December 2003 - cypherpunks-legacy

RE: Update on New Zealand crypto policy
by Brian B. Riley 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- On 1/26/98 3:30 PM, Ernest Hua (Hua(a)teralogic-inc.com) passed this wisdom: >Need help: Can anyone get to this URL? > >Ern > [snip] > > http://www.cs.auckland.ac.nz/~pgut001/policy/ > I got to it with no problems on first try from East Coast USA. -----BEGIN PGP SIGNATURE----- Version: PGP for Personal Privacy 5.0 Charset: noconv iQEVAwUBNM0glz7r4fUXwraZAQFRGQf9F4R1EhPLwsSP84l5QcKk6KMhU341ox36 PincU6VSpYR8bq7CMSMh7G5f/H+3MkXNpnStGGI2H/jr/ggj+VeFtAZE/8WG5Mvw RbzbHxXKxq5one7kNc8qWMtWyd5vh6T+WUcyotUdvVBM5LAwP6sgv60vRsslbAYq 8jx4CMcWi8AM49vZknWAVQ+0QKWXthD5ltMFyLK8racRmIccFCsn//hDY0m7P+4I fbA3uKY5ESnJA5dUMCdree9tqB55R8iW/BdSKodemiO56FdClVOBdynVBFrchmGr zauO82EwceXiG3m2R44Zd7XPp0OfupzkB5+qZgWTeUR87SCnlzvrhw== =eeTo -----END PGP SIGNATURE----- Brian B. Riley --> http://members.macconnect.com/~brianbr For PGP Keys <mailto:brianbr@together.net?subject=Get%20PGP%20Key> "The illiterate of the 21st century will not be those who cannot read and write, but those who cannot learn, unlearn, and relearn." -- Alvin Toffler

1 0

RE: Announcement: RPK InvisiMail released on 12 Jan, 1998
by Jack Oswald 17 Dec '03

17 Dec '03

Bill - The technology that we export as part of RPK InvisiMail, is world-class strong crypto. Key size options are 607 bits and 1279. The math behind the system is based on the same as that of D-H. There is no snake oil. There was no intentional or unintentional attempt to mislead any government authority. We also did not request an export license, because there is no need to do so in New Zealand as long as the export is by means of the Internet. Peter G. knows this as well. The story may be different for physical export on disk, disc or tape, although we cannot concur with Peter's personal experience. Our experience is that we get pretty good treatment from the NZ authorities. We also may use a different approach. I have often heard that you can often get a better response when using honey than vinegar. Therein may explain differences in our respective experiences. I have personally met with the Minister of Trade for New Zealand. His views and those of his staff seemed to be acceptable to us and have not imposed any undue restrictions of our business or our ability to operate. Jack Oswald President and CEO RPK Fast Public Key Encryption RPK New Zealand Ltd. 4750 Capitola Road Capitola, CA 95010 joswald(a)rpkusa.com www.rpk.co.nz www.InvisiMail.com +1 408.479.7874 phone +1 408.479.1409 fax +1 800.475.4509 pager -----Original Message----- From: Bill Stewart [SMTP:bill.stewart@pobox.com] Sent: Sunday, January 25, 1998 5:44 PM To: RPK New Zealand Ltd; cypherpunks(a)cyberpass.net Cc: scataldi(a)earthlink.net Subject: Re: Announcement: RPK InvisiMail released on 12 Jan, 1998 I was amused to receive two mail messages back-to-back, one from Peter Gutmann talking about New Zealand having one of the strictest formal export controls in the world, and one from RPK New Zealand talking about how their encryption product is not export-controlled because it's from NZ, not the US, and how their RPK Fast Public Key Encryptonite(tm) Engine is the strongest crypto in the world. Either they haven't bothered asking for export permission, or they asked in such a way that the export bureaucrats didn't notice it was crypto and regulated by their crypto export preventers, or their crypto somehow falls through the cracks, e.g. by using an algorithm with public keys shorter than 512 bits (works for ECC, not RSA) and private keys shorter than 40 bits (or 41 on a good day), or perhaps passes the "snake oil test" for export permission. I suppose it's possible that the NZ Export Bureaucrats have lightened up since Peter's last dealings with them, but it's not likely. >--------------- The mail, referencing www.invisimail.com >RPK New Zealand Ltd. in a joint venture with Virtually Online Ltd. >has released RPK InvisiMail, a standards-based e-mail security >application for use with Internet mail software (SMTP/POP3). >The product offers the strongest encryption available anywhere in >the world. Since it was built outside the United States, >it is also available all over the world with strong encryption. >RPK InvisiMail is also the easiest product of its type >to setup and use which makes it quite unique. ========= From Peter Gutmann's web page This policy has resulted in New Zealand enjoying the dubious distinction of having the strictest export controls on earth, with everything ranging from crypto hardware down to software, library books, computer magazines, and journals being restricted from export. It's not even possible for a university to publish academic research without prior permission from a government agency, and the requirements for obtaining this permission are structured to ensure that they can never be fulfilled. You can find the information on: http://www.cs.auckland.ac.nz/~pgut001/policy/ ============================== Thanks! Bill Bill Stewart, bill.stewart(a)pobox.com PGP Fingerprint D454 E202 CBC8 40BF 3C85 B884 0ABE 4639

