December 2003 - cypherpunks-legacy

Zero-knowledge interactive proofs
by nobody＠huge.cajones.com 17 Dec '03

17 Dec '03

Tim Maytag, a product of anal birth, appeared with a coathanger through his head. /_/\/\ \_\ / /_/ \ \_\/\ \ \_\/

2 1

Microsoft ammunition (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Thu, 27 Mar 1997 16:11:50 -0600 > From: Toto <toto(a)sk.sympatico.ca> > Subject: Microsoft ammunition > But, if you're tired of the repetition, here's a > reason you should sit through another sermon: > RandomNoise's Coda. Coda lets you design entire > Web pages in Java rather than use a mixture of > HTML content, tags, and Java applets. > > A Java-based Web page removes the distinction > between application and data. It presents data > just as an HTML page would, but every element on > the screen has the potential to be an interactive > part of a sophisticated application. Mix this with the distributed processing model of Plan 9 and you may just have tomorrows computer environment. Jim Choate CyberTects ravage(a)ssz.com

1 0

Re: remailer spam throttle
by dlv＠bwalk.dm.com 17 Dec '03

17 Dec '03

Hal Finney <hal(a)rain.org> writes: > For example, one idea is to have a list of people who are willing to > receive anonymous mail without questions. It could be that the remailer > is set up to ask before sending mail normally, but to people on such a > list it doesn't have to ask, it just sends it, because they have given > permission. > > Some people have objected to this proposal because the existence of the > list might give a hint about which people send mail through the remailers. > Even though the list is of people willing to *receive* anonymous mail, > it could well be that there is a strong correlation with people who want > to send such mail. Instead of keeping this list in cleartext, one could keep 1-way hashes of the addresses. Thus a remailer (or anyone) can check whether a given address is on the list, but they can't just go through the list and "investigate" the addresses on it. --- Dr.Dimitri Vulis KOTM Brighton Beach Boardwalk BBS, Forest Hills, N.Y.: +1-718-261-2013, 14.4Kbps

5 9

Re: Analysis of proposed UK ban on use of non-escrowed crypto.
by Hallam-Baker 17 Dec '03

17 Dec '03

Kent Crispin wrote: > Thus, in PGPs case at least, if you want escrowed encryption, then > you must escrow the signature key. Hence the DSA which is a signature algorithm that does not do encryption. I think the use of the same key for both is a bad idea BUT note that if you have a secure signature scheme you don't need an encryption key at all. Simply generate yourself a fresh set of public key parameters for each communication in the manner of IPSEC. The hard problem of setting up security is knowing the identity of the other party. All else pales into insignificance in comparison. Consider the following scenario. SMTP is adjusted so that it has a DH key exchange crypto option. A typical conversation becomes:- EHELO You-got-crypto-mate? 269 Yeah I have crypto XCHAL RSA 248af23876acdef 270 [key-id] [DHparameters e, n, e^x mod n] [sig-of-challenge+DH-params] XENCRYPT [IV] [e^y mod n] [Conversation continues encrypted under key e^y^x mod n AND keybits padding out messages as appropriate.] Now this type of scheme could be implemented without a certificate infrastructure and severly increase the difficulty of snooping. In that case the message would be sent even though [sig-of-challenge+DH-params] was absent. But with a CA infrastructure you could make sure that you hads contacted the correct machine, one authorised to accept mail for fred(a)ibm.com] all you need is a means of hacking the following assertion into X509v3: "Is authorized user of DNS namespace identifier matching" Add in a date and the protocol could be made very reilient and entirely transparent. Now that mail is moving away from godamn awfull crap like sendmail towards engineered systems like notes or exchange adding in protocol extensions becomes easier. If the mail sending agent knows that mail to a particular host should be sent encrypted the system can be made much more transparent than PGP or S/MIME. Like the punters might be able to use it without getting screwed too often. I think email security has often been the perfect being the enemy of the good. One huge problem has been braindamaged ideas about routing email through store and forward mailers rather than connecting to the real destination to start with. Phill

1 0

Re: OECD: No GAK
by John Young 17 Dec '03

17 Dec '03

>Is this in reference to the various GAK initiatives by the administration >or are they finally pushing for forced restrictions on domestic crypto? Has >anyone seen these drafts? I assume that the draft KRAP legislation at CDT Peter Junger cited here is what Markoff refers to: http://www.cdt.org/crypto/970312_admin.html Anyone know of other KR/TTF drafts in the US, UK, FR, JP, AU or elsewhere among the 29 signators of Wassenaar? The Wassenaariors have a wider ambition than the OECDistes.

1 0

Bay Area Anarchist Book Fair, Saturday 3/29
by Bill Stewart 17 Dec '03

17 Dec '03

10am-6pm, S.F. County Fair Building, Golden Gate Park, 9th Ave at Lincoln Way. Free. +1-415-431-8355 Bound Together Books is organizing it, as usual. # Thanks; Bill # Bill Stewart, +1-415-442-2215 stewarts(a)ix.netcom.com # You can get PGP outside the US at ftp.ox.ac.uk/pub/crypto/pgp # (If this is a mailing list, please Cc: me on replies. Thanks.)

1 0

The Upside of Higher Source's Actions
by Toto 17 Dec '03

17 Dec '03

There's 39 new job openings in San Diego. (Astral travellers only, need apply.) -- Toto "The Xenix Chainsaw Massacre" http://bureau42.base.org/public/xenix/xenbody.html

1 0

No Subject
by Mix 17 Dec '03

17 Dec '03

Timothy C[reep] May's family tree goes straight up. All of his ancestors were siblings, to dumb to recognize each other in the dark. /\ o-/\ Timothy C[reep] May ///\|/\\\ / /|\ \

2 1

Re: The Blessing of Keys
by Toto 17 Dec '03

17 Dec '03

Hal Finney wrote: > I don't know about Tim's idea of claiming that a key signature is a > religious act. That sounds pretty bizarre to me. I wouldn't be so certain about that. Give the CypherPunks history of treating PGP as a Holy Icon, I think a good case could be made for building a religion around key signatures. Apparently, however, not all CypherPunks can be considered 'True Believers'. I, among others, checked out the information in the anonymous post which indicated press reports of the RSA algorithm being broken. I suppose that now I will be denied the opportunity to partake of the PGP Sacrament at the next CypherMass. -- Toto "The Xenix Chainsaw Massacre" http://bureau42.base.org/public/xenix/xenbody.html

1 0

Mutual Link Proposal
by mail＠mkljk.com 17 Dec '03

17 Dec '03

Hello, my name is Guy W. Rochefort, President of Dino Jump International. I found your address through YAHOO. Dino Jump International are specialists in manufacturing and distribution of Interactive Inflatables worldwide. My lines have been featured in Walt Disney productions, NFL shows, and NBA events. Our product lines include moonwalkers, bouncehouses, and castles. I am interested in mutual links on our respective webpages beneficial to both our businesses. Additionally, I am interested in opening dialog on mutual beneficial business dealings as far as wholesale/retail efforts for manufactured products from my factory and/or resale distribution at competitive pricing. Please come visit my site at http://www.dinojump.com or email sales1(a)dinojump.com or call me at 1-800-570-3466 or 619-754-5186. If this email is intrusive I apologize and you will not hear further from me. Thank you again and I am looking forward to doing business with you. Guy

1 0