December 2003 - cypherpunks-legacy

Cryptography Short Course
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text Date: Thu, 8 May 1997 22:09:58 -0400 (EDT) From: Christof Paar <christof(a)ece.WPI.EDU> To: DCSB <dcsb(a)ai.mit.edu> cc: Arlene Lowenstein <arlowenstein(a)jake.WPI.EDU> Subject: Cryptography Short Course MIME-Version: 1.0 Sender: bounce-dcsb(a)ai.mit.edu Precedence: bulk Reply-To: Christof Paar <christof(a)ece.WPI.EDU> WPI's Continuing Education Program is offering a 5-day short course in cryptography. I will be teaching the course from August 4-8, in Waltham. Waltham is 10 miles West of Boston. Please find below a detailed course description and a registration form. If you have any question about course contents etc., please feel free to contact me by email. For questions regarding registration, contact Arlene Lowenstein at: arlowenstein(a)jake.wpi.edu Best regards, Christof ************************************************************************* Christof Paar http://ee.wpi.edu/People/faculty/cxp.html Assistant Professor email: christof(a)ece.wpi.edu Cryptography Group phone: (508) 831 5061 ECE Department, WPI fax: (508) 831 5491 100 Institute Road Worcester, MA 01609, USA ************************************************************************* ----------------------------------------------------------------------- Worcester Polytechnic Institute 5-Day Short Course APPLIED CRYPTOGRAPHY AND DATA SECURITY Seminar Leader: Dr. Christof Paar Many of today's information technology applications have data security as a central system requirement. Applications such as wireless computer networks, electronic commerce, and many www applications rely heavily on a high degree of system security. This five-day course will provide you with an in-depth introduction to the field of applied cryptography. Virtually all important aspects of public-key and private-key algorithms as well as protocols will be introduced. The course keeps the theoretical background and technical applications well-balanced. You will leave the course with a solid, broad knowledge of state-of-the-arts cryptography. You will have skills to carefully choose and design a security scheme for a given application. Background Note: The seminar is based on a highly successful course which has been taught to more than 150 professionals in industry and graduate students on campus. COURSE OUTLINE Day 1, AM - Introduction Principles of cryptography. Classical algorithms. Attacks on cryptographic systems. Day 1, PM - Private-key algorithms Stream ciphers. Pseudo-random generators. One-time pads. Day 2, AM - Private-key algorithms Data Encryption Standard (DES): Function, performance, implementation, security. Overview on other modern block ciphers. Key length and long-term security. Day 2, PM - Usage of private key-algorithms Operation modes of block ciphers. Multiple encryption. Key whitening. Day 3, AM - Public-key cryptography Introduction. One-way functions. Some number theory. Day 3, PM - Public-key algorithms RSA: Function, performance, implementation, security. Recent attacks. Day 4, AM - Public-key algorithms The generalized discrete logarithm problem. Diffie-Hellman key exchange. ElGamal encryption. Elliptic curve cryptosystems. Day 4, PM - Protocol building blocks Digital Signatures. Hash Functions. Security Services: Privacy, authentication, integrity, identification, non-repudiation. Day 5, AM - Key distribution Key distribution protocols. Principle of Kerberos. Certificates. Trusted authorities. Day 5, PM - Identification Smart Cards. Principles of identification. Challenge-and-response protocols. Course summary. WHO SHOULD ATTEND Engineers and other technical professional who develop, implement, or assess information security applications in software or hardware. Technical managers who need a solid understanding of data security issues will also greatly benefit from the course. ABOUT THE INSTRUCTOR Dr. Christof Paar leads the Cryptography and Data Security group at WPI's ECE Department. His research interests include security issues in wireless and ATM networks, efficient algorithms for elliptic and hyperelliptic curve systems, and hardware implementation of cryptosystems. DATES AND LOCATIONS August 4 - 8, 1997 in Waltham, MA (10 miles from Boston) FEE $1795 for first registration $1625 for subsequent registrations --------------------- print and cut here ----------------------------- WPI CONTINUING EDUCATION REGISTRATION FORM Please print out, complete, and return this form to Office of Continuing Education, WPI, Worcester, MA 01609-2280, call (508) 831-5517 or FAX this form to (508) 831-5694. Make copies of this form for multiple registrations. Title of Seminar: APPLIED CRYPTOGRAPHY AND DATA SECURITY Date of Seminar: August 4-8, 1997, WPI Waltham Campus, Waltham, MA Name (Mr.)(Ms.) ___________________________________________________ Title _____________________________________________________________ Organization ______________________________________________________ Business Address __________________________________________________ City _______________________________________ State ________ Zip _________________________ Business Phone ____________________________ FAX _____________________ Home Phone ______________ Fee Enclosed (Make checks payable to WPI) ______ Bill my Company, P.O.# __________ Please charge my: VISA Mastercard Discover Name on card ________________________________________________ Exp. date _____________________ Card # ______________________________________________________ Signature ___________________________________________________ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ To unsubscribe from the dcsb list, send a letter to: Majordomo(a)ai.mit.edu In the body of the message, write: unsubscribe dcsb Or, to subscribe, write: subscribe dcsb If you have questions, write to me at Owner-DCSB(a)ai.mit.edu --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' The e$ Home Page: http://www.shipwright.com/

