July 2018 - cypherpunks-legacy

[serval-project-dev] Serval Press Release from Flinders University
by Paul Gardner-Stephen 06 Jul '18

06 Jul '18

SOUTH AFRICAN SUPPORT BRINGS NETWORK-LESS MOBILES CLOSER TO REALITY A new, open source, mobile phone technology developed by Flinders Universitybs b digital blacksmithb Dr Paul Gardner-Stephen and which promises to revolutionise telecommunications has earned him a USD400,000 Fellowship from the prestigious philanthropic Shuttleworth Foundation. The Serval Project, created by Dr Paul Gardner-Stephen in response to the devastating 2010 Haiti earthquake, aims to provide mobile telephony in the absence of conventional telecommunications infrastructure. b The Haiti earthquake demonstrated how the infrastructure-oriented mode of communications has no resilience,b Dr Gardner-Stephen said. b If the towers are knocked out, mobile phone handsets become useless lumps of plastic in our hands. The Serval Project has proven that there is no reason for that to be the case,b he said. Using sophisticated mesh network technology, the Serval Project enables mobile phones to communicate to create a b virtual networkb where no network coverage exists. This funding will enable Dr Gardner-Stephenbs team to take the technology from concept-proven capacity to make voice calls, send SMS and map locations and features through to a refined, end-user ready product. b Communications around the world are tightly tied around big enterprise and big infrastructure and itbs good to have as a service. But that service isnbt available to millions of people in remote and poverty-stricken areas,b he said. b The Serval Project isnbt a threat to the telcos. In fact, it will complement the conventional carriers by offloading bedge-trafficb from the networks which will be burdened by increasing data volumes and video calls. b With the generous support of the Shuttleworth Foundation, webll be able to advance the cause of the Serval Project to address these global communications needs.b Dr Gardner-Stephen anticipates that the Serval Project software will be available free to the public within 12 months. b That will allow friends travelling in convoy in the Outback, for instance, to call each other for free from car to car,b he said. b Indeed, we are actively working with Outback communities to trial the technology to provide remote communities with mobile phone and Internet access.b He also extended an invitation to b the worldb to participate in the development of the software which was made available to developers and potential contributors on the Android Market earlier this month. b We would expect that in five yearsb time every mobile phone thatbs manufactured will have our technology,b he said. b We are excited to welcome Dr Gardner-Stephen to the Shuttleworth Foundation fellowship programme. Innovative approaches like his are necessary to enable ubiquitous, affordable access to telecommunications,b says Karien Bezuidenhout, COO of the Shuttleworth Foundation. The Serval Project is built upon the technology of the Village Telco project and acknowledges the generous support of Flinders University, the Dutch NLnet Foundation and the Awesome Foundation. -- You received this message because you are subscribed to the Google Groups "Serval Project Developers" group. To post to this group, send email to serval-project-developers(a)googlegroups.com. To unsubscribe from this group, send email to serval-project-developers+unsubscribe(a)googlegroups.com. For more options, visit this group at http://groups.google.com/group/serval-project-developers?hl=en. ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