1 0

RE: Announcement: RPK InvisiMail released on 12 Jan, 1998
by John Young 17 Dec '03

17 Dec '03

On "using honey not vinegar" rationale of RPK InvisiMail for obtaining crypto export licenses: Applied Cryptography, Bruce Schneier, 2nd Edition, pp. 215-16 Algorithms for Export Algorithms for export out of the United States must be approved by the U.S. government (actually, by the NSA--see Section 25.1) It is widely believed that these export-approved algorithms can be broken by the NSA. Although no one has admitted this on the record, these are some of the things the NSA is rumored to privately suggest to companies wishing to export their cryptographic products: - Leak a key bit once in a while, embedded in the ciphertext. - "Dumb down" the effective key to something in the 30-bit range. For example, while the algorithm might accept a 100-bit key, most of those keys might be equivalent. - Use a fixed IV, or encrypt a fixed header at the beginning of each encrypted message. This facilitates a known-plaintext attack. - Generate a few random bytes, encrypt them with the key, and then put both the plaintext and the ciphertext of those random bytes at the beginning of the encrypted message. This also facilitates a known-plaintext attack. NSA gets a copy of the source code, but the algorithm's details remain secret from everyone else. Certainly no one advertises any of these deliberate weaknesses, but beware if you buy a U.S. encryption product that has been approved for export. ----- Bruce added the last "beware" phrase to the 2nd edition.

1 0

U.S. crypto czar's travel records revealed
by Declan McCullagh 17 Dec '03

17 Dec '03

>From EPIC newsletter ======================================================================= [3] EPIC Obtains U.S. Crypto Czar's Travel Records ======================================================================= Following a year-long legal battle, EPIC has obtained over 500 pages of materials from the U.S. State Department on the international travels of David Aaron, the former U.S. Envoy for Cryptography. Aaron also served as U.S. Ambassador to the Organization for Economic Cooperation and Development when the OECD was developing its encryption policy guidelines. The released documents show Ambassador Aaron made frequent trips around the world lobbying for international adoption of key escrow encryption. He visited Australia, Belgium (both the European Union & Belgian governments), Canada, France, Germany, Japan, Switzerland and the United Kingdom. The documents also indicate that he went to South Africa, and met with the counselor of the Latvian embassy in Paris and with Russian Finance Ministry officials. Even before Aaron was appointed as President Clinton's "Special Envoy for Cryptography," U.S. State Department messages indicate that the United States was making overtures to various countries via American embassies around the world. These include the diplomatic posts in Canberra, London, Tokyo, Ottawa, Tel Aviv, Paris, Bonn, The Hague and Moscow. One message to these foreign posts announced the revised U.S. cryptography export policy (the key recovery within two years or "no export" rule). The public announcement of that policy was made on October 1, 1996. Aaron apparently was not always greeted warmly in his travels. In Japan, the government requested that the meetings be kept secret and that the press not be informed. Even the U.S. Embassy in Japan was less than enthusiastic -- the embassy suggested that Aaron and his delegation could take the airport bus to their hotel rather than be picked up by an embassy driver.