1 0

Re: Banking Secrecy and Nazi Gold
by Rich Graves 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- According to the archives, Tim May wrote: > I suspect the U.S. pressure on Swiss banks has a political dimension > related to forcing a New World Order on international banking. The > U.S. wants banking secrecy subject to U.S. control (so that banks > like Castle Bank, Nugan Hand Bank, Banco Ambrosiano, BCCI, and the > Bank of America can continue to be used for U.S. interests, and > only U.S. interests). I think this is the first time I've ever said this about Tim, whom I usually read first, but "That's nuts." The political game is simple: The Wiesenthal Center and the World Jewish Congress are in a pissing contest to see who can recover the most cash. (There are two different class action lawsuits going, one from each organization.) Senator Alphonse "I Love to Make Noise" D'Amato is pandering. Some former members of the intelligence community are involved, but that shouldn't be surprising given the fact that they grew up as Nazi hunters. In general I agree with Tim's argument and the mean (if not all the details) of the followups, but I'd like to restress a few things: 1) The reason Jews used Swiss banks is precisely that they were secret, fercryingoutloud. 2) Sure, some banks took advantage of the power disparity (even if the victims had little guarantee that they'd be able to recover their assets, if they didn't squirrel them away soon they'd be sure to go to the Nazis). That makes them scum. But screwing with bank secrecy ain't the way to fix that Reputation Problem. 3) The reason governments and not just banks & individuals are involved is that some unclaimed deposits went to the government, which sent them off to Eastern Europe. - -rich http://www.stanford.edu/~llurch/ -----BEGIN PGP SIGNATURE----- Version: 4.5 iQBVAwUBM3LIZpNcNyVVy0jxAQERfgIAiaOqRZrwRxyNWqRUo0ypLT4WDzawsdvB VxiYN3E/nw5k9ZL7AUQQes2AJHS3tDaN086rflJ0GHUwg4TFA8Vsng== =shYb -----END PGP SIGNATURE-----

1 0

Re: e$: In Vino Veritas
by Stephen Cobb, CISSP 17 Dec '03

17 Dec '03

Robert Thanks so much for a truly enjoyable and thought-provoking piece of writing. It gladdens my heart to know that there are still people out there who know what happened to the Romantics! But you do have to be careful about typing behavior with age. I live in Florida and yes, we have a lot of old folks, but a sadly significant number of the moralists are in their 20s and 30s. In Brevard County where I live (and shuttles are launched) they have banned nude sunbathing, even on Federal property (also thong bikinis and male swim wear that "permits discernible turgidity" -- by this standard most of the Olympic finalists in the men's 100 meters would have been breaking the law if Brevard County had been hosting). Much of the ban-the-nudist lobbying was done people well under 40. There was a great moment at the televised County meeting when a frail old man made his way to the podium and we all braced for another "skin is sin" speech. But this is what he said "I'm a nudist and believe me, you have no idea who else is." So, it is not age that makes folks stupid. My mother took me on a ban-the-bomb march when I was 6. I helped disrupt a tour by the all-white South African rugby team when I was 17. But in the town were I grew up we had both hippies and Nazi-loving, Paki-bashing skinheads (I use the term Paki-bashing only because that is what people called it). We also had Young Conservatives, aging beatniks, and leftists who were so far left they actually admired Stalin (they were so screwed up that, despite being atheists, they protested the British government's decision to deny a priest, jailed for helping the IRA blow up parts of Coventry, conduct mass in prison). Me, I'm 45 and hope I will be my own kind of libertarian until I die. My mother is in her 70s and still working for the cause of freedom and dignity. My brother quit banking to write security software, some of which is causing brains to hurt at the UK's DTI. But getting back to prohibition, do the words "when will they ever learn?" strike a chord? It is so damn obvious that prohibition=organized crime I can't believe it isn't genetic already, like not eating things that smell rotten. But I digress. A book worth reading on the subject, if only for the examples and footnotes, is "Ain't Nobody's Business If You Do: The Absurdity of Consensual Crimes in a Free Society" by Peter McWilliams Now available in paperback, published by Prelude Press. Personally, I look forward to reading more of your postings. Stephen Certified Information Systems Security Professional Owner, Cobb Associates: "An independent information technology & security consulting firm...since 1987" "The best weapon with which to defend information.. ..is information." Cobb, Guide to PC & LAN Security 2825 Garden, Suite 7-11, Titusville, Florida 32796 Tel: 1 407 383 0977 Fax: 0336 Email: stephen(a)iu.net Try http://www.2cobbs.com & http://www.cobweb.co.uk

