December 2003 - cypherpunks-legacy

Diffie-Hellman
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

May Tim C. Mayflower's forgeries get stuck up his ass so he'll have to shit through his filthy mouth for the rest of its miserable life. .oooO Oooo. ( ) _ _ ( ) \ ( / ) ( \ ) / ----\_)-/ (---) \-(_/---- Tim C. Mayflower ( ) ( ) oooO Oooo

2 1

cypherpunks coding challenge
by Adam Back 17 Dec '03

17 Dec '03

A couple of people have complained of the huge efforts put into breaking keys, and of the small efforts invested in cypherpunks code writing of late. Perhaps there is something to this challenge stuff, in terms of getting contributors, neatly tabulating results, working up enthusiasm etc. So... how about a code writing challenge, an award for the best cypherpunk project every month. (No monetary prize, just vote on list to decide most significant project). Perhaps a list of how many lines of code. A hall of fame if you like: % wc -l `find . -name \*.h -print -o -name \*.c -print` Eric Young SSL-eay 101,721 lines PGP Inc pgp30 (?) lines Phil Zimmermann & co pgp263 34,891 lines Peter Gutmann cryptlib200 34,845 lines Tatu Ylonen ssh-1.2.20 33,650 lines Wei Dai crypto++ 2.1 32,831 lines Ian Goldberg Lucre 0.9.0 20,283 lines Colin Plumb bnlib 20,148 lines Matt Blaze & co cryptolib-1.1 19,908 lines Pr0duct Cipher PGPTools 13,062 lines Pr0duct Cipher Magic Money 15,026 lines Ben Laurie Apache-SSL patch 957 lines etc. Adam -- Have *you* exported RSA today? --> http://www.dcs.ex.ac.uk/~aba/rsa/ print pack"C*",split/\D+/,`echo "16iII*o\U@{$/=$z;[(pop,pop,unpack"H*",<> )]}\EsMsKsN0[lN*1lK[d2%Sa2/d0<X+d*lMLa^*lN%0]dsXx++lMlN/dsM0<J]dsJxp"|dc`

