December 2003 - cypherpunks-legacy

Chaum to Step Aside
by John Young 17 Dec '03

17 Dec '03

http://www.msnbc.com/news/45558.asp According to knowledgeable sources, Digicash b.v., the Dutch-based privately held Internet payment company that was founded and is chaired by Chaum, is in the market for a new top executive. The 6-year-old company plans to make Chaum, the ponytailed inventor of Digicash's innovative payment system, chief technology officer and to hire a new CEO to run the company.

2 1

Re: Secure Erase for PCs?
by foodie＠netcom.com 17 Dec '03

17 Dec '03

> Though, technically, no disk can be securely erased, my program, Very Good > Privacy, can securely delete files after they have been encrypted. I don't > know if this is what you're looking for, but if it is, check out the VGP > home page at: http://www.geocities.com/SiliconValley/Pines/2690 > > Ideally, I'm looking for a free space wiper, along the lines of what Burn 2.4 on the Mac can do. As in, create a file the size of available free space, and then write garbage repeatedly to that file. I've found "Real Deal", a TSR that intercepts the DEL command, but that's a poor substitute, at least for my needs. Anyway, thanks. -j

7 6

[Crypto Patent] Authentication "scheme"
by nobody＠cypherpunks.ca 17 Dec '03

17 Dec '03

Just snatched off the newspool... Anitro --------------------------------------------------------------------------- Scheme for authentication of at least one prover by a verifier Source: MicroPatent MicroPatent via Individual Inc. : Abstract: A new procedure for authentication of at least one prover by a verifier, the authentication being based on public and secret key cryptographic techniques and making use of a zero-knowledge protocol. In addition, this protocol is established using the problem of constrained linear equations and finds applications in cryptography. This procedure uses a published matrix M of dimension m.times.n where coefficients are chosen at random from the integers from 0 to d-1, where d is generally a prime number close the square of a number c. The "prover" authenticates itself to a "verifier" by performing hashing functions based on a randomly chosen vector U of dimension m and a randomly chosen vector V of dimension n, the results of which are called commitments and are sent to the prover. The prover then chooses one of several predefined functions and requests that the verifier perform this one predefined function. When the verifier receives a result of the predefined function, it compares the result with the commitments to determine if the prover has provided a correct set of responses. The procedure also can be repeated for other random vectors U and V for increased security. Ex Claim Text: Method for authenticating a prover by a verifier based on a cryptographic technique using a secret key, a public key and a zero-knowledge protocol, the method comprising the steps of: a) generating a secret key, including at least one vector S of dimension n having coordinates chosen from a set X, b) generating a matrix M of dimensions m.times.n whose coefficients are chosen at random from integer values from 0 to d-1, where d is a prime integer close to the square of a number c, c) generating a public key comprising at least one vector P such that P=g(M(S)), where g is a function defined by said set X and a subgroup G of a set of integers (1, 2, . . . d-1) and which associates an element g(x) of G to each coordinate x of the at least one vector P such that x is described uniquely as a product of g(x) and an element k(x) of X; d) generating at least two random vectors by the prover; e) generating plural commitments by applying a cryptographic hash function to functions of S, M and the at least two random numbers; f) exchanging plural messages between the prover and the verifier based on said public key and said secret key; and g) authenticating the prover by the verifier based on said plural messages, said public key and said secret key. Patent Number: 5581615 Issue Date: 1996 12 03 Inventor(s): Stern, Jacques [12-09-96 at 14:42 EST, Copyright 1996, MicroPatent]

1 0

Re: Puzzle Palace 2nd edition (1983) Info
by Alan Olsen 17 Dec '03

17 Dec '03

At 10:03 AM 12/10/96 -0800, you wrote: >>Hope that clears things up... > >No, I fear you are _confusing_ people with this comment. > >Yes, there was a 1983 paperbound edition, with a few new items added to the >1982 orginal. Ho hum. (I have both, and have for many years. It was finding >the '92 edition that sparked much of my interest in the NSA, back in 1982.) > >What we are waiting for is the _real_ Second Edition, the long-awaited >revising of "The Puzzle Palace." It is expected later this year or next. Sorry I was unclear. Actually I was refering to what _Schneier_ was calling the "Second edition". (The penguin edition is more like version 1.1.) The afterward just seems to be a tacked on collection of fragments. Hopefully the real Second Edition will add more content. --- | "Spam is the Devil's toothpaste!" - stuart(a)teleport.com | |"The moral PGP Diffie taught Zimmermann unites all| Disclaimer: | | mankind free in one-key-steganography-privacy!" | Ignore the man | |`finger -l alano(a)teleport.com` for PGP 2.6.2 key | behind the keyboard.| | http://www.ctrl-alt-del.com/~alan/ |alan(a)ctrl-alt-del.com|

