December 2003 - cypherpunks-legacy

some RSA questions
by Jüri Kaljundi 17 Dec '03

17 Dec '03

Some questions about writing a program that uses RSA. Let's assume we have 3 participants (Alice, Bob, Carol). The idea is for Bob to send an encrypted and signed message to Alice. Although Bob constructs the message, signs it and encrypts it, it is Carol who can decide some parts of the message. The message is small, 200-400 bytes in length. Some of the contents of the message are always the same (field names) and the message looks much like mail headers: Field1Name: field1contents Field2Name: field2contents Field3Name: field3contents Carol can decide, what goes into the field contents. Now the easiest way would be to sign the message using Bob's private key and encrypt is using Alice's public key. What Carol wants to do is forge similar messages without help from Bob and send the messages to Alice. Let's say that Bob is a bank, Alice a merchant and Carol a buyer. Usually Bob has to take some money from Carols account and after the he signals Alice, that she can give the goods to Carol. Now Carol wants to get the goods without paying and give a false signal to Alice (which Alice thinks is a signal from Bob). Both the public keys of Alice and Bob are well-known. One of the fields will be unique for every message, so that Carol can not use the same message to pay once and recieve the goods many times. The question is easy: how should I sign and encrypt the message? 1) calculate a digest (MD5, SHA) from the message, sign the digest (or should I sign the message contents + digest) with Bob's private key and encrypt it with Alice's public key? 2) is there any idea to generate a DES key, encrypt the message with the DES key, calculate a digest on (enc. message + DES key), sign the digest and encrypt it with Alice's public key? The message is small, so the time it takes to encrypt the message is not so important compared to higher speed of DES. 3) may be it would be good to encrypt the message with Alice's public key, then generate a digest, sign the digest and then once more encrypt the whole thing with Alice's public key? Using a DES session key helps in case someone would find out Alice's private key she uses to decrypt the message, but actually in this case it is not so important to hide the message contents (what is important are message integrity and sender authentication). What are the suggestions what crypto package might I use: RSAref, crypto++, SSLeay or some other? -- Juri Kaljundi jk(a)stallion.ee

2 1

No Subject
by sharadid＠cbn.net.id 17 Dec '03

17 Dec '03

unsuscribe cypherpunks

2 1

Re: Fed Ct hrg re Diffie-Hellman & Hellman-Merkle patents
by thad＠hammerhead.com 17 Dec '03

17 Dec '03

Peter D. Junger observes: > The server at www.cruzio.com reports: > The requested URL /~schlafly was not found on this server. > Does anyone have a valid URL for this information? It's really http://bbs.cruzio.com/~schlafly/ thad -- Thaddeus Beier thad(a)hammerhead.com Visual Effects Supervisor 408) 286-3376 Hammerhead Productions http://www.got.net/people/thad

1 0

Re: Hey! Dr. Vuilis!
by Murray Hayes 17 Dec '03

17 Dec '03

On Sun, 27 Oct 1996 19:22:38 -0800 (PST), se7en wrote: > >SHUT THE FUCK UP, BITCH!!! > His name is Vulis. Would you please splee it right.

1 0

Florida Supreme Court Home Page Adorned With Porn
by Blake Wehlage 17 Dec '03

17 Dec '03

Florida Supreme Court Home Page Adorned With Porn TALLAHASSEE, Fla (Reuter) - A Florida court's Web page was restored Friday after two days' absence following a break-in by a hacker who placed pornographic images on the site. Court officials Wednesday took the state court system home page off-line after a computer hacker apparently broke into the site and added pictures of nude men and women in various stages of sexual activity. The photos caused a stir among those who use the court page to access Florida Supreme Court and Appellate Court decisions. The home page is normally a little more staid, with a plain wood-grained background and hypertext links. Prurient, but disappointed, surfers looking for thrills on the net gave the court system home page one of its busiest days ever Friday. "We've had a significant number of hits today on our home page," said Craig Waters, executive assistant to Florida Supreme Court Chief Justice Gerald Kogan. "With all the publicity surrounding this, a lot of people are curious." No files were tampered with and court records remained intact, Waters said. The Florida Department of Law Enforcement was contacted and was investigating the break in. Court officials intend to prosecute the perpetrator, Waters said. ========================================== Blake Wehlage <jwilk(a)iglou.com> ±» RëVðLû¡ØÑ Bø+ ©ÖmP@ñ¥ «± Goto: http://members.iglou.com/jwilk *********PGP KEY On Request*********

2 1

Junkbusters: Invite the Government in!
by Ross Wright 17 Dec '03

17 Dec '03

QUOTE A direct quote from: http://www.junkbusters.com/ht/en/spam.html We think that junk email should be made illegal in the same way that junk faxes have been outlawed in the US. Unfortunately it will take lawmakers some time to get around to it, and even then spammers would probably try remailing through other jurisdictions to evade regulation. END QUOTE. I have only posted to this list RE: Internet Marketing and Spam. I have found that the general feeling runs against regulation of the internet. These Junkbuster people are crying for government intervention. The government coming into the internet is a bad idea. Therefore: Junkbusters is a bad idea. Ross =-=-=-=-=-=- Ross Wright King Media: Bulk Sales of Software Media and Duplication Services http://www.slip.net/~cdr/kingmedia Voice: 415-206-9906