1 0

Eureka! Tue Jan 27 '98
by eureka＠eureka.abc-web.com 17 Dec '03

17 Dec '03

Welcome to Tuesday's issue of Eureka! FRESHTEENS! Is there no end to it? Yet again we have succeeded in obtai- ning a FREE one week trial, for all Eureka! subscribers at another of the net's finest websites. Freshteens offers over 200 video feeds, hot live, sex shows, hard XXX movies, hot XXX stories, exclusive Texas Teens, and a comprehensive gay area too. You need a credit card to verify you are an adult, but will not be charged for your FREE membership. Excellent! Freshteens ........... http://www.freshteens.com/cproot/1217 PLEASE VISIT THIS FINE EUREKA! PARTNER SITE Teen Panties and Masturbation http://www.yiws.com/a&axxx/warn.htm Over 200 hot amateur teen pictures showing their panties and pussy. These hot real amateur pictures are updated daily. Voted number 2 top teen site on the net 1997. PHUCK IT Dedicated to bringing you a wad of pumping porn. Give this man a cigar. There's plenty of general depravity going on with some really gorgeous gals getting serviced hard, and enjoying it. Oooh yes. It's not just a smile that's all over their faces. The girls are hot. Make sure you hose them down Phuck It ........................... http://www.phuckit.com/ ANIME ZONE XXX cartoon vixens of the Japanese doe-eyed, big breasted, sure to sharpen your pencil variety. This is a colourful site with a fist full of free pix from artists with minds even dirtier than ours.. Tawdry 'toons are stripped for you. Anime Zone ............................ http://207.36.65.47/ BIZARRE XXX IMAGES It's bizarre - you might see triple breasted women. It's XXX - bottles of beer and vegetables are sure to be swallowed whole and up close. It's your illustrated photo guide to all things jaw-slackeningly odd, and pant-tighteningly horny. Bizarre XXX Images ...... http://www.wawawa.com/bizarre.html LABORATORY OF PORN Come on in. The Mad Scientist awaits you. He's mixing up a potion to get your hand in motion. This site's a lot of fun, and it's not difficult to get to the bottom of it. Drink in the elixir of lust - amateur, lesbian, hardcore and more! Laboratory Of Porn ....... http://209.139.56.98/warning.html BRAND NEW - HOORAY! THE ADULT SEARCH ENGINE Now adult surfers have our very own search engine, directly designed to only list adult sites, and so run fast because all other types of site are ignored. Check it out today! Hooray! -----------------> http://eureka.abc-web.com/hooray/ FREE STREAMING VIDEO Please note that most of these feeds require a Netscape bro- wser in order to successfully view them. Unfortunately Micr- osoft's browser does not have all the features of Netscape's yet. However, many of the feeds use the RealPlayer and will work in most browsers. If you do not have Netscape and want a free copy click here --> http://www.netscape.com/download/ 20vids+Chat -> http://209.1.31.175/chat/videochat.cgi?eureka CHAT WITH OTHER READERS This chat is growing fast, and already there are a number of regulars you will meet most days. It's good to see Eureka! readers interacting with each other and having a great time! Adult/Sex Chat -----------------> http://137.39.63.229/chat/ General/Fun Chat -------> http://137.39.63.229/chat/funchat/ THE BEST PHONE SEX NEW!!!! LD Call only! - Live Hot Girls!!!!--->1-664-410-3912 LIVE: 1-on-1, 2-on-1, Group, Dateline-------->1-800-644-8779 FREE: Live 1-on-1 (international call only)--->011-678-77416 AMATEUR SITE OF THE DAY PANTY GIRL: For all of you panty aficionados this site is a must see. Panty girl models a huge variety of panties, g- strings, thongs, full back undies, silk, cotton you name it she wears them. The best part is, they are all soaking wet! That is our favorite kind! ---------------------------> http://amateurindex.com/eureka/ EROTIC STORY SITE OF THE DAY The Top 50 Erotic Stories Sites: Only the highest quality erotic stories sites are listed here. No nonsence. Just top notch totally free free erotic stories sites................ ........................... http://www.xxxstories.com/top50/ DAILY CARTOON ----------> http://www.erosinorbit.com/eureka/ ADULT STAR PIC OF THE DAY Every day we bring you an exclusive choice pic of a famous adult porn star. And we must tell you - these pix are abso- luletly brilliant! ---> http://www.xxxadultstars.com/eureka/ GAYEUREKA! The gay newsletter is now available. You can get it here! Gay Eureka! ----------> http://eureka.abc-web.com/gayeureka/ EUREKA! TRANSLATIONS As well as English you can now choose any of these languages DEUTSCH ------> http://eureka.abc-web.com/eureka/deutsch.htm ESPAÑOL ------> http://eureka.abc-web.com/eureka/espanol.htm FRANÇAIS ----> http://eureka.abc-web.com/eureka/francais.htm ITALIANO ----> http://eureka.abc-web.com/eureka/italiano.htm PORTUGUESE > http://eureka.abc-web.com/eureka/portuguese.htm TODAY'S FREE PIX Pic 1 --------------------------> http://137.39.63.229/?270 Pic 2 --------------------------> http://137.39.63.229/?271 Pic 3 --------------------------> http://137.39.63.229/?272 Pic 4 --------------------------> http://137.39.63.229/?273 Pic 5 --------------------------> http://137.39.63.229/?274 Pic 6 --------------------------> http://137.39.63.229/?275 Pic 7 --------------------------> http://137.39.63.229/?276 Pic 8 --------------------------> http://137.39.63.229/?277 Pic 9 --------------------------> http://137.39.63.229/?278 Pic 10 --------------------------> http://137.39.63.229/?279 ============================================================ TO UNSUBSCRIBE FROM THIS NEWSLETTER, USE THE REPLY FUNCTION IN YOUR EMAIL PROGRAM, AND SEND THIS EMAIL RIGHT BACK TO US. ============================================================

