September 2004 - cypherpunks-legacy

Re: Seth Schoen's Hard to Verify Signatures
by John Kelsey 08 Sep '04

08 Sep '04

>From: "\"Hal Finney\"" <hal(a)finney.org> >Sent: Sep 8, 2004 2:48 PM >To: cypherpunks(a)al-qaeda.net >Subject: Seth Schoen's Hard to Verify Signatures >The method Seth describes is to include a random value in the signature >but not to include it in the message. He shows a sample signature >with 3 decimal digits hidden. The only way to verify it is to try all >possibilities for the random values. By controlling how much data is >hidden in this way, the signer can control how long it will take to >verify the signature. I've seen this described in a paper by Abadi, Lomas & Needham as an alternative to a high iteration count for password hashing. >Hal Finney --John Kelsey

1 0

FSTC Issues Call for Participation for Two New Projects
by Jim Salters 08 Sep '04

08 Sep '04

1 0

FSTC Issues Call for Participation for Two New Projects
by Jim Salters 08 Sep '04

08 Sep '04

1 0

Re: Seth Schoen's Hard to Verify Signatures
by Major Variola (ret) 08 Sep '04

08 Sep '04

At 11:48 AM 9/8/04 -0700, Hal Finney wrote: >Seth Schoen of the EFF proposed an interesting cryptographic primitive >called a "hard to verify signature" in his blog at >http://vitanuova.loyalty.org/weblog/nb.cgi/view/vitanuova/2004/09/02 . >The idea is to have a signature which is fast to make but slow to verify, >with the verification speed under the signer's control. He proposes >that this could be useful with trusted computing to discourage certain >objectionable applications. > >The method Seth describes is to include a random value in the signature >but not to include it in the message. He shows a sample signature >with 3 decimal digits hidden. The only way to verify it is to try all >possibilities for the random values. By controlling how much data is >hidden in this way, the signer can control how long it will take to >verify the signature. This could be called a "salt-free" algorithm :-) Basically its like the problem that a salted-password cracker has to solve when the salt has to be guessed. As far as a modexp() solution, I suggest this, which is as far as I can tell different from what you reference: In an RSA cryptosystem the public exponent is typically low, often 3 or 65537 (for efficiency reasons only a few bits are set; the other constraint is that your message, raised to that power, wraps in your modulus, which makes 65537 a little better). The private exponent is big. Therefore, traditional encryption is "fast", and decryption is slow; the reverse is that signing is slow, verifying a signature is fast. This can be used to achieve Seth's required "fast to make, slow to verify". To achieve the required "user-controllable", the user gets to set the number of bits in the modulus. One might have to use extraordinarily long moduli (making 4Kbits look puny), depending on the time-scale of "slow" and "fast", but so what, primes are free :-) and might even be re-used. If this passes group-muster pass it on..

2 1

FASTER THAN BROADBAND and FREE!...without Any Cost Ever !!!
by Margaret Maroney 08 Sep '04

08 Sep '04

FASTER THAN BROADBAND and FREE! Greetings! My Name Is Margaret; I thought this might be something you might like to check out. I think it's something we could all use. ********************************************************** FASTER THAN BROADBAND and FREE! JUICE is the solution for millions of Internet users who are frustrated by having a slow Internet connection and is the ONLY real alternative to Broadband. JUICE offers a revolutionary and unique internet service to anyone who wants to experience it, world wide and for FREE. JUICE is 4 times quicker than broadband and 40 times faster than dial-up however, the best thing is it's totally FREE and available via any telephone line worldwide. It is revolutionising the way millions of people are connecting to the Internet. It is unique and takes 1 minute to install and is very easy to use. No more Internet bills or call charges, ever again. All you need is a telephone line to get JUICE broadband for FREE. Don't compare this service with any other similar sounding one. JUICE offers revolutionary, unique service that does not reduce the quality of the pages you surf whilst giving you a blistering 2MB (2000kbps) connection for FREE. This is better than broadband. It's faster and cheaper than broadband and it's totally 100% FREE. If you are currently paying for ADSL/Broadband or for call charges via dial-up then JUICE is definitely for you. You can cancel your existing broadband connection and use JUICE without paying the standard monthly rental or call charges on dial-up. JUICE is the only FREE for all service. That's right you don't have to pay for broadband any longer! It's FREE. Upgrade your existing slower ADSL/Broadband or dial-up to a blistering 2MB for FREE and keep your existing email address. If you would like to give away JUICE broadband and earn either £27GBP,$48USD, $64AUSD, 39Euro or $74NZD per client, click below. If you think you have read enough and are interested in going to the website and seeing all that is mentioned here and more, & checking it all out just send me an email with *MORE INFORMATION* in the subject line. My Email: onewhocares65(a)netscape.net This offer is open to Internet users world wide. Wherever you live, you can now get a JUICE broadband connection without paying for it. All you need is a telephone line. No wires. No engineers. No need to alter your PC and No CHARGES! JUICE is a software download which utilises a unique 23 patent approved compression technology that increases your existing Internet connection speed to way past faster than broadband. State-of-the-art data compression, byte stream and ultimate data burst technology now guarantees every Internet user an unbelievable lightening connection speed of 2MB. It'll SAVE YOU money. It takes 25 seconds to join and a moment to connect. JUICE is: Easy to install and very simple to use Available anywhere in the world Works with your existing ISP A software download so there is NO need for new hardware FOUR times the speed of normal broadband Compatible with any type of phone line. Works with any PC or MAC of the lowest specification believable Compatible with old 9,600kbps modems upwards to the most modern. Guaranteed to provide a minimum of 2MB and that's SUPER FAST Coming very soon worldwide......... If you would like more information please send me an email with *MORE INFORMATION* in the subject line. My Email: onewhocares65(a)netscape.net Thank You, Margaret E Maroney ************************************************************************ Please note that due to huge demand for FASTER than broadband, you may experience difficulties with the website. If you do find our server either slow or not responding please try again. If you think you have received this offer in error then please accept our apologies.