4 6

Re: Canarypunk: Jim Bell in a coalmine
by nobody＠REPLAY.COM 17 Dec '03

17 Dec '03

Free speech - Unless Govt. doesn't like it >From talltom <"talltom(SPAMBLOCKER)"@ipns.com> Organization Alternate Access Inc. Date Sat, 21 Jun 1997 19:23:39 -0700 Newsgroups or.politics Message-ID <33AC8CAB.199F(a)ipns.com> This is in reference to a local, that's being held incommunicado in Tacoma. I've personally tried to contact Jim and the Marshalls office said they'd "try" to get a message to him, wouldn't give me an address, and were REALLY interested in my address. I believe the reason for holding Jim incomunicado is that the ACLU requires that the accused ask them for help, and the feds know that if Jim can't ask he won't get their help. Vin covers the situation nicely... [Vin Suprynowicz column:] In the summer of 1995, 39-year-old electronics engineer Jim Bell of Vancouver, Wash. (coincidentally the scene of the climactic battle between militia and central government forces in Ian Slater's current potboiler paperback "Showdown: U.S.A. vs. Militia,") penned an intriguing and controversial essay called "Assassination Politics," which has since been kicking around various Internet discussion groups, triggering responses from delight to outrage. This section from Mr. Bell's introduction gives the gist: "A few months ago, I had a truly and quite literally 'revolutionary' idea, and I jokingly called it 'Assassination Politics': I speculated on the question of whether an organization could be set up to legally announce that it would be awarding a cash prize to somebody who correctly 'predicted' the death of one of a list of violators of rights, usually either government employees, officeholders, or appointees. It could ask for anonymous contributions from the public, and individuals would be able send those contributions using digital cash. "I also speculated that using modern methods of public-key encryption and anonymous 'digital cash,' it would be possible to make such awards in such a way so that nobody knows who is getting awarded the money, only that the award is being given. Even the organization itself would have no information that could help the authorities find the person responsible for the prediction, let alone the one who caused the death. ... "Obviously, the problem with the general case is that the victim may be totally innocent under libertarian principles, which would make the killing a crime, leading to the question of whether the person offering the money was himself guilty. "(But) my speculation assumed that the 'victim' is a government employee, presumably one who is not merely taking a paycheck of stolen tax dollars, but also is guilty of extra violations of rights beyond this. (Government agents responsible for the Ruby Ridge incident and Waco come to mind.) In receiving such money and in his various acts, he violates the 'Non-aggression Principle' (NAP) and thus, presumably, any acts against him are not the initiation of force under libertarian principles. "The organization set up to manage such a system could, presumably, make up a list of people who had seriously violated the NAP, but who would not see justice in our courts due to the fact that their actions were done at the behest of the government. ..." In a followup essay titled "Fishing Expedition Swims Against the Tide," published in the May 14 edition of the daily Portland Oregonian, Bell wrote, in part: "... I've been openly debating the idea on the Internet since then with anyone who will listen. My essay surprises many and shocks more than a few, but I am pleased that such a truly revolutionary concept has been so well received. Even the Columbian newspaper (www.columbian.com) has decided to add a pointer to the essay. "The only 'threat' in the essay is to the jobs of the people who have been parasites on the rest of us for decades, as well as to the future of tyrannies around the world. But that's why, on April 1, 20 federal agents burst in and took my computer, told the news media I was 'armed and dangerous,' and began engaging in a fishing expedition including harassing people simply for knowing me. (No arrest or charges so far.) ..." The charges were forthcoming. Jim Bell was arrested on Friday, May 16, and has been held ever since, without bond, in the Pierce County Jail in Tacoma, Wash., on a federal complaint which alleges: "Beginning at a time unknown, and continuing to the present, ... JAMES DALTON BELL did corruptly obstruct and impede ... the due administration of the internal revenue laws, among other things, by collecting the names and home addresses of agents and employees of the Internal Revenue Service ('IRS') in order to intimidate them in the performance of their official functions; by soliciting others to join in a scheme known as 'Assassination Politics' whereby those who killed IRS employees would be rewarded; by using social security account numbers that were not assigned to him to hide his assets and thereby impede the IRS's ability to collect his unpaid taxes, and by contaminating the area outside of the office of the IRS in Vancouver, Washington, with mercaptan, a chemical that causes a powerful odor." Nor does the complaint stop short with an alleged "stink bomb" floor mat, proceeding to allege that Mr. Bell has at times discussed poisoning water supplies, sabotaging government computers, and, well ... "overthrowing the Government of the United States." The question here would appear to be whether Mr. Bell has actually taken substantive steps, as alleged, to "implement" the theory in his speculative Internet essay, or whether it is the IRS -- who since Feb. 20 have seized the heretofore non-violent Mr. Bell's car, wages and bank accounts (presumably stymying at the very last minute his plan to "overthrow the Government of the United States") -- who are doing the "threatening and intimidating," in an attempt to send a message to anyone who dares speculate about how justice might ever be obtained against federal agents ... given that they are rarely if ever indicted, even for the willful murder of children, as at Waco and Ruby Ridge. If the defendant Bell has indeed taken substantive steps to set in motion the murder of any specific government agent, that of course is a crime, for which he should expect to face the consequences. On the other hand, if writings of the "what if someone ..." variety have now become a felony so serious that one can be seized and held without bond, most of America's adventure and science fiction writers -- who up till now have felt safe spinning thinly-veiled yarns about near-future government coups and such -- had better watch their backsides. Mr. Bell's attorney, Peter Avenia of the Public Defenders Office in Tacoma, says he fully expects Mr. Bell to be indicted by a federal grand jury within the next few weeks. I asked Mr. Avenia if he believes the case will present substantive First Amendment questions. "It certainly does concern me." Is the IRS making an example of Mr. Bell, to chill any further discussions on the Internet of how justice can ever be had in the case of uniformed killers who apparently need no longer fear being indicted or brought to trial in this country? "It's certainly a possibility. In the context of the Oklahoma City bombing it's certainly a hostile atmosphere for any such defendant. I think we can certainly ask whether the government is trying to send a message to people who pen inflammatory writings." Defense attorney Avenia can be reached at the Federal Public Defenders Office, 1551 Broadway, Suite 501, Tacoma, Wash. 98402. The essay "Assassination Politics" is available on the Internet at http://jya.com/ap.htm. The current federal complaint against Mr. Bell can be found at http://jya.com/jimbell3.htm Vin Suprynowicz is the assistant editorial page editor of the Las Vegas Review-Journal. Readers may contact him via e-mail at vin(a)lvrj.com. The web site for the Suprynowicz column is at http://www.nguworld.com/vindex/ *** Vin Suprynowicz, vin(a)lvrj.com Voir Dire: A French term which means "jury stacking."

2 1

Decrypting DES
by Wasim Q. Malik 17 Dec '03

17 Dec '03

Folks, here is a project I am working on. Need your help with it as it is really important. You know we often encrypt files using a key (the DES way -- won't talk about RSA here). Examples are the UN*X "crypt", the MS-Office "Save with password" option, and lots of other ciphers using this alorithm. Take a text file, for instance. You provide a key and the file is encrypted using that key, and can be decrypted only if that key is known. It involved only one key/password. Now I was wondering whether we could somehow fool this encryption system to get to the encrypted material without using the key. It could possibly be done in many ways: * The key has to be stored somewhere in the file, in whatever form, with which the entered key is compared. It could somehow be gotten hold of from there. Perhaps a hex editor could be used to scan the first few bytes of a file for the key. * The decryption algorithm/source could be modified to give access even for a bad password. * During the process that the decryptor asks for the input of the key, we could somehow break out of the routine and bypass it to get to the contents of the file. Do you have any ideas about how this could be done? Or is it even possible theoretically? Any other workarounds you can think of? Au revoir, Wasim Q. Malik

