Northeast Consulting Resources Inc., (NCRI) "Future Scenarios for e$" Tuesday, January 2, 1995 12 - 2 PM The Downtown Harvard Club of Boston One Federal Street, Boston, MA Mr. Hutchinson is a Senior Consultant at Northeast Consulting Resources, Inc. (NCRI). His primary area of focus is NCRI's Information Commerce practice. He has advised clients on the application of different approaches to, and technologies for managing (and getting paid for) digital intellectual property on the Internet, the World Wide Web, and private/hybrid networks. Mr. Hutchinson is an active member of the Electronic Rights Management Group of the Information Industry Association, and a founding member of the Digital Commerce Society of Boston. He speaks regularly at conferences on the topic of rights management in cyberspace He is a principal contributor to NCRI's Future Mapping(r) conferences, including "The Future of Information Commerce" and "The Great Infrastructure Debate"(r). Prior to joining NCRI, Mr. Hutchinson was Director of Consulting Services at BIS Strategic Decisions. Prior to BIS, Mr. Hutchinson managed the Distribution Channels Information Service at International Data Corp. (IDC). Mr. Kelly, a Senior Consultant at Northeast Consulting Resources, Inc. (NCRI), has specialized in designing group planning and decision making activities that help teams clarify their strategic options. He also analyzes new applications in multimedia training and groupware. He is one of the leaders of the Mapping the Future of Information Commerce seminars. Mr. Kelly has led seminars on strategic planning and Future Mapping for a large international oil company, a Fortune 100 diversified manufacturing company, a leading computer hardware and systems company, and numerous software and telecommunications companies. He has contributed to the development of databases of critical events that help companies chart their future business opportunities in the areas of computing, communications, and interactive multimedia. Before joining NCRI, Mr. Kelly served as an Associate Editor and consultant for the Seybold Office Computing Group. Mr. Kelly also worked for the Information Systems Group at Lotus Development Corporation and was the Director of Interactive Technology Projects at the WGBH Educational Foundation. Prior to that, Mr. Kelly was Manager of the Seminar Division at Information Mapping, Inc. and later served as a consultant to IMI. Art says: >Art Hutchinson and John Kelly of Northeast Consulting Resources, Inc. (NCRI) >will facilitate an interactive exercise that helps to paint a picture of the >group's collective thinking about future events and milestones >in the development of electronic commerce. Specifically, we will be culling >through the last year of posts to www-buyinfo, e-payment, and various other >mailing lists, as well as our own database of 17,000 "events" used in >previous scenario planning conferences. From this, we will be create a set >of about 40 potential future events which - depending upon whether they >happen or not - will drive the digital commerce arena in varying directions. > > >Everyone at the lunch will be given an opportunity to 'vote' on and discuss >with their peers the likelihood (or un-likelihood) of these events happening >within a particular time frame. After the 'voting', we will lead a >discussion of what the results might mean, and how some things that this >group believes correspond to what other corporate and industry groups have >said in the recent past in voting on some of the same events. Suggestions >for controversial, interesting, watershed events that might happen in the >digital commerce arena over the next 3-5 years are welcome. Please e-mail >them directly to Art Hutchinson at <hutchinson(a)ncri.com> This meeting of the Boston Society for Digital Commerce will be held on Tuesday, January 2, 1995 from 12pm - 2pm at the Downtown Branch of the Harvard Club of Boston, One Federal Street. The price for lunch is $27.50. This price includes lunch, room rental, and the speaker's lunch. ;-). The Harvard Club *does* have a jacket and tie dress code. We need to receive a company check, or money order, (or if we *really* know you, a personal check) payable to "The Harvard Club of Boston", by Saturday, December 30 (that's two weeks from this Saturday), or you won't be on the list for lunch. Checks payable to anyone else but The Harvard Club of Boston will have to be sent back. Checks should be sent to Robert Hettinga, c/o The Shipwright Development Corporation, 44 Farquhar Street, Boston, Massachusetts, 02131. Again, they must be made payable to "The Harvard Club of Boston". If anyone has questions, or has a problem with these arrangements (We've had to work with a few glacial A/P departments ourselves, for instance), please let us know via e-mail, and we'll see if we can work something out. Planned speakers for the following few months are: February Fred Hapgood Freelance Author March Glenda Barnes X.9 Electronic Commerce Security Group April Donald Eastlake CyberCash May Perry Metzger Security Consultant and Cypherpunk June Dan Shutzer FSTC We are actively searching for future speakers. If you are in Boston on the first Tuesday of the month, and you would like to make a presentation to the Society, please send e-mail to the DCSB Program Commmittee, care of Robert Hettinga, rah(a)shipwright.com . For more information about the Boston Society for Digital Commerce, send "info dcsb" in the body of a message to majordomo(a)ai.mit.edu . If you want to subscribe to the DCSB e-mail list, send "subscribe dcsb" in the body of a message to majordomo(a)ai.mit.edu . Looking forward to seeing you there! Cheers, Bob Hettinga Moderator, The Digital Commerce Society of Boston -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQCVAwUBMNGdJPgyLN8bw6ZVAQGSgQP/Q5PfwoevxNRBaC1B6dUaIDl07bhGTpSm v9pYx3kuHTEc0Mei3Zzxj4G/yaSGFHoOuz8rslxsKBIrsLeB0Xc7gehs8OjgXsuU fcR6gvT4mlY9Mvs8E9MaeTlTlHAz5R38g1lv1ST4Xti7kBQ4l9EEErTjPOM4oHy/ 6kglzZsCSM4= =QJbV -----END PGP SIGNATURE----- ----------------- Robert Hettinga (rah(a)shipwright.com) e$, 44 Farquhar Street, Boston, MA 02131 USA (617) 958-3971 "Reality is not optional." --Thomas Sowell The NEW(!) e$ Home Page: http://thumper.vmeng.com/pub/rah/ >>>>Phree Phil: Email: zldf(a)clark.net http://www.netresponse.com/zldf <<<<<