[tahoe-lafs-weekly-news] TWN19
by Patrick R McDonald 06 Jul '18

06 Jul '18

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ========================================================== Tahoe-LAFS Weekly News, issue number 19, December 12, 2011 ========================================================== Welcome to the Tahoe-LAFS Weekly News (TWN). Tahoe-LAFS_ is a secure, distributed storage system. `View TWN on the web`_ *or* `subscribe to TWN`_. If you would like to view the "new and improved" TWN, complete with pictures; please take a `look`_. .. _Tahoe-LAFS: http://tahoe-lafs.org .. _View TWN on the web: http://tahoe-lafs.org/trac/tahoe-lafs/wiki/TahoeLAFSWeeklyNews .. _subscribe to TWN: http://tahoe-lafs.org/cgi-bin/mailman/listinfo/tahoe-lafs-weekly-news .. _look: http://tahoe-lafs.org/~marlowe/TWN18.html Announcements and News ====================== pycryptopp 0.6.0 Coming Soon - ---------------------------- The Tahoe-LAFS devs hope to release pycryptopp_ 0.6.0 on 12/16/2011. pycryptopp is a set of Python wrappers for a few of the best crypto algorithms from the `Crypto++`_ library. Below are some of the tickets this release will resolve: * `#35`_: python2+3 compatibility * `#40`_: XSalsa20 * `#42`_: Python HKDF * `#46`_ and `#47`_: AESb XSalsa20 * `#65`_: Microsoft compiler problems * `#70`_: passing IVs smaller than 16 bytes to pycryptopp.cipher.aes.AES uses uninitialized memory * `#75`_: ed25519 .. _pycryptopp: https://tahoe-lafs.org/trac/pycryptopp .. _`Crypto++`: http://cryptopp.com/ .. _`#35`: https://tahoe-lafs.org/trac/pycryptopp/ticket/35 .. _`#40`: https://tahoe-lafs.org/trac/pycryptopp/ticket/40 .. _`#42`: https://tahoe-lafs.org/trac/pycryptopp/ticket/42 .. _`#46`: https://tahoe-lafs.org/trac/pycryptopp/ticket/46 .. _`#47`: https://tahoe-lafs.org/trac/pycryptopp/ticket/47 .. _`#65`: https://tahoe-lafs.org/trac/pycryptopp/ticket/65 .. _`#70`: https://tahoe-lafs.org/trac/pycryptopp/ticket/70 .. _`#75`: https://tahoe-lafs.org/trac/pycryptopp/ticket/75 - From the tahoe-dev Mailing List =============================== Tahoe as a Backend Driver for iRODS - ----------------------------------- Jimmy Tang submitted the idea of `using tahoe as a backend driver for iRODS`_. iRODS_ is a data grid software system developed by the Data Intensive Cyber Environments research group (developers of the SRB, the Storage Resource Broker), and collaborators. The list discussed Jimmy's previous work with Tahoe-LAFS and `git-annex`_, paying attention particularly to potential performance bottlenecks. The prevailing hope is Jimmy will attempt the project to determine if the potential bottlenecks are real. .. _`using tahoe as a backend driver for iRODS`: https://tahoe-lafs.org/pipermail/tahoe-dev/2011-December/006872.html .. _iRODS: https://www.irods.org/index.php/IRODS:Data_Grids,_Digital_Libraries,_Persis… .. _`git-annex`: http://git-annex.branchable.com/ Tahoe Provisioning Tool - ----------------------- Jimmy Tang also submitted a patch for the `tahoe provisioning tool`_. The patch would update the provisioning tool to be more current with disk and user data sizes. Brian Warner |brian| contemplated removing the tool from the Tahoe executable and making it a standalone program. When Brian makes this change, he will implement Jimmy's patch. An example of Brian's work on this may be seen here_. .. _`tahoe provisioning tool`: https://tahoe-lafs.org/pipermail/tahoe-dev/2011-December/006876.html .. _here: https://github.com/warner/tahoe-lafs/tree/deprovisioning Patch Needing Review of the Week ================================ There are five (5) tickets still needing review for 1.10: * `#393`_: mutable: implement MDMF * `#1265`_: New Visualizer is insufficiently labelled/documented (plus layout problem) * `#1398`_: make docs/performance.rst more precise and accurate * `#1566`_: if a stored share has a corrupt header, other shares held by that server for the file should still be accessible to clients * `#1593`_: the drop-upload dircap should be in BASEDIR/private/ .. _`#393`: http://tahoe-lafs.org/trac/tahoe-lafs/ticket/393 .. _`#1265`: http://tahoe-lafs.org/trac/tahoe-lafs/ticket/1265 .. _`#1398`: http://tahoe-lafs.org/trac/tahoe-lafs/ticket/1398 .. _`#1566`: http://tahoe-lafs.org/trac/tahoe-lafs/ticket/1566 .. _`#1593`: https://tahoe-lafs.org/trac/tahoe-lafs/ticket/1593 - ---- *The Tahoe-LAFS Weekly News is published once a week by The Tahoe-LAFS* *Software Foundation, President and Treasurer: Peter Secor* |peter| *. Scribes: Patrick "marlowe" McDonald* |marlowe| *, Zooko Wilcox-O'Hearn* |zooko| *, Editor: Zooko.* `View TWN on the web`_ *or* `subscribe to TWN`_ *. Send your news stories to* `marlowe(a)antagonism.org`_ *b submission deadline: Friday night.* .. _marlowe(a)antagonism.org: mailto:marlowe@antagonism.org .. |zooko| image:: zooko.png :height: 35 :alt: zooko :target: http://tahoe-lafs.org/trac/tahoe-lafs/wiki/AboutUs .. |brian| image:: warner.png :height: 35 :alt: brian :target: http://tahoe-lafs.org/trac/tahoe-lafs/wiki/AboutUs .. |peter| image:: psecor.jpg :height: 35 :alt: peter :target: http://tahoe-lafs.org/trac/tahoe-lafs/wiki/AboutUs .. |marlowe| image:: marlowe-x75-bw.jpg :height: 35 :alt: marlowe :target: http://tahoe-lafs.org/trac/tahoe-lafs/wiki/AboutUs - -- - ---------------------------------------------------------------- | Patrick R. McDonald GPG Key: A2D1E972 | | https://www.antagonism.org/ <marlowe(a)antagonism.org> | | <mcdonald.patrick.r(a)gmail.com> | | <patrick(a)opensecurityfoundation.org> | - ---------------------------------------------------------------- | Malo periculosam libertatem quam quietum servitium | - ---------------------------------------------------------------- -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQIcBAEBCAAGBQJO5zw+AAoJEAT4nRyi0elyJ34P/0cxzylSkRB9W8giBdrpcHUb 6snAZMMkoUDvjq3yhMn7KKW1P6+Af6KZsnJndUoDuWwuiBhcVEER5oRBDniVE/It 2XoMgH5MrLI0APEfJddBEr6sbSuIRevrsLVKsZUSgubVDDxr344GMoBIU3xLymjc OYmd9OSpB8FnM05GeDRggIABbaBsF/gjSAA/fV20vSy9NOxMJkOm13WKEai+eFS9 4HNthfvWInroAKgbhaVzh8gY0YtpFqSo8torPrqHqqWUvtDO+2NxaudmrdTe0/xH G7zWaya2gxYkQVwRE5ew0R6cfV4G+dGDyyxNkS8VERascDMJLSsT6btm2Jz8e/XW 0AgiizBl8ejgxetW7y38kLMBfKD3f2ttnT3rnStv7Vjqo6ttJoJnK/EQFTK6c5tx e5WkMSRco0T1bgoWm7pAHpoZxTwdEQaHn3xWMF3YO41TUgXWvzdxmaH+f5rk5In5 m+4aXaaTDxiEwm8abqWMo84HvnxET/4aVwCkldX0uHWWHNjxcJn0igN4UsFdiTFa 6ftsDEku7Ampo6cL+Hg+cVGRBmbSFOo9FZOGNd5joTby9VnaKhZQz35mjZUjX9f8 /Pqvsguc1XoWGKtn8AJXhVIsJBbeft+6mEwW2k/dO4hhyjB/NfuFw14zyqeqJDns k0/R2MXe39kpJ8pLSyz2 =gUFL -----END PGP SIGNATURE----- _______________________________________________ tahoe-lafs-weekly-news mailing list tahoe-lafs-weekly-news(a)tahoe-lafs.org http://tahoe-lafs.org/cgi-bin/mailman/listinfo/tahoe-lafs-weekly-news ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Appeals Circuit Ruling: ISPs Can Read E-Mail
by brian-slashdotnews＠hyperreal.org 06 Jul '18