2 1

Announcement from Tim at P.E.E.L.
by putpeel＠putpeel.com 17 Dec '03

17 Dec '03

Hi! You have asked for information about earning income with our Earth friendly products. This just came in, thought you might want to know. Tim BIG ANNOUNCEMENT!! This one is so big I have put together a tour on the website for you. I cannot possible send you all you need to see in an email. Please, for very exciting news, go to: http://www.putpeel.com/distributors/factory-outlet/outlet.htm I promise you will be excited!! your friend, tim.

1 0

Re: Party on IRC
by William H. Geiger III 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- In <3.0.2.32.19970621023432.0077a4ac(a)popd.ix.netcom.com>, on 06/21/97 at 02:34 AM, Bill Stewart <stewarts(a)ix.netcom.com> said: >>Robert Hettinga <rah(a)shipwright.com> writes: >>>Is there an encrypted IRC available? >>>If not, shouldn't there be? >>>Is such a thing even possible? >You'd have to think about what you wanted it to do, >but it should be quite doable. IRC is normally for sharing >conversations between an amorphous, changing bunch of people, which isn't >really a standard thing to do with crypto. >But I can see several basic models: >0) Just Speak Finnish :-) >1) Two-person, with Diffie-Hellman key exchange >2) N-person shared-key - you'd probably use RSA to give the session key >to each new participant, or use PGP to do it. >3) N person, one key per sender, shared as above. >4) Ignore the application layer, and build the crypto as an IPsec tunnel. >5) Ignore the IRC protocols, and build a similar conversation server >using web forms and SSL. Hi Bill, I have been doing somthing much simpler for providing an encrypted IRC. Say you have a group of 5-10 crypto-anarchsist who wish to engage in a secure coversation. 1 of the group runs ircd & sshd on his machine (perferabley the one with the fastest machine/and or best connection). The rest of the group logs into his machine using irc & ssh clients. All communication is encrypted to the outside world while in "plain text" to the group. The best part of this is it requires no modification to the "off the shelf" software available. Unfortunatly ssh is not very well known outside the Unix community. There is an exelent port for OS/2 (freeware) and there is a port to winxx (shareware) I don't know if a mac port is available. - -- - --------------------------------------------------------------- William H. Geiger III http://www.amaranth.com/~whgiii Geiger Consulting Cooking With Warp 4.0 Author of E-Secure - PGP Front End for MR/2 Ice PGP & MR/2 the only way for secure e-mail. OS/2 PGP 2.6.3a at: http://www.amaranth.com/~whgiii/pgpmr2.html - --------------------------------------------------------------- -----BEGIN PGP SIGNATURE----- Version: 2.6.3a Charset: cp850 Comment: Registered_User_E-Secure_v1.1b1_ES000000 iQCVAwUBM60xGY9Co1n+aLhhAQGMKQQAj0x8wIofs/xXUSUtL9yv8BhfiILNElK/ lkVHmMYe84fG9mokkvxQXd90C/AXW5AzX5vSoSrF49DK+5+zMhYv/BKJq3WoT/r2 iNr1gLtpDP3hMY0OGbEdJMf3qXaX+7n8Uqgenzqj8HaiNUCpst2LCVX39I00gFlq mnzO5BZ+W1w= =HdWI -----END PGP SIGNATURE-----

1 0

A Brief History of Cryptography
by Russell Nelson 17 Dec '03

17 Dec '03

[ I'm not on the list. Replies cc'ed to me. Public domain ] Once upon a time, the average citizen did not have access to locks. The U.S. Government had locks, and agencies to control them: the FBL, the CLA, and the NLA. They even knew that other governments had locks, but they also knew that those governments denied locks to their citizens, so the whole lock business was cartelized. However, the need for locks could not be denied, so the NLA was chartered to create locks for U.S. citizens. It created a lock, but didn't explain how the lock worked. Some people showed that the lock might be pickable by the NLA, although they couldn't pick it themselves. Some people thought that the extra wards in the lock were there to give the NLA a master key. But none of it could be proved, so people used the standard lock. As the society got wealthier, people had more things they needed to lock up. This created more incentive for lock creation, and citizens started to invent them. Some locks were sham locks and could be picked with a hairpin, or a skeleton key. Other locks were understandably difficult to pick, and came to be preferred to the NLA-approved standard lock. The NLA (and FBL and CLA) feared these locks that they hadn't devised and probably couldn't pick. So they proposed a scheme whereby they would create a new standard lock, which had an explicit master key. Naturally, this was viewed as a step backwards by people used to the standard lock, which they believed couldn't be opened by anyone but the key-holder. This lock design was opposed by nearly everyone. So they proposed a new lock standard, whereby everyone had to have a copy of their key registered with the NLA. This also was perceived as unworkable for the same reason as the master key system. In the meantime, of course, people were using these new citizen-created locks, which were widely thought to be strong. They expected no less of the NLA lock design, particularly since the NLA standard lock has been proven to be pickable. How will this story end? No one knows yet. Will the NLA seek to ban strong locks? Or will the NLA lose all its control over citizen locking? Time will tell.... -- -russ <nelson(a)crynwr.com> http://www.crynwr.com/~nelson Crynwr Software sells network driver support | PGPok | good luck, have fun! 521 Pleasant Valley Rd. | +1 315 268 1925 voice | taxes feed the naked Potsdam, NY 13676-3213 | +1 315 268 9201 FAX | and clothe the hungry.