1 0

Re: Web O Trust, active attacks against same, etc. AGAIN. (was: Usability of Cryptography (was Re: More FUD from First Virtual) )
by James A. Donald 17 Dec '03

17 Dec '03

At 01:39 PM 12/13/95 -0700, Bryce wrote: > >-----BEGIN PGP SIGNED MESSAGE----- > > An entity calling itself "James A. Donald" <jamesd(a)echeque.com> >allegedly wrote: >> >> Web of trust is a mess because it attempts to link keys to >> physical people, which in general cannot be done. > ******************************* > > >Do you wish to substantiate this rather brazen assertion? >I am very sure that PGP public key 0xCC56B2E9 belongs to my >housemate Sebastian Kuzminsky <kuzminsk(a)colorado.edu>. Is >there some reason why I should doubt this belief? No, but there is some reason you should gain familiarity with the english language If I had intended to say "generally cannot be done" I would have said "generally cannot be done" instead of saying "in general cannot be done" --------------------------------------------------------------------- | We have the right to defend ourselves | http://www.jim.com/jamesd/ and our property, because of the kind | of animals that we are. True law | James A. Donald derives from this right, not from the | arbitrary power of the state. | jamesd(a)echeque.com

1 0

Re: [NOISE] The Enquirer
by blancw＠accessone.com 17 Dec '03

17 Dec '03

Now, THAT's what I call "The News Update". This is the kind of encapsulated [NOISE] we could all stand to hear! ha-ha-ha .. Blanc

