December 2003 - cypherpunks-legacy

Key Security Question
by Z.B. 17 Dec '03

17 Dec '03

My computer went into the shop a few days ago, and I was unable to take my PGP keys off it before it went in. What are the security risks here? If the repairman chooses to snoop through the files, what would he be able to do with my key pair? Will I need to revoke the key and make a new one, or will I be relatively safe since he doesn't have my passphrase? Zach Babayco zachb(a)netcom.com <-------finger for PGP public key If you need to know how to set up a mail filter or defend against emailbombs, send me a message with the words "get helpfile" (without the " marks) in the SUBJECT: header, *NOT THE BODY OF THE MESSAGE!* I have several useful FAQs and documents available.

1 0

Re: CAST
by C. Kuethe 17 Dec '03

17 Dec '03

On Fri, 31 Jan 1997, Ng Pheng Siong wrote: > Hi, > > Attended a presentation by Milkyway, vendor of the BlackHole firewall, which also does VPN. > Supposedly the symmetric cipher used in the VPN is called CAST. Anyone has any info on it? > TIA. Cheers. It's a canadian cipher. It's inventors have the initials C.A. and S.T. pure coincidence they say. it's got a little write-up in Appl. Crypto 2, and I'll post anything I can about it as soon as I get home. I don't have my copy of ac2 on me... I do remember that it's patented, and you have to talk to these folks for licences I believe.... more to come later. PLUR chris -- Chris Kuethe <ckuethe(a)gpu.srv.ualberta.ca> LPGV Electronics and Controls <c100305(a)wolfcreek.cs.ualberta.ca> http://www.ualberta.ca/~ckuethe/ RSA in 2 lines of PERL lives at http://www.dcs.ex.ac.uk/~aba/rsa/ print pack"C*",split/\D+/,`echo "16iII*o\U@{$/=$z;[(pop,pop,unpack"H*",<> )]}\EsMsKsN0[lN*1lK[d2%Sa2/d0<X+d*lMLa^*lN%0]dsXx++lMlN/dsM0<J]dsJxp"|dc`

1 0

Re: Cats Out of Bags
by Bill Stewart 17 Dec '03

17 Dec '03

> "When I talk to other governments," [David L. Aaron] said, > "they still don't feel that the cat is out of the bag." Aaron's denying that the cat is out of the bag? He was fashionably dressed in a Lion Tamer's outfit, waving a whip, and trying to herd hundreds of small furry mammals to jump through a hoop and back into a clawed-up army duffel-bag! "Cats? Haven't seen any cats around here! Pay no attention to these,umm, Siberian Hamsters that I'm evaluating for export approval." > "Other governments were upset with the 56-bit export allowance. > They said it was going to undermine their national security." On this point, the other governments are correct. It really _is_ tougher to maintain a nation-state when your former subjects can have private conversations with each other and with other governments' former subjects...... And even 56 bits is a start. # Thanks; Bill # Bill Stewart, +1-415-442-2215 stewarts(a)ix.netcom.com # You can get PGP outside the US at ftp.ox.ac.uk/pub/crypto/pgp # (If this is a mailing list, please Cc: me on replies. Thanks.)

1 0

Re: Cats Out of Bags
by Vladimir Z. Nuri 17 Dec '03

17 Dec '03

PJ wrote me in email: >A slight correction. The ``bernstein etc.'' cases are not about the >right to have strong crypto. There is no United States law forbidding >one from having or using crypto, hard, soft, or squishy. Those cases >challenge regulations that keep one from publishing information about >crypto including cryptographic software. Even if it were made illegal >to use hard crypto, it would still be a violation of the First >Amendment for the government to require a license before one is >allowed to publish information about crypto or anything else. I consider it a violation of free speech if the government made "hard crypto" illegal. yes, these cases are generally challenging the publishing aspects of crypto in the US, but this is not what I consider the most important constitutional ingredient in favor of crypto. crypto is essentially a kind of speech, or communication. hence restricting it would be like outlawing a certain foreign language that the government doesn't understand. in my opinion, this is the most important, root case to be made for the use of crypto in this country. publishing crypto algorithms is only a side issue compared to this, imho. so the bottom line is this: crypto regulations can be challenged under the idea that they are restricting freedom of the press, i.e. for academics to discuss algorithms, or it can be challenged under freedom of speech issues, i.e. everyone has the right to use codes for whatever purpose. currently because the regulations prohibit the "export" of crypto code, the first route is the basic challenge that makes the most sense. but I'd like to see the ITAR challenged on the second grounds as well, i.e. as a free speech issue. there's less reason when the gov't is not trying to regulate domestic crypto, but it might be a relevant angle in the export debate. BTW, I understand that there are cases being made by Karn, Junger, and Bernstein, is that correct? with Junger being the most recent? does anyone have web pages dedicated to each one of these? thanks;

1 0

Quick question
by Chad Robinson 17 Dec '03

17 Dec '03

How does the current Linux IPSEC release work? Is it a kernel patch or module? A daemon? I'd love to try this out on a local LAN here to see it in action, but don't have too much time these days. Best regards, Chad --------------------------[ Chad Robinson (Task) ]---------------------------- Senior Systems Analyst chadr(a)brttech.com BRT Technical Services Corporation http://www.brttech.com/~chadr -----------------[ Why is `abbreviation' such a long word? ]------------------