1 0

FREE REFERRAL SERVICE
by MOBILE.CONNECTION＠texoma.net 17 Dec '03

17 Dec '03

HELLO!! THIS IS TO INFORM YOU THAT THERE IS NOW A FREE DOCTORS REFERRAL SITE FOR ALL CONCERNED PEOPLE LOOKING FOR QUAILIFIED DOCTORS,IN ALL 50 STATES. PLEASE LET YOUR DOCTORS KNOW THAT THIS SITE IS AVAILABLE, IF HIS NAME IS NOT YET POSTED, KINDLY PASS ON HIS INFORMATION SO WE CAN POST IT. DOCTOR'S INFORMATION REQUESTED: NAME TYPE OF SPECIALIST ADDRESS TELEPHONE STATE AND TOWN THE SITE IIS LOCATED AT: http://www.mobilconnect.net/ THANK AGAIN JOHN ......................................................................................................................................................... ALSO AT MY SITE ARE THE LINKS TO THE GREATEST CONNECTIONS TO ALL OF THE BEST SEARCH SITES THOUGHOUT THE WORLD. FOR PERSONS WHO WOULD LIKE FREE E-MAIL ADDRESSES, HERE ARE 2 THOUSAND THAT I COLLECTED RECENTLY,(the e-mail address are changed often) FREE, ALSO IS THE GREATEST BULK E-MAILER DEMO PROGRAM ..MY SPECIAL PRICE IS $100.00 ,(program only) , SO, DOWN LOAD THE DEMO AND AGREE WITH ME,, IT IS EQUAL TO THE BEST ONES OUT THERE RANGING FROM PRICES $300-$400. People who have there own WEB SITE now you can get the the best program to put yourself on al search engines automactly, and it updates itself and sends to new search engines, demo available People who do not want this program , can register with us and we send to all 200 plus sites, for a small fee. CIGAR LOVER WE HAVE GREAT TASTEING CIGARS AT UN- BEATABLE PRICES, GO TO OUR SITE FOR MORE INFORMATION NOTICE : I AM NOT SENDING BY A LIST , SO THERE IS NO REMOVAL AT THIS TIME.

1 0

64-bit CPU 10x faster in crypto?
by Bill Stout 17 Dec '03

17 Dec '03

During a Digital seminar, a statement was made that 64-bit CPUs are about 10x faster than a 32-bit CPU in dealing with crypto, and that Alphas are favorites of Crypto-affiliated Gov't agencies. I spoke with a reference within Digital and the following logic was presented: o A 128-bit key is processed in two 64-bit chunks, vs four 32-bit chunks, greatly reducing processing time. o The Alpha executes four instructions per clock cycle. o Alpha clock ratings are 600MHz this summer. o Caveat: The O.S. needs to support 64-bit processing (Digital UNIX or Linux, not NT). I'm concerned about the strength of personal/corporate crypto in face of large jumps in processing power. I do not subscribe to cypherpunks due to the volume, so please respond to me directly on this question. stoutb(a)pios.com Bill Stout

2 1

Re: [ADMINISTRATIVIUM] Cyclic codes
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

There's a rumor that Timmy May sells his dead relatives as fertilizer as they constitute the best shit in California. <<<< o(0-0)o -ooO-(_) Ooo-- Timmy May

2 1

EAR Revisions
by John Young 17 Dec '03

17 Dec '03

BXA has published in today's Federal Register a final rule for revisions and clarifications to all Parts of the EAR. Encryption is affected. http://jya.com/ear050997.txt (123K)