1 0

Credentials without Identity--Race Bits
by Timothy C. May 17 Dec '03

17 Dec '03

By the way, on this oftentimes off-topic issue of "bigotry" and "racism," here's a zinger some of you may not have thought much about. And it's certainly related to the themes of Chaumian "credentials without identity," which is very much on-topic. While it has been claimed by some that "crypto anarchy" means that race won't matter, that cyberspace interactions will be color-blind, this is misleading. While many--probably most--users will care only for cyberspace personna issues, and not meatspace personna issues of race, color, height, weight, etc., this is not something built in to anonymous transactions. Consider a "race credential" offered by some entity. Perhaps one goes down to the local Aryan Nations office and gets one's genetic heritage stamped, or down to the Kwanzaa Youth Center to be similarly stamped.... (Why some groups might want this is left as an exercise for the reader. Perhaps a less-inflammatory example (to some of the sensitive amongst you) might be that some women want to interact in "women only" forums--a clear case of discrimination, no?--and may want a "gender bit" avaiable to display as a credential.) But, you may ask (if you are new here or haven't been following the work of Chaum and others), won't display of such a race or gender bit compromise one's identity or be easily forged? The simple answer is "No." Hal Finney has written several good articles for this list about "credentials without identity." And of course David Chaum wrote the originals. The canonical example is that of an "age field" in an unforgeable ID card, granting one access to, say, a bar, without revealing identity. (This become especially important in an age of smartcards and wide use of cardreaders at entr points to various places...without a "credentials without identity" system, every passage through such a portal provides too much information to those compiling surveillance records, dossiers, customer preference lists, etc.) But a "race field" would allow those who wish to only communicate with certain races to do so. Just to set the record straight, and one reason ethnic separatist groups are likely to become intensely interested in crypto anarchy. --Tim May Just say "No" to "Big Brother Inside" We got computers, we're tapping phone lines, I know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^1398269 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

2 1

No Subject
by pfarrell＠cybercash.com 17 Dec '03

17 Dec '03

1 0

Puzzle Palace 2nd edition (1983) Info
by Alan Olsen 17 Dec '03

17 Dec '03

I remember that there was some confusion as to the second edition of _The Puzzle Palace_ by Bamford. (Sorry if this info has been posted before. I did not see a resolution to it. I may have missed it if it was.) "I found a copy of _The Puzzle Palace_ 2nd edition!", he said crypticly. In the Penguin Press printing of _The Puzzle Palace_, it notes that there is the 1982 edition (published by Houghton Mifflin) and one in 1983 (published by Penguin) with a new afterward. Since the afterward contains a fair amount of new information (it looks like a number of FOIA requests came in after going to press), it is probibly the "Second Edition" of which Schneier speaks... Hope that clears things up... (I am going to see if the dealer I got the book from will give me the info on where he ordered it. It was in stock, whereever he got it...) --- | "Spam is the Devil's toothpaste!" - stuart(a)teleport.com | |"The moral PGP Diffie taught Zimmermann unites all| Disclaimer: | | mankind free in one-key-steganography-privacy!" | Ignore the man | |`finger -l alano(a)teleport.com` for PGP 2.6.2 key | behind the keyboard.| | http://www.ctrl-alt-del.com/~alan/ |alan(a)ctrl-alt-del.com|

2 1

Re: Patriots should use PGP
by Jim Byrd 17 Dec '03

17 Dec '03

Why on earth would an American football team need PGP?