1 0

RC5-12/32/5 contest solved. Who gets a credit?
by Yuri Sorkin 17 Dec '03

17 Dec '03

stewarts(a)ix.netcom.com Tue, 28 Jan 1997 21:37:57 -0800 At 09:55 PM 1/28/97 +0100, Germano Caronni <caronni(a)tik.ee.ethz.ch> wrote: >challenge: RC5-32/12/5 >time: from start of contest until Tue Jan 28 21:54:58 1997 >method: massive distributed coordinated keysearch, details later which was a bit slower than Ian Goldberg's crack, but pretty close. --------------------------------------------------------------------------- Huh!? Goldbeg's announce states that he spent about 3.5 hours, i.e. a solution came not earlier than 12.30 PST, while Caronni got it at 11.55 am PST. Yuri Sorkin

1 0

Re: PGPMail 4.5 Released!
by Alan 17 Dec '03

17 Dec '03

On Fri, 31 Jan 1997, Duncan Frissell wrote: > -----BEGIN PGP SIGNED MESSAGE----- > > At 06:29 AM 1/31/97 -0500, you wrote: > >And what happened to the $29 discount price they proposed for 2.6.3 users and viuacrypt users!!!!!!!!!!!! > > > > I just email PGP sales with that question. I just got off the phone with PGP sales. Currently PGPMail is only available off if the web site for download. The version on disk will be available sometime mid February. So it looks like if you want it now it is going to cost you $149. If you wait until mid February, you can get it at the lower price (plus $10 shipping and handling). BTW, it does use SSL on the order form, though I have my doubts about the security of sending form data from an insecure page to a secure form cgi.

1 0

Re: Cats Out of Bags
by Vladimir Z. Nuri 17 Dec '03

17 Dec '03

PJ wrote me in email: >A slight correction. The ``bernstein etc.'' cases are not about the >right to have strong crypto. There is no United States law forbidding >one from having or using crypto, hard, soft, or squishy. Those cases >challenge regulations that keep one from publishing information about >crypto including cryptographic software. Even if it were made illegal >to use hard crypto, it would still be a violation of the First >Amendment for the government to require a license before one is >allowed to publish information about crypto or anything else. I consider it a violation of free speech if the government made "hard crypto" illegal. yes, these cases are generally challenging the publishing aspects of crypto in the US, but this is not what I consider the most important constitutional ingredient in favor of crypto. crypto is essentially a kind of speech, or communication. hence restricting it would be like outlawing a certain foreign language that the government doesn't understand. in my opinion, this is the most important, root case to be made for the use of crypto in this country. publishing crypto algorithms is only a side issue compared to this, imho. so the bottom line is this: crypto regulations can be challenged under the idea that they are restricting freedom of the press, i.e. for academics to discuss algorithms, or it can be challenged under freedom of speech issues, i.e. everyone has the right to use codes for whatever purpose. currently because the regulations prohibit the "export" of crypto code, the first route is the basic challenge that makes the most sense. but I'd like to see the ITAR challenged on the second grounds as well, i.e. as a free speech issue. there's less reason when the gov't is not trying to regulate domestic crypto, but it might be a relevant angle in the export debate. BTW, I understand that there are cases being made by Karn, Junger, and Bernstein, is that correct? with Junger being the most recent? does anyone have web pages dedicated to each one of these? thanks;

1 0

Re: Libel & the 1st Amendment
by Mark M. 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- On Thu, 30 Jan 1997, Jim Choate wrote: > > * Many 1st Amendment experts don't believe in the legal concept of libel. > > It is, they say, a rich man's game > > Exactly, instead of equal protection under the law we have a specieocracy. Anyone can afford a contingency-free attorney as long as the plaintiff has a good chance of being awarded damages. This has the benefit that the legal system doesn't get overcrowded with frivolous cases. > > -- if I'm libeled by the NYT, I'm > > probably not going t be able to sue them, but Donald Trump can. Moreover, > > if I don't have the resources to sue but the statement is libelous, it > > creates a *presumption* in the minds of the readers that the article is > > certainly true. (If it were not, I would have sued, right?) > > Another good example of why our system is broke. If the legal concept of libel is abandoned, this presumption will largely disappear. People will have to rely on the credibility of the source, instead of whether or not the victim of libel has sued. Mark -----BEGIN PGP SIGNATURE----- Version: 2.6.3 Charset: noconv iQEVAwUBMvJkASzIPc7jvyFpAQESzAf+Km41fJ4vhavBizPODBuzM8OpolOHFUIy N45inFeUGtsaPH5BBz0T4blAlfgKoYU7N72E/nxbLx+QHZ42oQxcsvtoxiS/zjW8 ilygkVyVxsokueexwLo1QbBn87XIYHbyJBX2Tom31I5iw67caMAfKibnQoVEb1/r 8wlLe00CVB/rkob3QMO1VpT+FLl68+qjo+xfvCNe/GyyvJe0soppnh+croNSWA7R uksNa18XENdntBmy5UDqyCrTfLI40rZkd4wYoTkOy7K2eq1cz2uSO9J2BJOpHnh6 zh4JtXI5UVYOvj3BMbYe0v7Cs/V+1e/eLtqyMNvFGNM2jdl2f39G6w== =lYDr -----END PGP SIGNATURE-----

2 2

Re: Denial of service attack
by nobody＠huge.cajones.com 17 Dec '03

17 Dec '03

Dimwit Virus K[arcinogen]OfTheMonth styles his facial hair to look more like pubic hair. \|/ @ @ -oOO-(_)-OOo- Dimwit Virus K[arcinogen]OfTheMonth

1 0