1 0

nyt coverage of 'new' US export policy
by Ariel Glenn 17 Dec '03

17 Dec '03

May 9, 1997 U.S. To Ease Rules on Export Of Finance Encryption Technology By JOHN MARKOFF G iving ground on the Clinton administration's computer-data privacy policy, the Commerce Department said Thursday that it would begin in some cases to allow export of the most powerful data-scrambling technologies when used for securing financial transactions. The move departs from previous export policy, which had allowed export of the U.S. computer industry's most powerful privacy-protection software and hardware only if the technology enabled law-enforcement officials to obtain copies of the mathematical keys needed to break the codes. The revised policy would require no such code-breaking proviso in the case of certain types of financial transactions. Besides international funds transfers between banks, permissible applications under the new policy are expected to include privacy-protected home-banking software for banks to offer to customers worldwide. The new policy would also apply to a technology known as the Secure Electronic Transaction standard, which has been developed by Mastercard and Visa to permit consumers to send credit card information to merchants electronically. Computer-data scrambling, or cryptography, is widely seen as the most crucial technology underlying a wide range of new computerized communications and commerce applications. But the Clinton administration, as did the Bush administration, has limited export of the most powerful U.S. encryption technology, for fear it would enable foreign criminals or terrorists to conspire with electronic impunity. Privacy-rights advocates have opposed the government's policy, fearing Big Brother intrusiveness if law-enforcement officials could obtain code keys. And industry officials have argued that because data-scrambling technology is already widely available overseas, the export laws have forced U.S. companies to miss out on a thriving foreign market. Banks and other financial institutions, meanwhile, have complained that the policies made it difficult to insure the security of electronic-funds transfers between the United States and foreign countries. But word of the new rules drew concern from critics of the administration's data-scrambling policies, who said the banking industry would receive unfair business advantages. "There is a danger of creating a cartel-like environment that gives banks advantages over many of the current leaders in electronic commerce," said Laurie Fena, the executive director of the Electronic Frontier Foundation, a public policy group in San Francisco. Historically, U.S. banking and financial institutions have been given special exemptions to export data-scrambling equipment based on the 20-year-old Data Encryption Standard. But the big increase in computer processing power in recent years has made that standard appear increasingly vulnerable, and the government has been under pressure to permit the export of strong encryption technology for financial purposes. Administration officials said the new rules would be published soon. Until then, it is unclear whether the definition of financial institutions and transactions may now be broad enough to include software makers like Netscape Communications Corp., which produces the most popular software for navigating the Internet's World Wide Web. _________________________________________________________________ Related Articles IBM Announces New Encryption Formula (May 7,1997) U.S. Restrictions Give European Encryption a Boost (April 7,1997) _________________________________________________________________ Netscape's software has a component for insuring secure financial transactions; but under current export law, that ability must be weakened or disabled when its Web-navigating software is shipped overseas. "It's very heartening to see the administration finally admitting that there are products overseas that are cutting into our markets," said Peter Harter, the lawyer in charge of global public policy for Netscape. "It's unfortunate to have to watch this happening from the back of the bus." Home | Sections | Contents | Search | Forums | Help Copyright 1997 The New York Times Company _________________________________________________________________ IBM WWWDirectory

1 0

Re: El Gamal
by Ariel Glenn 17 Dec '03

17 Dec '03

>> Is El Gamal used in the source for PGP 3.0? > >I don't know, no one's exported the source to pgp3.0 in electronic >form, and I haven't seen the books either. I have the books; ElGamal is indeed one of the algorithms in use in the 3.0 pre-alpha code. Ariel Glenn / AcIS R&D / Columbia University ariel(a)columbia.edu #include <stddisclaimer.h>

1 0

"constructive" possession of a gun
by William H. Geiger III 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Senate Judiciary Committe -- 08 May 1997 Well the JackBoots are at it again. Under current Federal Law 5yrs can be tacked on to a criminal sentance if a gun is used in the commision of a crime. Now they have a new twist to add: "constructive" possession of a gun during the commision of a crime. Now what does "constructive" possession mean? Well according to those who testified from the various depts of the Excutive Branch it means that a gun happens to be in the area, or the potential to use a gun or if you recoment that someone else use a gun durring the commission of a crime even though the weapon was never used. Some examples given: If durring the planning of a bank robbery you recomend that a gun be used durring the robbery even though you did not use the weapon or was not even present durring the robbery you could still get the extra 5yrs. If durring a drug deal taking place in the back seat of a car there is a gun under the front seat of the car you would still get the extra 5yrs even though the the gun was never used. If durring a drug raid on your home and a gun is found anywhere in the house, yes you would be elegible for the extra 60 months. <sigh> why do they even pretend to be running a constitutional government? - -- - ----------------------------------------------------------- William H. Geiger III http://www.amaranth.com/~whgiii Geiger Consulting Cooking With Warp 4.0 Author of E-Secure - PGP Front End for MR/2 Ice PGP & MR/2 the only way for secure e-mail. Finger whgiii(a)amaranth.com for PGP Key and other info - ----------------------------------------------------------- Tag-O-Matic: "640K ought to be enough for anybody." - Bill Gates, 1981 -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Registered User E-Secure v1.1 ES000000 iQCVAwUBM3KQGo9Co1n+aLhhAQEHkAQAtBlcEtyXzRNKKI7HtEx0H1glMGmlzN+8 cQD91dlgHhNbN24C5Ixq+hDBvBYWTs0yUY8fHOIgMo5HqQWRr4VMG2yrfcM42vyH LuhKuldAYem4mKWoEm4wl0LYTxn18r0w/4f5NCT3VN+7aTrrme6QjYkN7BXNr6lU Mxd1YGeAFzM= =ZpFe -----END PGP SIGNATURE----- Tag-O-Matic: OS/2 means...CURTAINS for Windows!

1 0