December 2003 - cypherpunks-legacy

Rivest's Chaffing and Winnowing
by John Young 17 Dec '03

17 Dec '03

The New York Times, March 22, 1998, p. 31. New Method To Veil Data Could Upstage Export Policy Cryptologists find a way to foil eavesdroppers without secret codes. By John Markoff San Francisco, March 21 -- One of the nation's leading computer scientists has proposed a novel technique for scrambling data that could circumvent Government export policies aimed at limiting the foreign sale of encryption technology. The technique, which was described this week in an Internet discussion among computer researchers, was introduced by Ronald L. Rivest, a computer scientist at the Massachusetts Institute of Technology and one of the inventors of the most widely used commercial encryption scheme, RSA. The new approach, which is described in a short technical paper that has been posted to Mr. Rivest's M.I.T. Web site (http://theory.lcs.mit.edu/~rivest/chaffing.txt) is described as "chaffing and winnowing" digital information instead of encrypting it. According to Mr. Rivest's paper, it is possible to hide a message by breaking it into packets that are then secretly identified as good information, or "wheat," and gibberish, or "chaff," in such a way that an eavesdropper cannot distinguish the two. Because the individual packets would not be encrypted, Mr. Rivest said, such a system would circumvent current export restrictions. The two principal ways of communicating in secret are encryption and steganography. Steganography uses computer techniques to embed a secret message in a document like a digital image. In encryption, secret information is encoded using functions that require difficult mathematical tasks to decode, and it has become the standard way of transmitting secret information electronically. There are no restrictions on the domestic use of this technology, but the Government has been trying to force the industry to adopt standards that would permit law-enforcement officials to have mathematical keys allowing them to decode messages without the knowledge of the sender or receiver. The Clinton Administration says the standards are needed to fight crime and terrorism. Opponents argue that the Government decoding keys, to be stored in computers, could easily be stolen, compromising privacy and the security of credit card numbers and other personal information. In terms of exports, with few exceptions the Government limits the software to codes that can be easily broken. "Winnowing does not employ encryption, and so does not have a 'decryption key,' " Mr. Rivest wrote in his paper. "As usual, the policy debate about regulating technology ends up being obsoleted by technological innovations." Peter Neumann, an SRI International computer scientist who has read Mr. Rivest's paper, said that although "there is still no certainty that this is a practical idea," if it works, "it throws another clinker at the Justice Department." Other cryptography experts said they were uncertain whether it would be possible to skirt Government export restrictions in this way, but that the idea was an impressive new approach that might have valuable commercial applications. "He's a very clever guy," said George Spix, a Microsoft researcher who specializes in cryptography policy issues. " It goes to show that for all the technological wizardry in the world, there's nothing like an intellect." One of the potential limitations of the new method is that the total information transmitted might need to be hundreds of times larger than the actual message. Mr. Rivest said, however, that he had discussed the idea with Adi Shamir, an Israeli cryptographer, and that Mr. Shamir had proposed compression methods that would reduce the total transmission to only about twice the actual message size. The strength of the idea for chaffing and winnowing is that it is possible to prove mathematically that a message cannot be decoded, Mr. Rivest said. He said he had come up with the idea recently while teaching an undergraduate computer course. In addition to his role as associate director of the Laboratory of Computer Science at M.I.T., Mr. Rivest is a consultant and shareholder in RSA Data Security Inc., a company that develops encryption software. "I put the winnowing and chaffing idea out there to stimulate debate,"' Mr. Rivest said. "I hope it will help clear up some of the issues that have been raised in the policy discussion. [End]

2 1

Re: Prediction: NAI will issue a "Clarification" about PGP from Europe
by John Young 17 Dec '03

17 Dec '03

Robert Hettinga wrote: >John has the drugs. Talk to him. Then you'll ***Understand***... You talking to me? Look at me! Let's settle this now. Get it straight from the purple nose: Not drugs, nuts, A-grade shit, highest quality, cheap E$, dosing me and the other Messiahs vampiring Big DaddyMommy -- that spaced-out hermaphroditic duo's infinitely beyond psycho-pharmacological cryptanalysis. Try it, you'll like it. Endorsed by Thor and Brunhilde, Zeus and Juno, Samson and Delilah, Amazons and Moses, Cleopatra and Nero, Jesus and FHC, Atilla and Joan d'Arc, Machiavelli and Teresa de Avilla, Nietzsche and Cosima, Hitler and Eva, Ghandi and Queen Mary, Elvis and Janis, Paglia and Dice Clay, Teller and Penn, Pogo and Dilbert, NSA and BXA, and others here faking normalcy: Watch for very clear articulation, point by point argument, neat numbered paragraphs, implacable coherency, occcasional bullet spray for emphasis, peculiar indents and concussion grenades, unpredictable ellipses of EM wipeout, wide-area split infinitives, carpet bombs of dangling modifiers, genocidal threats at contra-blancos, vile accusations of self-flagellations, all with not a hair or beard out of place, a sure sign of uh oh, don't jiggle this nitroid. That's just those who post. The others back there, well.

