December 2003 - cypherpunks-legacy

DES Key Recovery Project, Progress Report #6.
by Peter Trei 17 Dec '03

17 Dec '03

DES Key Recovery Project, Progress Report #6. Well, RSA now has put up the official rules, and some test data, for the DES Key Recovery Project. See http://www.rsa.com/rsalabs/97challenge/ if you haven't already. The actual challenge will be posted 28 Jan, and the prize will be $10,000. I've had some nibbles of interest from the FPGA community, but not too much yet. If you know anyone with FPGA or ASIC hardware handy, tell them about the project, and point them at Wiener's paper (it can be found at http://www.aist-nara.ac.jp/Security/doc/ among locations. My software is complete, except for one thing: I have not incorporated Svend Olaf Mikkelsen's new Pentium code (see http://inet.uni-c.dk/~svolaf/des.htm) This is about 25% faster than mine, and well worth the extra effort. The conversion turns out to be non-trivial; it uses a different initial and final perm, the key schedules look different, and the rounds seem to carry a lot of context from one round to the next in the registers. All but the final problem is not too important - the data are all different by simple permutations, and the conversion is not too hard. The final problem is more interesting, since I do the first DES round only part of the time. This means that I'll have to do more context setup for those times when I'm starting at the second round (most of the time), and preserve that extra context after the times I *do* run the first round. The other problem is that the 'half-matches' and penultimate round half-matches will be different for the two systems. This complicates results checking. Anyway, come Monday, I want to email to a few people the generic 'C' code, along with my assembler version. If you're interested in doing a serious critique and/or porting of the code, and are a US/Canadian citizen living in the US/Canada, then email me with a statement to that effect. I'm only sending out a few copies - this is a slow beta, after all. If I don't get the Mikkelsen code in there by Monday, it should follow soon thereafter. After the DES Challenge is underway, I may try looking at the RC5 Challenges. Who else will be attending Verisign Partner Days or the RSA Data Security Conference at the end of the month? I'd like to meet some of the other participants on this list. Peter Trei trei(a)process.com

1 0

Re: Key Revokation Scheme
by Bill Stewart 17 Dec '03

17 Dec '03

At 11:32 PM 1/14/97 -0500, harka(a)nycmetro.com wrote: >I started thinking about the issue, how to set up a system to have >somebody else revoke your key for you, if you don't have the means >to do so yourself. >The possible case I had in mind was, what if you're maybe a >dissident, you get arrested and your apartment (incl. disks/keys) >gets raided. You don't have any means to revoke the key yourself, >don't even have e-mail in general, and with the "one phone call", [.... method deleted .... lawyer, alice, bob, ... ] Too complex for what you're really doing. Give your lawyer a floppy with the key revocation certificate and a yellow sticky about how to call Alice or Bob for help if your lawyer's not computer-literate enough to follow the README file. If you're paranoid about the cops getting your unindicted co-conspirators' names, use PGP Inc. or some computer consultant instead of Alice and Bob and have your lawyer pay their per-hour rate. On your One Phone Call, tell him to get the floppy out of the sealed envelope in his safe and use it. Key revocation certificates don't leak your private keys, so the only risk if the Bad Guys get a copy is denial of service, including the pain of rebuilding all your connections, etc.; it doesn't leak your communications or allow them to forge mail. # Thanks; Bill # Bill Stewart, +1-415-442-2215 stewarts(a)ix.netcom.com # You can get PGP outside the US at ftp.ox.ac.uk/pub/crypto/pgp # (If this is a mailing list, please Cc: me on replies. Thanks.)