1 0

Re: how to `go underground' (was Re: The Global Fix is In)
by William H. Geiger III 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- In <199706221002.LAA06654(a)server.test.net>, on 06/22/97 at 11:02 AM, Adam Back <aba(a)dcs.ex.ac.uk> said: >Perhaps someone can have a go at adding this to PGP3.x, once Stale has >finished scanning the source code books, and has posted the source. >Also, I hear that PGP3.x has support for RSA keys, but won't generate >them? Perhaps we can add that back in also. I believe that it is only the freeware PGP 5.0 from the MIT site that has RSA key generation disabled. The commercial version should be able to generate both key formats. - -- - --------------------------------------------------------------- William H. Geiger III http://www.amaranth.com/~whgiii Geiger Consulting Cooking With Warp 4.0 Author of E-Secure - PGP Front End for MR/2 Ice PGP & MR/2 the only way for secure e-mail. OS/2 PGP 2.6.3a at: http://www.amaranth.com/~whgiii/pgpmr2.html - --------------------------------------------------------------- -----BEGIN PGP SIGNATURE----- Version: 2.6.3a Charset: cp850 Comment: Registered_User_E-Secure_v1.1b1_ES000000 iQCVAwUBM609+49Co1n+aLhhAQHjjQQAw/euyv+RsR/PPUBiG4+Ou7BlXrriq0AI 1L8kiDgsndAX+5nnNxItM8P9iy0ALZolShztS/UL4ppaCGKBfcsmZy8gFRvfXii2 DLZ8TQdzFUwmomqIGZZIMo4JQYOzEbB+kqg6gWxW7AnbURKVHXW1md2rreSBy0k9 uZU5pD26cC0= =rSmJ -----END PGP SIGNATURE-----

3 2

Re: spam on this list
by Ross Wright 17 Dec '03

17 Dec '03

> On Mon, 23 Jun 1997, Philip A. Mongelluzzo wrote: > > > Twenty seven years ago I took an oath to do whatever was needed to > > protect and defend the constitution against all enemies (domestic > > and foreign) Yeah, I took one, too. You think spam is an enemy? HAH! > > But > > what is the solution to this problem from a parents point of view? > > Simple - control the material. What is the problem from a non-parent (by choice) point of view? Simple: control your fucking kids! That's the number one problem in the USofA today. Parents let their fucking kids run wild. Mom works, Dad works, Kids are free all day to cause trouble, and send spam. Spam is free speech! Ross =-=-=-=-=-=- Ross Wright King Media: Bulk Sales of Software Media and Duplication Services http://www.slip.net/~cdr/kingmedia Voice: (408) 259-2795

1 0

Liberating PGP 5.0 Source Code the Old-Fashioned Way
by Tim May 17 Dec '03

17 Dec '03

At 10:46 AM -0700 6/24/97, Lucky Green wrote: >At 02:08 AM 6/24/97 -0700, Mark Grant wrote: >>It's kind of hard to modify the code when I'm still waiting for the PGP >>5.0 code to be made available. I can't do a lot until people finish >>OCR-ing it. > >Note that the scanning teams are looking for non-US volunteers to proofread >the scanns. Each volunteer gets 100 pages. They must have access to a box >with perl and a C compiler to process the per-page error correcting code. >You *don't* need a scanner. A lot of work that could better be spent in other areas. Why doesn't one of the many persons with access to the PGP 5.0 code already in machine readable form just mail it to the group doing the scanning and whatnot? (Using remailers, obviously. And even making it look like a porno image file. Whatever. Even easier: just put the source code CD-ROM in an envelope and mail it to Norway. "Duh.") This would shorten the process, and the Norwegian group could announce "We're done!!!" So, PGP employees, do it today. (Or send me the source on CD-ROM.....) --Tim May There's something wrong when I'm a felon under an increasing number of laws. Only one response to the key grabbers is warranted: "Death to Tyrants!" ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^1398269 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0