1 0

Re: Prediction: NAI will issue a "Clarification" about PGP from Europe
by Robert Hettinga 17 Dec '03

17 Dec '03

At 11:27 AM -0500 on 3/22/98, John Young wrote: > You <snip> >well. Keewwwl... So. John. Don't the trees look like stuffed animals this morning? Cheers, Bob Hettinga <who laughed so hard tears ran down his face upon reading the snip-occluded above. I *love* this list.> ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox e$, 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' The e$ Home Page: http://www.shipwright.com/

1 0

RE: UPSs
by Pearson Shane 17 Dec '03

17 Dec '03

Hi Stan, Yeah. Since the big powersupply transformer primary winding is in _parallel_ with the AC power coming from the wall, this inductor will transfer the spikes, etc to the secondary winding and into the bridge rectifier, etc quite nicely. But decent ripple prevention should also help out here. Though this hasn't much to do with PC switchmode powersupplies. An inductor/capacitor spike filter that may be in UPS' would have 2 large inductors in _series_ with the active and neutral and high voltage capacitors in parallel with both ends of the inductors across the active and neutral. This is specifically designed as a low pass filter for getting rid of spikes. I don't think the SW supply would do it quite as well with as much power handling, strength etc. I'd rather a great big low pass filter designed for spike dampening doing the deed than having my PC power supply bearing the brunt of it. It's also an extra layer that is quite cheap. Bye for now. > -----Original Message----- > From: StanSquncr [SMTP:StanSquncr@aol.com] > Sent: Saturday, March 21, 1998 8:51 AM > To: Pearson Shane; spectre(a)anthrax.net; cypherpunks(a)toad.com > Subject: Re: UPSs > > In a message dated 98-03-19 18:48:51 EST, Shane.Pearson(a)tafensw.edu.au > writes: > > << A simple low pass filter made of 2 large inductors and a > few high voltage capacitors will do the trick nicely. >> > > Right. The filtering that's already in the power-supply (except that > the > switching transformer isn't as big as an inductor as a normal > old-style power > transformer. > > Stan

1 0

Re: Rivest's Chaffing and Winnowing
by Kevlar 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Now I read about this before it was mentioned on this list, and wanted to comment briefly upon it. Although at first glance this appears to be a hopelessly ineffective way of communicating (it requires double the information, plus MAC's), It does have some interesting possibilities. For instance... Rivest mentioned in his technical paper that you might use this in a situtation where you are multiplexing two or more streams of information, in which one persons "wheat" is another persons "chaff"... This would elminate the need to generate random "chaff", and therefore bring the ammount of wasted space WAY down... I could see this in use in situtations like LAN's or intranets, where bandwidth is not nearly as much of a concern because there is usally an overabundance anyway. Something else that occured to me while reading this tho... a major flaw if implemented "out of the book".... He mentions generating random MAC's... and this would be allright because the chance of randomly generating a genuine MAC is 2**64, or 10**19, but that is unacceptable, as the law of advrages WILL catch up to you eventualy. Therefore his second party adding chaff idea is failable. Of corse, this is easliy remedied at run-time by checking to see if the MAC that was just randomly generated is genuine, and therefore unacceptable. I hope to stimulate discussion on this subject, and welcome your opinions about mine... Peace. -----BEGIN PGP SIGNATURE----- Version: PGPfreeware 5.5.5 for non-commercial use <http://www.nai.com> iQA/AwUBNRWlqgbVu2P/8fhEEQLxAACbBTO08OT/uYnDPQ1dKJH0xaZi3ocAniXQ Z0O3d1uKcvfLDcbTHPb6PTw2 =aJRQ -----END PGP SIGNATURE----- -Kevlar <Kevlar(a)smartlink.net> Oh, I'm sorry... Was I not suposed to EXPORT STRONG CRYPTO? print pack"C*",split/\D+/,`echo "16iII*o\U@{$/=$z;[(pop,pop,unpack"H*",<> )]}\EsMsKsN0[lN*1lK[d2%Sa2/d0<X+d*lMLa^*lN%0]dsXx++lMlN/dsM0<J]dsJxp"| dc` Beat your algorithms into swords and your virtual machines into spears... Let the weak say, "I am strong".