2 1

Re: Newt's phone calls
by azur＠netcom.com 17 Dec '03

17 Dec '03

>On Thu, 16 Jan 1997, Phillip M. Hallam-Baker wrote: >> >> It was a conference call but over a cellular phone. Martin had hacked his >> Radio Shack Scanner using a well known technique. He had a radio ham >> license. >> >Phill > Actually I'd love to see this go to court & have the law itself >tossed out. How many years have the airwaves been free? Now it is >illegal to listen on the cellular frequencies. > >Sarah. > >============================================================================== >Sarah L. Green Hey, I never claimed to be >>osprey<< >Madison, AL (USA) a genius nor a typist greens(a)hiwaay.net >============================================================================== The concept that a corporation or individual transmitting information meant for receiption at 'significant' distances should be accorded the presumption of privacy is analogous that a person shouting out their window to a person on the street and assuming that insisting neighbors be required to turn a bind ear. However, since the government has pressed the point, couldn't one use this same logic to claim that since face-to-face conversations are assumed to be private that wire taps are illegal. I seem to recall that Chief Justice Brandice made this argument in the late '20s. Look where we are today. --Steve

1 0

Forget DES, crack CAVE; was: Newt may be more receptive to encryption now
by azur＠netcom.com 17 Dec '03

17 Dec '03

>I think what's important to stress is that technical fixes work, laws >don't. > >Net-advocates in DC are already planning to suggest to Republicans that >they use crypto as a hammer to nail Gore (the chief White House supporter >of the current policy) and draw votes and cash from Silicon Valley. > >-Declan > > >On Thu, 16 Jan 1997 Scottauge(a)aol.com wrote: > >> >> Given his troubles with this "hay seed" scanner recording democrats, ol' Newt >> may be more receptive to encryption. >> >> Our privacy certainly is getting trashed by this presidency and I am hoping >> an impeachment is coming down the line. >> >> Since the congress is who makes the laws, maybe we all can focus some snail >> mail to these guys. >> >> Perhaps EFF could even draft some laws for our protection (what a joke - just >> to keep busy body beaurocrats outta our business). >> >> What does it matter anyhow, these guys dont read their own 300 - 5000 page >> laws anyhow.... >> >> Hopeless.... >> >> Why don't we threaten to monitor and post RealAudio of all the politico's juciest cellular intrigues, or design and distribute CAVE cracking software to allow simple monitoring of digital cellular communications. IMHO, this would be a better demonstration that the DES crack being contemplated. -- Steve

1 0

Re: encryption program
by ed.falk＠Eng.Sun.COM 17 Dec '03

17 Dec '03

> > I ran a quick Kappa test on it. ... I had a blast with this one. I was up until 4:30 last night working on Pierre van Rooyen's "Here follows a example..." cryptogram. It's like doing a jigsaw puzzle; there's a hump you cross over near the end where everything just falls into place. Jim Gillogly broke it in only a few hours, whereas I must have put in a whole day cumulatively (half of that writing software), but it was my first real cryptogram. It was a hell of a learning experience. They say that you can't design a crypto system until you've broken someone else's first, and this really drove it home.