1 0

Re: e-mail forwarding, for-pay remailers
by Martin Diehl 17 Dec '03

17 Dec '03

Obviously, we need a certificate authority that will digitally sign personal identification documents (Name, address, photo (digitized), date of birth, etc.) Martin G. Diehl ______________________________ Forward Header __________________________________ Subject: Re: e-mail forwarding, for-pay remailers Author: "E. ALLEN SMITH" <EALLENSMITH(a)mbcl.rutgers.edu> at Internet-USA Date: 12/13/95 5:33 PM From: IN%"gbroiles(a)darkwing.uoregon.edu" "Greg Broiles" 13-DEC-1995 03:40:50.49 >I don't have much faith that the people who are currently doing the DNS for my domain name (goldenbear.com) are going to do anything about the current bouncing-messages phenomenon anytime soon, so I'm looking into other ways to get & send E-mail [snip] netbox.com ( http://www.netbox.com ) provides web pages and E-mail storage or forwarding for people; [snip] There's one problem with this in regards to the "no necessary connection," and that 's the governmental requirement for mail forwarding. MBE and any legal other one will want to see at least two forms of ID including one photo, and have a form that they fill out using that and send to the local post office. Anyone have a way around this problem? -Allen The following is an attached File item from cc:Mail. It contains information that had to be encoded to ensure successful transmission through various mail systems. To decode the file use the UUDECODE program. --------------------------------- Cut Here --------------------------------- begin 644 RFC822.TXT M4F5C96EV960Z(&9R;VT@9V%T93$N9'1T=7,N8V]M(&)Y(&-C,BYD='1U<RYC M;VT@*%--5%!,24Y+(%8R+C$Q(%!R95)E;&5A<V4@-"D-"B`@("`[(%=E9"P@ M,3,@1&5C(#DU(#$W.C,S.C0W($-35`T*4F5T=7)N+5!A=&@Z(#QO=VYE<BUC M>7!H97)P=6YK<T!T;V%D+F-O;3X-"E)E8V5I=F5D.B!F<F]M(')E;&%Y,RY5 M52Y.150@8GD@9V%T93$N9'1T=7,N8V]M("@U+G@O4TU)+5-64C0I#0H@("`@ M:60@04$Q,3`P.3L@5V5D+"`Q,R!$96,@,3DY-2`Q-SHS,#HU-R`M,#8P,`T* M4F5C96EV960Z(&9R;VT@=&]A9"YC;VT@8GD@<F5L87DS+E55+DY%5"!W:71H M(%--5%`@#0H@("`@:60@45%Z='IO,#$W.#@[(%=E9"P@,3,@1&5C(#$Y.34@ M,3@Z,3,Z-30@+3`U,#`@*$535"D-"E)E8V5I=F5D.B!B>2!T;V%D+F-O;2!I M9"!!03$R,#(Y.R!7960L(#$S($1E8R`Y-2`Q,SHR,SHS,2!04U0-"E)E8V5I M=F5D.B!F<F]M($]#14Q/5"Y2551'15)3+D5$52!B>2!T;V%D+F-O;2!I9"!! M03$R,#$R.R!7960L(#$S($1E8R`Y-2`Q,SHR,SHR,2!04U0-"E)E8V5I=F5D M.B!F<F]M(&UB8VPN<G5T9V5R<RYE9'4@8GD@;6)C;"YR=71G97)S+F5D=2`H M4$U$1B`C,3(Q.30I(&ED#0H@/#`Q2%E22E-54T9,4SA9-%HS1T!M8F-L+G)U M=&=E<G,N961U/CL@5V5D+"`Q,R!$96,(a),3DY-2`Q-CHQ.2!%1%0-"D1A=&4Z M(%=E9"P@,3,@1&5C(#$Y.34@,38Z,3D@1414#0I&<F]M.B`B12X@04Q,14X@ M4TU)5$@B(#Q%04Q,14Y334E42$!M8F-L+G)U=&=E<G,N961U/@T*4W5B:F5C M=#H@4F4Z(&4M;6%I;"!F;W)W87)D:6YG+"!F;W(M<&%Y(')E;6%I;&5R<PT* M5&\Z(&=B<F]I;&5S0&1A<FMW:6YG+G5O<F5G;VXN961U#0I#8SH@8WEP:&5R M<'5N:W-`=&]A9"YC;VT-"DUE<W-A9V4M260Z(#PP,4A94DI355-&3%,X631: M,T=`;6)C;"YR=71G97)S+F5D=3X-"E@M16YV96QO<&4M5&\Z(&-Y<&AE<G!U M;FMS0'1O860N8V]M#0I8+59M<RU4;SH@24XE(F=B<F]I;&5S0&1A<FMW:6YG M+G5O<F5G;VXN961U(@T*6"U6;7,M0V,Z($E.)2)C>7!H97)P=6YK<T!T;V%D M+F-O;2(-"E-E;F1E<CH@;W=N97(M8WEP:&5R<'5N:W-`=&]A9"YC;VT-"E!R 096-E9&5N8V4Z(&)U;&L-"@`` end

1 0

Re: PAY-OFF TIME FOR BUG-BUSTERS, NETSCAPE PLEDGES "DOGFIGHT"
by anonymous-remailer＠shell.portal.com 17 Dec '03

17 Dec '03

On Mon, 11 Dec 1995, Michael Coates wrote: > PAY-OFF TIME FOR BUG-BUSTERS, NETSCAPE PLEDGES "DOGFIGHT" > Netscape Communications has awarded two software sleuths $1,000 each for > finding security gaps in its Netscape Navigator 2.0 software. The company > also awarded gifts to 50 other contestants in its "Bugs Bounty" program for > identifying non-security problems. (Wall Street Journal 11 Dec 95 B7) Can anyone tell me whether Ian Goldberg and David Wagner got their $25,000 from Netscape for finding the HUGE security flaws in Netscape's existing product line?? I can't remember whether they got anything or not ... (Sorry, but I've been away from the list. One of those, "fate of the Free World hangs in the balance" thingies ... ;-) Have Netscape and AT&T shown some holiday goodwill, or are they still engaged in their felonious freeloading foolishness? Alice de 'nonymous ... <an455120(a)anon.penet.fi> ...just another one of those... P.S. This post is in the public domain. C. S. U. M. O. C. L. U. N. E.