1 0

insider threat report, by SS
by Major Variola (ret) 08 Sep '04

08 Sep '04

Insider Threat Study: Illicit Cyber Activity in the Banking and Finance Sector Marisa Reddy Randazzo, Ph.D. Dawn Cappelli Michelle Keeney, Ph.D. Andrew Moore Eileen Kowalski CERT. Coordination Center National Threat Assessment Center Software Engineering Institute United States Secret Service Carnegie Mellon University Washington, DC Pittsburgh, PA August 2004 http://www.secretservice.gov/ntac/its_report_040820.pdf Only amateurs attack machines; professionals target people. Bruce Schneier

1 0

FSTC Issues Call for Participation for Two New Projects
by R. A. Hettinga 08 Sep '04

08 Sep '04

The Financial Services Technology Consortium wants to assist banks in providing an "authentication service to government agencies"... Cheers, RAH --- begin forwarded text

1 0

[IP] New research on foreign intelligence surveillance/wiretapping (fwd from dave@farber.net)
by Eugen Leitl 08 Sep '04

08 Sep '04

----- Forwarded message from Dave Farber <dave(a)farber.net> -----

1 0

Re: Gilmore case...Who can make laws?
by Major Variola (ret) 08 Sep '04

08 Sep '04

At 11:19 AM 9/8/04 -0400, Tyler Durden wrote: >Hum. I wonder. Do you think these secret regulations are communicated via >secure channels? What would happen if someone decided to send their own >regulations out to all of the local airline security offices rescinding any >private regs, particularly if one used official-looking letterhead? It would be better to inject *more heinous* secret rules than to attempt to remove them. "Why" is left as an exercise to the reader. Fax would probably suffice. At 01:52 PM 9/7/04 -0500, J.A. Terranson wrote: >I am however intrigued that they may be preparing to posit that secret >rules (which act under color of law) can be enforced without being >described publicly. This, if accepted, would effectively end all >constitutional protections. The phrase "constitutional protections" doesn't pass the giggle test these days. However the courts --when trials get that far-- will still toss out cases in which the state's evidence is not revealed. I expect that behavior will stop when domestic-US secret trials become common. To protect means, methods, and the chiiiildren, of course. At least the Europeans don't take the US seriously, esp after the use of torture was made clear, see eg the German trials. But the US is trying to control them via the oil connection. Rome did not fall in a day.

1 0

Re: Gilmore case...Who can make laws?
by Tyler Durden 08 Sep '04

08 Sep '04

Well, still ruminating... The kind of regulations that regulatory bodies have made in the past are in their nature different from these secret rules I still believe. This is of course aside from their secret nature. Previously, if a regulatory body such as the FCC enacted some kind of policy, they could fine companies that did not comply. From my naive perspective, I didn't view these regs as really having a direct impact on private citizen units/individuals, apart from their organization, but then again I could probably think of exceptions. Hum. I wonder. Do you think these secret regulations are communicated via secure channels? What would happen if someone decided to send their own regulations out to all of the local airline security offices rescinding any private regs, particularly if one used official-looking letterhead? -TD >From: "J.A. Terranson" <measl(a)mfn.org> >To: Eric Cordian <emc(a)artifact.psychedelic.net> >CC: cypherpunks(a)minder.net >Subject: Re: Gilmore case...Who can make laws? >Date: Tue, 7 Sep 2004 13:52:40 -0500 (CDT) > >On Tue, 7 Sep 2004, Eric Cordian wrote: > > > An argument that the TSA cannot make rules, even secret rules, >regulating > > air travel, because it is not Congress, will not pass the giggle test in > > court, unless you can show that the TSA exceeded its regulatory powers. > >Absolutely correct. > >I am however intrigued that they may be preparing to posit that secret >rules (which act under color of law) can be enforced without being >described publicly. This, if accepted, would effectively end all >constitutional protections. > >-- >Yours, > >J.A. Terranson >sysadmin(a)mfn.org >0xBD4A95BF > > "...justice is a duty towards those whom you love and those whom you do > not. And people's rights will not be harmed if the opponent speaks out > about them." Osama Bin Laden > - - - > > "There aught to be limits to freedom!" George Bush > - - - > >Which one scares you more? _________________________________________________________________ Get ready for school! Find articles, homework help and more in the Back to School Guide! http://special.msn.com/network/04backtoschool.armx

1 0