3 2

Cypherpunks December Meeting (SF Bay Area)
by Dave Del Torto 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- [wide distribution: please excuse any duplicates you may receive] Salutations, The Cypherpunks December 96 Physical Meeting is being hosted by Pretty Good Privacy, Inc. We've rented a meeting room at the Hotel Sofitel (see below) that can accomodate ~100 people. There will be munchies, and I think this qualifies as a cypherpunk milestone of sorts, so I hope lots of you show up. Please see <http://www.pgp.com/961214.html>. General Info: 1) RSVP's Please RSVP ASAP to <mailto:ddt@pgp.com?subject=cpunks-mtg-rsvp> if you plan to attend (reply to this with "cpunks-mtg-rsvp" as the Subject). It's very important that I have a clear idea of how many humans plan to attend as soon as possible, because we're also providing refreshments/snacks which we need to order from the hotel in advance. Thanks. 2) Location/Time We'll be holding this "Open Meeting on US Soil" at the: Hotel Sofitel 223 Twin Dolphin Drive Redwood Shores CA 94065 415.598.9000 tel Meeting time is 11 AM - 5 PM (a Sofitel time slot), as we have to be out of the room shortly after 5 PM for a wedding setup). The Sofitel is a block or two south of the shining Oracle towers on Twin Dolphin Drive, which is easily accessible from Hwy 101 (on the east/SF Bay side of the freeway) in Redwood City (12 miles south of SFO airport and a few miles south of the Hwy 92/San Mateo Bridge junction as references). There are directions and a simple GIF map at the meeting info URL. <http://www.pgp.com/961214.html>. NOTE: when you arrive at the Sofitel, look for signage pointing to the exact room we're meeting in, or inquire at the main desk. Bring your friends. 3) Demos If you want to demo something at the meeting, tell me ASAP(!). We encourage anyone who has anything Cypherpunks-related to present (even stuff that's already been seen before but which has been updated) to bring/show it. I'm going to set the arbitrary cutoff date for demo reservations as 11:59 PM on Thursday 12 December: we can have the right equipment ready for you if you list what you need in detail. If you wait until the last minute and bandwidth is limited, we may not be able to fit you in, unless you have something very simple to show, so please bear that in mind. There will be overhead projection and an RGB projector available. Net connections can be arranged with advance notice. Right now, we have not arranged anything beyond a Metricom modem (28.8Kbps), but we can arrange an analog modem line or even an ISDN if there's a specific need. Tell me soon(!). 4) Handouts/Door Prizes/Raffle Handouts are welcome: please give me your stack of handouts for the table when you arrive. If you want to pass out detailed mailbomb instructions, please do it outside the building at your own risk (inside the meeting, please refrain from getting PGP Inc in trouble, we do enough of that ourselves already ;). There will be door-prizes from PGP, but supplies are limited if 100 people show up. We may also raffle off some software (upgradable when our new stuff comes out). 5) PGP Key "Thing" Bring a printout of your key fingerprint/key. Or a diskette version, or both. We'll have a key exchange/signing session at the end of the meeting. 6) PGP/MIME BOF at the IETF The IETF's PGP/MIME BOF is Friday 13 Dec, 9:00-11:30 AM (Crystal Room, Fairmont Hotel, 170 South Market St. in Downtown San Jose, 408.998.1900 main). Since it's a Birds Of a Feather session, I think interested people in the San Jose area can show up if they want. Please come by if you want to help support RFC 2015 so PGP/MIME can take the next step toward IETF Working Group discussion so we can eventually move it to the IETF Standards Track process. Anyone who's at the IETF is encouraged to stay over until Saturday and come to the Cypherpunks meeting too! - -- I hope to see everyone there! If you have questions about any of this, email me (I'm at IETF this week, but I'm wireless). If there are any last-minute announcements before Saturday, I'll post them. dave ________________________________________________________________________ Dave Del Torto +1.415.65432.31 tel Manager, Strategic Technical Evangelism +1.415.631.0599 fax Pretty Good Privacy, Inc. http://www.pgp.com web -----BEGIN PGP SIGNATURE----- Version: 2.6.3 Charset: noconv Comment: Verbum sapienti satis est. iQCVAwUBMq7z7KHBOF9KrwDlAQHcRQP/b/FOYPca2tN9mRlJXoLhgeI1swGESUHs 5CzTNcFq92EeiEeNYgq6Ri/itAzovTbt75AvJdfULrHrA48sQ9QGZy/qedRjNv+q w29a0olc9sRh3EpRvW83ioeju2pyJ5zynpu3wua8H5j6p4NAKJmnte0VzxL9n4KA Ezgov90jxuc= =j4Q1 -----END PGP SIGNATURE-----

1 0

Re: PICS is not censorship
by jbaber＠mi.leeds.ac.uk 17 Dec '03

17 Dec '03

Mike McNally <m5(a)vail.tivoli.com> writes: > jbaber(a)mi.leeds.ac.uk wrote: > > > > Not having a detailed knowledge of the American right to free > > speach I can only go on my opinions, but lieing with the intent > > to defraud would almost certainly be illegal over here. > > So where lies intent to defraud in the act of deliberately > mislabeling a web page? Why is that any different from me > standing on the street corner (or at Hyde Park Corner) announcing > that I'm the Messiah? I seem to have edited the previous message badly and left out the context which was false labeling on pages for which there was a charge to view. More along the lines of false advertising to be sure but still fraud in my opinion. Also, of course, it would be very hard to show that you were not, in fact, the Messiah (;->). Jon Baber jbaber(a)mi.leeds.ac.uk http://chem.leeds.ac.uk/ICAMS/people/jon

2 1