1 0

Encryption without encryption - from Ron Rivest
by Martin Minow 17 Dec '03

17 Dec '03

In a paper entitled "Chaffing and Winnowing: Confidentiality without Encryption," Ron Rivest describes a method of transmitting a document that gives an evesdropper no information about the content of the document. <http://theory.lcs.mit.edu/~rivest/chaffing.txt> "Winnowing does not employ encryption, and so does not have a``decryption key.'' Thus, the usual arguments in favor of ``keyrecovery'' don't apply very well for winnowing. As usual, the policydebate about regulating technology ends up being obsoleted bytechnological innovations. Trying to regulate confidentiality byregulating encryption closes one door and leaves two open(steganography and winnowing)." Martin Minow minow(a)apple.com

1 0

My post earlier.
by Aspen 17 Dec '03

17 Dec '03

Sup, It's Kevlar. I posted earlier about the "new" encryption method. It occured to me if you assign the "MAC"'s to computers and make a simple router (some transistors to act at "signaler" lines, one way of corse, so 3 a computer, A few ic's, hardware, and a power supply, ($75)), You have the makings for a basic network. Isn't that allready pattented? Hope I made somebody think for a second. I know I concidered this notion quiet a bit.

1 0

Privacy Development Project
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Developer & Consulting Positions Available Software development firm focusing on Internet privacy and anonymity tools is looking for developers and consultants. Applicants should be interested in the possibility of relocation or travel as development is being done outside of the United States. Applicants will be applying to join an aggressive team, where intelligence, entrepreneurial spirit and technology skills are valued and rewarded. Positions offer competitive salary and benefits along with stock options and bonuses. Interested applicants are asked to forward your c.v. by e-mail to: anonjobs(a)nym.alias.net Positions Offered: ------------------ Project Consultant - Anonymous Technologies and Cryotography ************************************************************ The ideal candidate should be very familiar with anonymous remailers (Type I, Type II, Nymservers), anonymous cash (Digicash), Blind Signatures, Public Key Cryptography and Cryptanalysis. A detailed understanding of anonymous networks and mailer systems will be required to help review the security model of companies system. Experience with C/C++ and software development projects on Solaris, Linux, Windows 95 also a definite asset. Experience on implementation of Cryptography libraries in software design also a definite asset. Software Engineers - Windows 95 ******************************* Successful candidates will have extensive development experience in the Windows environment, good organizational skills and be very success driven. Good knowledge of Visual C++, MFC and OOP a requirement. Interest in privacy, security and cryptography a definite asset. Software Engineers - Unix (Solaris/Linux) ***************************************** Successful candidates will have extensive development experience in the Solaris or Linux environment, good organizational skills and be very success driven. Good knowledge of C++, Internet protocols (HTTP, FTP, SMTP, NNTP), X.509 Certificate authority servers (LDAP) and experience with cryptography are all considered definite assets. The applicant should have a serious interest in technologies as they relate to Internet privacy, security and cryptography.

1 0

Re: UPSs
by rdew＠el.nec.com 17 Dec '03

17 Dec '03

Stan, Clearly you only considered a few of the semi-cons. Others just stop working, while still others pass anything above the manufacturer design max. Your lack of desire to learn indicates a possible reason why you don't seem to understand ... At my age, I forget some ... What is that old adage about leading a horse to water, but you can't make him read? or something like that! Bob De Witt, rdew(a)el.nec.com The views expressed herein are my own, and are not attributable to any other source, be it employer, friend or foe. > From StanSquncr(a)aol.com Fri Mar 20 14:43:46 1998 > From: StanSquncr <StanSquncr(a)aol.com> > Date: Fri, 20 Mar 1998 16:50:55 EST > To: rdew(a)el.nec.com, spectre(a)anthrax.net, cypherpunks(a)toad.com > Mime-Version: 1.0 > Subject: Re: UPSs > Content-transfer-encoding: 7bit > > In a message dated 98-03-20 16:04:24 EST, rdew(a)el.nec.com writes: > > << If your surge protector is a semi-conductor, it probably will be > self-limiting. That is, it will reach a maximum block, and pass > whatever is above that. >> > > Yes, but what you fail to point out, is the reason it will pass everything, it > will have been blown (shorted, most likely). > > So, because you failed to point this out, I figure the rest of your response > isn't worth responding to. > > Stan >