1 0

No Subject
by T. O'Brien 17 Dec '03

17 Dec '03

Unsubcribe

1 0

(U.S.) National Cryptography Policy (paper and report)
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text Date: Fri, 17 Jan 1997 14:09:24 CST Reply-To: Law & Policy of Computer Communications <CYBERIA-L(a)LISTSERV.AOL.COM> Sender: Law & Policy of Computer Communications <CYBERIA-L(a)LISTSERV.AOL.COM> From: Lyonette Louis-Jacques <llou(a)MIDWAY.UCHICAGO.EDU> Subject: (U.S.) National Cryptography Policy (paper and report) Comments: To: net-lawyers(a)eva.dc.LSOFT.COM To: CYBERIA-L(a)LISTSERV.AOL.COM I'm forwarding this post to the CYBERIA-L and NET-LAWYERS lists as I think subscribers might be interested in these documents (include discussion of export controls), and their implication for international communications. Cheers, Lyo (Lyonette Louis-Jacques at llou(a)midway.uchicago.edu) Cryptography and the National Resource Council: The Role of Private Groups in Public Policy, by Kenneth W. Dam, is now available on the Web. http://www.law.uchicago.edu/Publications/Occasional/ The Role of Private Groups in Public Policy is adapted from a presentation made to the Presidents' Circle of the National Academy of Sciences and the Institute of Medicine, Washington, D.C., November 21, 1996. It was recently issued as Occasional Paper No. 38 by the University of Chicago Law School. Kenneth W. Dam, Max Pam Professor of American and Foreign Law, University of Chicago Law School, was the Chair of the National Research Council's Committee to Study National Cryptography Policy. The Committee unanimously recommended eliminating restrictions on domestic use of encryption, and progressively relaxing restrictions on export. The government's concerns that national security and law enforcement agencies would be unable to eavesdrop on criminals and terrorists must be balanced against the dangers that American firms would be unable to lawfully use encryption strong enough to protect electronic commerce, and that American software developers, forced to use key escrow/key recovery encryption in their products ("a Maginot Line of defense against hackers") would find no market for their products. A late draft of the Committee's Report, "Cryptography's Role in Securing the Information Society," is available at their home page: http://www2.nas.edu/cstbweb/2646.html ----------- Paradise is exactly like + where you are right now .&______~*@*~______&. m only much, much, better "w/%%%%%%%%%%%%%%%%%%%\w" mmm*** ------------------------ `Y""Y""Y"""""Y""Y""Y' mm***** Language -- it's a shipwreck, p-p_|__|__|_____|__|__|_q-q mm**Y** it's a job - Laurie Anderson _-[EEEEM==M==MM===MM==M==MEEEE]-_.|..|.... (two .sigs sighted on the Net) --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "The cost of anything is the foregone alternative" -- Walter Johnson The e$ Home Page: http://www.shipwright.com/rah/ FC97: Anguilla, anyone? http://offshore.com.ai/fc97/ "If *you* don't go to FC97, *I* don't go to FC97"

1 0

Albuquerque, Anyone?: Hettinga goes on the road...
by Robert Hettinga 17 Dec '03

17 Dec '03

I'm going to be in Albuquerque seeing family for a week starting tomorrow. Any cypherpunks/e$/technomads folks out there wanna quaff a few, I'd be up for it. Also, I'm looking a temporary PPP dial-up in the Albuquerque for the week I'm there. No mail or news, just PPP, so I can hit my POPserver and run e$pam in remote-mode. Neither rain, nor snow, nor altitude, etc. can keep the e$pamster from his appointed rounds... Thanks! Cheers, Bob Hettinga ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "The cost of anything is the foregone alternative" -- Walter Johnson The e$ Home Page: http://www.shipwright.com/rah/ FC97: Anguilla, anyone? http://offshore.com.ai/fc97/ "If *you* don't go to FC97, *I* don't go to FC97"

1 0

Re: UNSUBSCRIBE
by ed.falk＠Eng.Sun.COM 17 Dec '03

17 Dec '03

Could someone help this luser? Is he responding like this to every post on the list? ----- Begin Included Message ----- >From spooke(a)ita.flashnet.it Fri Jan 17 12:44:24 1997 X-Sender: rm02129(a)ita.flashnet.it Mime-Version: 1.0 Date: Fri, 17 Jan 1997 21:45:00 +0100 To: ed.falk@Eng (Ed Falk) From: Spooke <spooke(a)ita.flashnet.it> Subject: UNSUBSCRIBE globalkos.org >> >> Hi, my name is Tod, and I really want to be a cool hacker, ... > >This has *got* to be a troll. Nobody could be this clueless. > > >Well, actually, they could. > > ----- End Included Message -----

2 1

Telecomm Act Reference (Was Re: Newt's phone calls)
by Sarah L. Green 17 Dec '03

17 Dec '03

>From Damien Thorn's 'A CELLULAR COMMUNICATIONS PRIMER' (at http://www.l0pht.com/~drwho/cell/texts/thorn1192.txt) To calm fears that cellular calls were not private, the cellular industry lobbied congress into passing legislation known today as the Electronic Communication Privacy Act (ECPA) of 1986 which makes it a crime to monitor cellular phone calls and a host of other transmissions like digital pagers. This law is used by cellular equipment dealers and service providers to reassure customers that their conversations will remain private. Sarah. ============================================================================== Sarah L. Green Hey, I never claimed to be >>osprey<< Madison, AL (USA) a genius nor a typist greens(a)hiwaay.net ==============================================================================

1 0