1 0

Former US spy ship now a tourist attraction
by William Knowles 17 Dec '03

17 Dec '03

TOKYO (Reuters) [1.26.98] North Korea has turned the Pueblo, a U.S. navy intelligence ship captured 30 years ago, into a tourist attraction to attract badly needed foreign exchange, a Japanese scholar said Monday. Shinobu Oe, professor emeritus of contemporary history at Ibaraki University, told Reuters he visited the North Korean port of Wonsan, where the vessel is docked, on October 29. "As far as I know the North Koreans have been showing the ship to Japanese tourists since August," Oe said. "They tell tourists it's the Pueblo." The capture of the Pueblo and its crew by North Korean patrol boats off Wonsan in January 1968 held the administration of then-U.S. President Lyndon Johnson at bay for months. Japan's Asahi newspaper Monday published a photograph Oe took of the ship, which showed it bristling with antennae and wires. The professor said he could only view the ship from the dock. "It sure looks like the Pueblo," said a U.S. embassy naval attache in Tokyo who saw the photograph. Oe said North Koreans at the port gave no information about the ship or how it had been used for the past 30 years. Attracting foreign currency has become increasingly important to North Korea after years of economic decline and failed harvests that have left the isolated Stalinist nation struggling to feed its people. The standoff prompted by Pyongyang's seizure of the Pueblo 30 years ago led to a U.S. state of naval alert rivalling the Cuban missile crisis in 1963. The crew was finally released in December 1968, but the ship stayed in North Korean hands. Pyongyang portrayed the incident as a huge blow to the prestige of the U.S. superpower, which was then in the throes of the controversial Vietnam War. == The information standard is more draconian than the gold standard, because the government has lost control of the marketplace. -- Walter Wriston == http://www.dis.org/erehwon/

1 0

Re: Latest Clinton Dodge?
by Gary Harland 17 Dec '03

17 Dec '03

>Clinton said this morning: > >>>> >I want you to listen to me. I'm >going to say this again. I did not have sexual relations with that >woman, Miss Lewinsky. I never told anybody to lie, not a single time >-- never. These allegations are false. ><<<< > >The question then becomes, of course, what does "sexual relations" >mean? > >Is it oral sex? > >-Declan It seems to be some sort of 'southern thing'. Of course a good Catholic boy from Detroit would never swallow (opps!) a sleezy end-run around the moral goal-posts of life like that. I can think of no better authority to invoke than Kinky Friedman, the immortal bard of Kerrville, Texas and notorious ring-leader of the band known as "The Texas Jewboys" ( famous for such country & western hits as "They Don't Make Jews Like Jesus Anymore", "I'm Proud To Be An Asshole From El Paso", "The Ballad of Charles Whitman", and many others - all available on his recently released CD). Hit it Kinky!... Waitret, Please, Waitret (Kinky Friedman, Major Boles, Roscoe West) Well, I pulled into Dallat on a cold December day Bought coffee and a doughnut at the Greasy Spoon Cafe, Spied me a pretty young waitret standing by her tray, But she couldnt believe her sweet young ears when the waitret heard me say: Oh, waitret, please, waitret, come sit down on my fate, Eatin aint cheatin, Lord it aint no disgrace. Oh, bring me a Lone Star, make it, make it a case Waitret, please, waitret, come sit down on my fate. Well, I walked up to the jukebox feeling kind of mean, The waitret said, Hey, stupid, thats a, thats a cigarette machine! Well, look-a here, young waitret, would you care to make a bet, And if that there aint a jukebox, you can smoke my cigarette! Oh, waitret, please, waitret, come sit down on my fate, Eatin aint cheatin, Lord it aint no disgrace. Oh, bring me a Lone Star, make it, make it a case And waitret, please, waitret, come sit down on my fate. Youre the prettiest thing in Dallat, is Dallat your home ? No, I come all the way from Houton and I feel so all alone. I used to live in Autin then I moved up to big D In hopes to get my big break on national TV. Oh, waitret, please, waitret, come sit down on my fate, Eatin aint cheatin, Lord it aint no disgrace. Oh, bring me a Lone Star, make it, make it a case Waitret, waitret, waitret, waitret, sit down on my fate. It's even funnier with the music of course. Kinky Friedman (http://www.kinkyfriedman.com) was kind of a 70's cult figure. He now writes mystery novels. According to Willie Nelson, ...the best whodunit writer to come along since Dashiell What's-his-name." As for Clinton, what can I say? What a pathetic, third-rate dickhead. Somebody flush the White House. It's starting to stink. ----------------------------------------------------------------- foggy(a)netisle.net lat:47d36'32" long:122d20'12" "Rather perish than hate and fear, and twice rather perish than make oneself hated and feared." -F. Nietzche- -----------------------------------------------------------------