2 1

AntiChrist Rules
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

---------- Forwarded from [argo(a)death.com] --------- For those of you fellas who still have the OLD excel 95 (not office 97), try this out : 1. open a new file 2. scroll down until you see row 95 3. click on the row 95 button, this highlights the whole row 4. press tab, to move to the second column 5. now, move your mouse and click on help THEN about Microsoft excel 6. press ctrl-alt-shift and click on the tech support button simultaneously 7. A WINDOW WILL APPEAR, TITLE : THE HALL OF TORTURED SOULS This is really eerie okay...it has a doom style format and you can walk all around the hall...and on the sides of the walls are the names of the tortured souls... 8. NOW WALK UP THE STAIRS AND THEN COME BACK DOWN, FACE THE BLANK WALK AND THEN TYPE IN EXCELKFA this will open the blank wall to reveal another secret passage, walk through the passage and DO NOT fall off, when you get to the end, you will see something really really eerie... At this point in time, countless witnesses all over the world have verified this point...it's really an eye opener. It could be a joke by MS programmers ,or is it? Wouldn't be surprised if Bill Gates was "The Antichrist", after all it,was already foretold in the Bible that someone powerful would rise up and lead the world to destruction. And Bill Gates definitely have that kind of power in his hands. More than 80% of the world's computers run on Windows and DOS (including those at Pentagon!) If all his products have some kind of small program embedded (like this Hall of Tortured Souls) that can give him control, setting off nuclear arsenals, creating havoc in security systems, financial systems all over the world,etc......all from his headquarters isn't a far off reality! Just using Internet Explorer may just allow him to map out what you have on your computer bit by bit each time you log on. Perhaps the end times are near and this is just a tip of the iceberg!? "He also forced everyone, small and great, rich and poor, free andslave, to receive a mark on his right hand or on his forehead, so that no one could buy or sell unless he had the mark, which is the name of the beast or the number of his name. This calls for wisdom. If anyone has insight, let him calculate the number of the beast, for it is man's number. His number is 666 ." ....Revelation 13:16-18 Something for you to think about. An eerie E-mail for everybody to think about... The Bible, in the Book of Revelation says that without the sign of the beast one would not be able to buy, sell, do business transactions,etc..... and My question to you now is this..... Is Internet now a necessity in doing business? The Internet also bears the sign.... Note that the Internet is also commonly known as the World Wide Web or WWW.. ... One other way we write W is V/ (VI), so ..... W W W VI VI VI 6 6 6 This gives me something to ponder upon ... Isn't everything going towards the Internet? (i.e., buying / selling goods, business transactions) Isn't Microsoft always on the move to have a monopoly when it comes to software technology? And now the Internet? Revelation also says that the mark of the beast will be carried on one's Hand and one's forehead.....If the Internet would indeed be the sign of the beast aren't we all starting to carry it on our hands and foreheads??? Screens (forehead) and make use of the mouse (hand) ??? Are things finally falling into place or are we just letting our imagination run? Remember, the devil came to cheat, steal, and to destroy......... so be VIGILANT!!!! About Bill Gates and Microsoft. PROOF that Bill Gates is the Devil: The real name of "the" Bill Gates is William Henry Gates III. Nowadays, he is known as Bill Gates (III), where III means the order of third (3rd). By converting the letters of his current name to the ASCII-values and adding his (III),you get the following: B 66 I 73 L 76 L 76 G 71 A 65 T 84 E 69 S 83 I 1 I 1 I 1 --------------- 666 !!!! THE NUMBER OF THE BEAST....... Some might think ask, "How did Bill Gates get so powerful?" Coincidence? Or just the beginning of mankind's ultimate and total enslavement? Before you decide, consider the following: MS-DOS 6.21 77+83+45+68+79+83+32+54+46+50+49 = 666 WINDOWS95 87+73+78+68+79+87+83+57+53+1= 666 Coincidence? You decide...."To agree or to not agree with the WWW or the Beast", is not the question. What if the WWW is the 666? Or Bill Gates be the Beast? What will you do?? Cancel subscriptions to the Internet? Resign from Microsoft? Set out a campaign against Bill Gates in the Internet? Shut down all Windows95 forever? It will not do you any good..... Think about all this and pray, pray really hard, or else......... Never Stop Believing....

1 0