1 0

Reason for AP anonymity
by azur＠netcom.com 17 Dec '03

17 Dec '03

Astrologer released after predicting death of Venezuela president By Vivian Sequera ASSOCIATED PRESS CARACAS, Venezuela - An astrologer who predicted 80 year-old President Rafael Caldera's "death" next year was released by political police Thursday after two days of questioning in detention. Jose Bernardo Gomez, 47, said he was detained "because I spoke about the possibility of the death of President Caldera." The widely feared Department of Intelligence and Prevention Services wanted to know where Gomez At his information, he said, and whether he was connected to leftist political groups. Caldera's astrological chart ,show that "Uranus is over the sun, Pluto is in ascendancy and Mars is going behind its moon" - not a good sign for the president, Gomez told police. "I've been sustaining the possibility of the death of the president of the republic for a long time," Gomez said, adding that the word "death" is "symbolic language that could be physical or something of another order." The arrest of the rotund, boarded and jovial 47-year old philosophy professor at Venezuela Central University was treated as front-page news by the mainstream daily newspaper El Nacional and other media. Government officials, perhaps a little embarrassed, played down the incident. "He's not accused of anything," Interior Minister Jose Guillermo Andueza said tersely. Political police merely wanted to know "what basis he has for making this kind of statement." Gomez, an academic with postgraduate degrees in history, education, psychology and philosophy from three Venezuela universities, said he meant Caldera no wrong and, in fact, voted for Caldera for his first term in 1968. "I wish the president good health. I'm not betting on his sicknesses, much less on his death," Gomez said in an interview in his home two hours after his release. "It's just that from an astrological point of view, 1997 looks dark for Caldera." Gomez spoke publicly on the topic at a conference of businessmen on Oct. 12.

2 1

(no subject)
by Arnaldo Giacomitti Junior 17 Dec '03

17 Dec '03

unsuscribe cypherpunks

4 4

Re: Merc: PacBell predicts imminent death of the net; film at 11
by stewarts＠ix.netcom.com 17 Dec '03

17 Dec '03

At 10:47 PM 10/26/96 -0500, Roger Williams <roger(a)coelacanth.com> wrote: >I caught an interview on the BBC last night with a representative from >PacBell, who claimed that this subsidy resulted in ISPs actively >discouraging customers from using data service (ISDN) instead of POTS. For those of you not in PacBell territory, PacBell really misunderstood the Internet access market when they set their current rates. ISDN costs $X/month (about 2-3 x POTS) plus (daytime) per-minute charges of 4 cents, (nighttime 7pm-7am) free. (This probably requires that your ISP have Centrex access in your local calling area.) What they didn't realize was that computer people think "It's free at night" means "It's free at night", so they dial up and stay on. (Many of us non-ISDN users do the same with POTS, of course.) ISDN call setup times are fast enough that it's possible to do IP support that tears down calls after X seconds of non-use and sets them up again when there's traffic, which is practical since you don't have 30 seconds of modem retraining time per setup. If PacBell's really bugged enough about usage patterns, they could go write a good Winsock package to support it themselves and give it away free to ISDN customers.... # Thanks; Bill # Bill Stewart, +1-415-442-2215 stewarts(a)ix.netcom.com # You can get PGP outside the US at ftp.ox.ac.uk Imagine if three million people voted for somebody they _knew_, and the politicians had to count them all.

1 0

HIT_key
by John Young 17 Dec '03

17 Dec '03

10-24-96: "Hitachi, Fujitsu to develop key-code data security system." They will cooperate to develop "hack-proof" encryption for telecommunications networks. Planning for the system includes formation of a "bank" to maintain duplicates of decoding keys, an aspect which has raised some concern over potential invasions of privacy. The U.S. has been lobbying other nations to adopt such a system. "Singapore devises system to combat Internet business fraud." The new technology, known as the Singapore Enterprise Security Architecture (SESA), could be applied over the Internet "within the next few months" in Singapore. It may begin in Singapore first and then, depending on the response from those outside, overseas." Patent: "Computerized theme park information management system utilizing partitioned smart cards and biometric verification." Abstract: A computerized theme park information system to automatically process and issue a multi-service guest card, control and monitor admission, *perform value-added manipulation of the guest card's contents and to analyze the visitor's buying behavior*. "U.S. Attorney Gen. Janet Reno offered to "set the record straight" on encryption policy and key recovery at FCBA lunch Oct. 17." RFI: Anybody know of a transcript of the AG's talk? ----- http://jya.com/hitkey.txt (7 kb for 4) ftp://jya.com/pub/incoming/hitkey.txt HIT_key ---------- We have put Quisquater's "short cut for exhaustive key search using fault analysis" at: http://jya.com/quikey.htm

1 0