2 1

Re: And the standard continues to lower...
by anonymous-remailer＠shell.portal.com 17 Dec '03

17 Dec '03

On Fri, 15 Dec 1995, Peter Trei wrote: > This guy's home page is a hoot - he's into UFO contacts and dolphin > communication. > > After writing to him and getting back a description of his system, it's > clear that he's clueless. He seems to think that info sent to a vendor > using his system can't be sorted out from the gazillion other packets > on the Net. > > I described to him sniffer attacks, subverted routers, etal, and > reccomended some basic reading (Cheswick & Bellovin, Is this the two partners in crime from AT&T?? Cheswick & Bellovin?? I think that they're probably not all that reputable (or knowledgable) from what I've seen of their writings and contributions to the AT&T DSRP (Data Security Response Program) mailing list. (If they are the same people, I mean ...) > Kaufmann, Perlman, & Speciner, and Schneier). He said he'd > look into it. (Yes, I know there's plenty of other attacks, such as > OSPF spoofing, but I didn't describe them). > > I think we can educate this guy. Plenty of educating can probably be done, I think. Alice de 'nonymous ... <an455120(a)anon.penet.fi> ...just another one of those... P.S. This post is in the public domain. C. S. U. M. O. C. L. U. N. E.

1 0

Encrypted telnet...
by droelke＠rdxsunhost.aud.alcatel.com 17 Dec '03

17 Dec '03

I am looking for an encrypted telnet (or rlogin/etc) package that supports a Windoze client. It looks like all the normal ones that I can find (SSH, SRA telnet, SSLtelnet, etc) are just under Unixoids. Don't get me wrong - I would prefer to use Unix, but I am headed off to locations, where I know all I'll have access to is Windows, with a PPP stack to some ISP. I'ld write it myself, - pasteing different packages together, but I need it working in a day or two. Can anyone help me here? Thanks, Dan ------------------------------------------------------------------ Dan Oelke Alcatel Network Systems droelke(a)aud.alcatel.com Richardson, TX

3 2

Re: ADDRESS DATABASE?
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Sandfort-8802 unit: >> This took about a minute using a shabby consumer-level DB. >> *Now* do you get it? ^^^^^^^^^^^^^^^^^^^^^^^^ > > hint hint hint hint < >Nope. MY name isn't on your list. In addition, my home phone >number is unlisted--therefore contracturally unavailable for >resale. *Now* do you get it? It's kind of cool how much faith you have in the idea that your number is unlisted, considering the fact that you started this thread by griping that someone had the goods on you. The reason you were "taken aback" is because your beliefs don't correspond to reality -- "cognitive dissonance," in the lingo. H -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQBVAwUBMNHGg73g0mNE55u1AQEfcwH9HPcXAyMQPv9ZNQ2MxvBHfTtsIfqw15zG n7S7yppwR2AsayZgSZQFIDoee0tLRBqEvPFhxNqnOiPCht5PK01YGA== =gIKw -----END PGP SIGNATURE-----

2 1

Re: .PWL spin
by anonymous-remailer＠shell.portal.com 17 Dec '03

17 Dec '03

On Sat, 9 Dec 1995, Joel McNamara wrote: > One system administrator said the problem would have a greater effect on > less-secure environments, such as universities and other institutions, > than on corporations. I didn't quite understand the "corporate speak" here. It sounds like something coming from Bosnia or something. It's Greek to me. What would make a University less secure than a corporation?? Universities (at least the ones, I've checked) have entire departments and theoreticians devoted to Computers ... companies usually don't. I'd think that Universities are much, much more secure environments than corporations are. Doesn't Microsoft know this?? Or is this unique to Seattle?? Alice de 'nonymous ... <an455120(a)anon.penet.fi> ...just another one of those... P.S. This post is in the public domain. C. S. U. M. O. C. L. U. N. E.

5 4