December 2003 - cypherpunks-legacy

CAST
by Ng Pheng Siong 17 Dec '03

17 Dec '03

Hi, Attended a presentation by Milkyway, vendor of the BlackHole firewall, which also does VPN. Supposedly the symmetric cipher used in the VPN is called CAST. Anyone has any info on it? TIA. Cheers. -- Ng Pheng Siong <ngps(a)pacific.net.sg> * Pacific Internet Pte Ltd * Singapore PGP: send mail with subject "send pgp key".

1 0

Constitutional Right to Annoy?
by Martin Minow 17 Dec '03

17 Dec '03

Today's New York Times web page's Cybertimes section has an article on a new lawsuit that claims a constitutional right to annoy. Among other things, annoy.com will provide a way to "send anonymous e-mail messages to public figures." They're suing the CDA. http://www.nytimes.com/library/cyber/week/013197annoy.html (Assuming I retyped it correctly.) Martin Minow minow(a)apple.com

1 0

"Secret" Postal Device stolen
by Jim Ray 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- from http://www.herald.com/dade/digdocs/021949.htm Postal Service offers $25,000 reward for stolen . . . something By ARNOLD MARKOWITZ Herald Staff Writer U.S. mail carriers carry more than just the U.S. mail. They carry something else so secret that nobody outside the Postal Service knows about it -- except four crooks who steal them from letter carriers on the streets of Miami. There's a $25,000 reward for tips producing capture and conviction. ... Comments? Please direct any replies for the list to me also, as I am still on Ray's FCPUNX, which I suppose makes this list double-filtered for me now, if a little delayed. :-) Typically, I now care what the mystery device is, since the occasionally-disgruntled ones don't want me to know. JMR -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEPAwUBMvIhGzUhsGSn1j2pAQEp5wfPQ1YsiZviksusdbdVQHBz9yKMOSt5z3Ue Utlmxzx8RExqjaTc/cSLORf55pBWbJiDFB+a+ev09I2iZujq7nlNNCZNI0NaHw2L RObAjBQ4YT7sekWYMw81y08zH9x49OmAhh7CCh2qzh5ZyQ0qc3YdFzmc8F00+jdW J9ZsXSvJaBS+Jvh/eIPH+IlD873hyk6T4Nrayt0xt2z6Ajvst0XK5vOLkeJobZg3 +x8IyS26/bcrWGkKD/4rK81/QDmLIyHG7oWzaJAR1q6UKCad0C1w6/i2dwWtWV1v RyXfyYTgXi8XPbieBL7RZmP0j3A0xqlCr4PASMuZskBa+g== =Kspp -----END PGP SIGNATURE----- Regards, Jim Ray <jmr(a)shopmiami.com> DNRC Minister of Encryption Advocacy One of the "legitimate concerns of law enforcement" seems to be that I was born innocent until proven guilty and not the other way around. -- me http://shopmiami.com/prs/jimray/ PGP id.A7D63DA9 98 1F 39 BA 93 86 B4 F5 57 52 64 0E DA BA 2C 71

1 0

Re: PGPMail 4.5 Released!
by Duncan Frissell 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- At 06:29 AM 1/31/97 -0500, you wrote: >And what happened to the $29 discount price they proposed for 2.6.3 users and viuacrypt users!!!!!!!!!!!! > I just email PGP sales with that question. DCF -----BEGIN PGP SIGNATURE----- Version: 4.5 iQCVAgUBMvJBCIVO4r4sgSPhAQEZ4wP/RWERsyjzsVURKR5rBZx3DKoj6dDDRvIP vNGbE3UnI/hqiRaZSf6P/36MnM2dQ8yIbbmlvsWV3N4m9moBUnvY6hy3elbwFTkE P+cICHcm3S0uW68aZ/vKK4sasg+WJgd+YLBwdQWkZc8GBn8Ut6mJE7sVXEiJWNMC WgFjwMALh7A= =j4+j -----END PGP SIGNATURE-----

2 1

Re: Cats Out of Bags
by sameer 17 Dec '03

17 Dec '03

> > "Other governments were upset with the 56-bit export allowance. > > They said it was going to undermine their national security." > > On this point, the other governments are correct. > It really _is_ tougher to maintain a nation-state when your > former subjects can have private conversations with each other > and with other governments' former subjects...... > And even 56 bits is a start. Full strength crypto is already available worldwide. It makes not one iota of difference. -- Sameer Parekh Voice: 510-986-8770 President FAX: 510-986-8777 C2Net http://www.c2.net/ sameer(a)c2.net

1 0

Key Security Question
by Z.B. 17 Dec '03

17 Dec '03

My computer went into the shop a few days ago, and I was unable to take my PGP keys off it before it went in. What are the security risks here? If the repairman chooses to snoop through the files, what would he be able to do with my key pair? Will I need to revoke the key and make a new one, or will I be relatively safe since he doesn't have my passphrase? Zach Babayco zachb(a)netcom.com <-------finger for PGP public key If you need to know how to set up a mail filter or defend against emailbombs, send me a message with the words "get helpfile" (without the " marks) in the SUBJECT: header, *NOT THE BODY OF THE MESSAGE!* I have several useful FAQs and documents available.