1 0

Re: Signing video...
by Steve Schear 17 Dec '03

17 Dec '03

>Hi, > >I was exchangin idea with a couple of members off-list and an idea came to >me about how to time stamp the frames. It would require a minor modification >to the WWV transmission but it wouldn't be much. Have the WWV transmitters >sign each 'tick' of the clock and have a WWV receiver in the vcr. This would >allow time stamping the frame with a signed reference that could be checked. Although this could reduce the cost and power consumption in the camera how does this guarantee that the signature information wasn't inserted later. With today's excellent digital postprocessing it could be very hard to detect. --Steve

1 0

Re: Executing Kaczynski
by Blanc 17 Dec '03

17 Dec '03

Vladimir Ze Cornflake inquired of TCM: >> Recall that a leading Cypherpunk was suspected >>for a while as being the Unabomber. > >whoa, are you being facetious here or what? would you care to elaborate >on that little tidbit? ................................................. It was TCM himself. (myself, I speculated it was Detweiler.) .. Blanc

2 1

Re: Signing video... (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Mon, 26 Jan 1998 19:43:17 -0800 > From: Steve Schear <schear(a)lvdi.net> > Subject: Re: Signing video... > >I was exchangin idea with a couple of members off-list and an idea came to > >me about how to time stamp the frames. It would require a minor modification > >to the WWV transmission but it wouldn't be much. Have the WWV transmitters > >sign each 'tick' of the clock and have a WWV receiver in the vcr. This would > >allow time stamping the frame with a signed reference that could be checked. > > Although this could reduce the cost and power consumption in the camera how > does this guarantee that the signature information wasn't inserted later. > With today's excellent digital postprocessing it could be very hard to > detect. The fact that it's hard is what makes it worth doing in some environments. The goal is to provide a reasonable doubt as to the validity of the picture on the tape. Don't know about cost and power consumption...but this is where I'm at on this issue now, by no means is it fully worked out: The actual signal on the tape can be mapped to a specific head mechanism using the same sorts of technology that is used to identify specific cell phones from the rf signature. So we can do an analysis of the signal and verify if a given camera striped the tape. Hysterisis, amplifier slew rates, power spectrum analysis, etc. The pattern of wow and flutter of any motor and drive mechanism is unique and can also be mapped to a specific mechanism. This wow and flutter creates regular and repeatable irregularities in the pattern on the tape. This allows us to match a drive mechanism to a specific program on a tape. Irregularities in the drive wheel will cause specific pattern in the way the stripes are laid down (ie wiggles in the same place each time that part of the wheel comes around). Irregularities in the syncronizing clocks in the tape mechanism can be traced to particular oscillators (usualy slew rate as a function of frequency stability). By signing the frames with a signed time reference we can verify which clock was used, though we can't verify that it wasn't recorded and played back at a later time. We can at least verify the tape wasn't stiped prior to the claimed time. For security applications this could be quite useful. So if we have a fully analog system there are several means to test the various parts of the systems to verify source veracity. We can also test the tape recording mechanism even on a digital or hybrid system. So let's look at hybrid systems where the video signal is source digital or is digitized in the camera (for special effects, etc.). If a frame isn't signed we don't trust it. So we have a camera with a ROM that has a signature. We could replace the code in the rom and keep the signature. If the owner doesn't replace the ROM prior to testing then we can easily verify the ROM and it's signature don't match. We don't even need the signature to do this, simple comparison between the rom that should be there versus the one that is present is enough. If they do replace the ROM then we have a frame that is signed but potentialy modified prior to the d/a conversion process. The question is can we in fact identify such non-linear editing? If the answer is no then there is a clear reason to suspect the validity of any video source that went through any sort of digital processing. I suspect the answer is no since this question is equivalent to signing a document that was modified prior to the signature being placed on it. The signature process only signs what was fed into the algorithm and can't detect changes to the document prior to the signing. ____________________________________________________________________ | | | The most powerful passion in life is not love or hate, | | but the desire to edit somebody elses words. | | | | Sign in Ed Barsis' office | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0