1 0

Re: CAST
by C. Kuethe 17 Dec '03

17 Dec '03

On Fri, 31 Jan 1997, Ng Pheng Siong wrote: > Hi, > > Attended a presentation by Milkyway, vendor of the BlackHole firewall, which also does VPN. > Supposedly the symmetric cipher used in the VPN is called CAST. Anyone has any info on it? > TIA. Cheers. It's a canadian cipher. It's inventors have the initials C.A. and S.T. pure coincidence they say. it's got a little write-up in Appl. Crypto 2, and I'll post anything I can about it as soon as I get home. I don't have my copy of ac2 on me... I do remember that it's patented, and you have to talk to these folks for licences I believe.... more to come later. PLUR chris -- Chris Kuethe <ckuethe(a)gpu.srv.ualberta.ca> LPGV Electronics and Controls <c100305(a)wolfcreek.cs.ualberta.ca> http://www.ualberta.ca/~ckuethe/ RSA in 2 lines of PERL lives at http://www.dcs.ex.ac.uk/~aba/rsa/ print pack"C*",split/\D+/,`echo "16iII*o\U@{$/=$z;[(pop,pop,unpack"H*",<> )]}\EsMsKsN0[lN*1lK[d2%Sa2/d0<X+d*lMLa^*lN%0]dsXx++lMlN/dsM0<J]dsJxp"|dc`

1 0

Re: Cats Out of Bags
by Bill Stewart 17 Dec '03

17 Dec '03

> "When I talk to other governments," [David L. Aaron] said, > "they still don't feel that the cat is out of the bag." Aaron's denying that the cat is out of the bag? He was fashionably dressed in a Lion Tamer's outfit, waving a whip, and trying to herd hundreds of small furry mammals to jump through a hoop and back into a clawed-up army duffel-bag! "Cats? Haven't seen any cats around here! Pay no attention to these,umm, Siberian Hamsters that I'm evaluating for export approval." > "Other governments were upset with the 56-bit export allowance. > They said it was going to undermine their national security." On this point, the other governments are correct. It really _is_ tougher to maintain a nation-state when your former subjects can have private conversations with each other and with other governments' former subjects...... And even 56 bits is a start. # Thanks; Bill # Bill Stewart, +1-415-442-2215 stewarts(a)ix.netcom.com # You can get PGP outside the US at ftp.ox.ac.uk/pub/crypto/pgp # (If this is a mailing list, please Cc: me on replies. Thanks.)

1 0

Re: Cats Out of Bags
by Vladimir Z. Nuri 17 Dec '03

17 Dec '03

PJ wrote me in email: >A slight correction. The ``bernstein etc.'' cases are not about the >right to have strong crypto. There is no United States law forbidding >one from having or using crypto, hard, soft, or squishy. Those cases >challenge regulations that keep one from publishing information about >crypto including cryptographic software. Even if it were made illegal >to use hard crypto, it would still be a violation of the First >Amendment for the government to require a license before one is >allowed to publish information about crypto or anything else. I consider it a violation of free speech if the government made "hard crypto" illegal. yes, these cases are generally challenging the publishing aspects of crypto in the US, but this is not what I consider the most important constitutional ingredient in favor of crypto. crypto is essentially a kind of speech, or communication. hence restricting it would be like outlawing a certain foreign language that the government doesn't understand. in my opinion, this is the most important, root case to be made for the use of crypto in this country. publishing crypto algorithms is only a side issue compared to this, imho. so the bottom line is this: crypto regulations can be challenged under the idea that they are restricting freedom of the press, i.e. for academics to discuss algorithms, or it can be challenged under freedom of speech issues, i.e. everyone has the right to use codes for whatever purpose. currently because the regulations prohibit the "export" of crypto code, the first route is the basic challenge that makes the most sense. but I'd like to see the ITAR challenged on the second grounds as well, i.e. as a free speech issue. there's less reason when the gov't is not trying to regulate domestic crypto, but it might be a relevant angle in the export debate. BTW, I understand that there are cases being made by Karn, Junger, and Bernstein, is that correct? with Junger being the most recent? does anyone have web pages dedicated to each one of these? thanks;

1 0

Quick question
by Chad Robinson 17 Dec '03

17 Dec '03

How does the current Linux IPSEC release work? Is it a kernel patch or module? A daemon? I'd love to try this out on a local LAN here to see it in action, but don't have too much time these days. Best regards, Chad --------------------------[ Chad Robinson (Task) ]---------------------------- Senior Systems Analyst chadr(a)brttech.com BRT Technical Services Corporation http://www.brttech.com/~chadr -----------------[ Why is `abbreviation' such a long word? ]------------------

1 0