06 Jul '18

Link: http://slashdot.org/article.pl?sid=04/06/30/2014242 Posted by: timothy, on 2004-06-30 20:54:00 Topic: privacy, 248 comments from the odd-distinctions dept. leviramsey writes "The US Court of Appeals for the First Circuit (covering Massachusetts, Maine, New Hampshire, and Rhode Island) has ruled that [1]e-mail providers are not violating the law by reading users' e-mail without the user's consent. The [2]decision finds that the Wiretap Act does not cover interception of communications where the communications are being stored, not transmitted. Perhaps OSDN should send the defendant, accused in 2001 of reading users emails in order to find out what they were interested in purchasing from Amazon, a [3]T-shirt from ThinkGeek?" References 1. http://www.wired.com/news/politics/0,1283,64043,00.html?tw=wn_tophead_1 2. http://www.ca1.uscourts.gov/pdf.opinions/03-1383-01A.pdf 3. http://www.thinkgeek.com/tshirts/frustrations/31fb/ ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> ______________________________________________________________ ICBM: 48.07078, 11.61144 http://www.leitl.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE http://moleculardevices.org http://nanomachines.net [demime 1.01d removed an attachment of type application/pgp-signature]

1 0

[serval-project-dev] Serval Press Release from Flinders University
by Paul Gardner-Stephen 06 Jul '18

06 Jul '18

SOUTH AFRICAN SUPPORT BRINGS NETWORK-LESS MOBILES CLOSER TO REALITY A new, open source, mobile phone technology developed by Flinders Universitybs b digital blacksmithb Dr Paul Gardner-Stephen and which promises to revolutionise telecommunications has earned him a USD400,000 Fellowship from the prestigious philanthropic Shuttleworth Foundation. The Serval Project, created by Dr Paul Gardner-Stephen in response to the devastating 2010 Haiti earthquake, aims to provide mobile telephony in the absence of conventional telecommunications infrastructure. b The Haiti earthquake demonstrated how the infrastructure-oriented mode of communications has no resilience,b Dr Gardner-Stephen said. b If the towers are knocked out, mobile phone handsets become useless lumps of plastic in our hands. The Serval Project has proven that there is no reason for that to be the case,b he said. Using sophisticated mesh network technology, the Serval Project enables mobile phones to communicate to create a b virtual networkb where no network coverage exists. This funding will enable Dr Gardner-Stephenbs team to take the technology from concept-proven capacity to make voice calls, send SMS and map locations and features through to a refined, end-user ready product. b Communications around the world are tightly tied around big enterprise and big infrastructure and itbs good to have as a service. But that service isnbt available to millions of people in remote and poverty-stricken areas,b he said. b The Serval Project isnbt a threat to the telcos. In fact, it will complement the conventional carriers by offloading bedge-trafficb from the networks which will be burdened by increasing data volumes and video calls. b With the generous support of the Shuttleworth Foundation, webll be able to advance the cause of the Serval Project to address these global communications needs.b Dr Gardner-Stephen anticipates that the Serval Project software will be available free to the public within 12 months. b That will allow friends travelling in convoy in the Outback, for instance, to call each other for free from car to car,b he said. b Indeed, we are actively working with Outback communities to trial the technology to provide remote communities with mobile phone and Internet access.b He also extended an invitation to b the worldb to participate in the development of the software which was made available to developers and potential contributors on the Android Market earlier this month. b We would expect that in five yearsb time every mobile phone thatbs manufactured will have our technology,b he said. b We are excited to welcome Dr Gardner-Stephen to the Shuttleworth Foundation fellowship programme. Innovative approaches like his are necessary to enable ubiquitous, affordable access to telecommunications,b says Karien Bezuidenhout, COO of the Shuttleworth Foundation. The Serval Project is built upon the technology of the Village Telco project and acknowledges the generous support of Flinders University, the Dutch NLnet Foundation and the Awesome Foundation. -- You received this message because you are subscribed to the Google Groups "Serval Project Developers" group. To post to this group, send email to serval-project-developers(a)googlegroups.com. To unsubscribe from this group, send email to serval-project-developers+unsubscribe(a)googlegroups.com. For more options, visit this group at http://groups.google.com/group/serval-project-developers?hl=en. ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

[tahoe-lafs-weekly-news] TWN19
by Patrick R McDonald 06 Jul '18

06 Jul '18

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 ========================================================== Tahoe-LAFS Weekly News, issue number 19, December 12, 2011 ========================================================== Welcome to the Tahoe-LAFS Weekly News (TWN). Tahoe-LAFS_ is a secure, distributed storage system. `View TWN on the web`_ *or* `subscribe to TWN`_. If you would like to view the "new and improved" TWN, complete with pictures; please take a `look`_. .. _Tahoe-LAFS: http://tahoe-lafs.org .. _View TWN on the web: http://tahoe-lafs.org/trac/tahoe-lafs/wiki/TahoeLAFSWeeklyNews .. _subscribe to TWN: http://tahoe-lafs.org/cgi-bin/mailman/listinfo/tahoe-lafs-weekly-news .. _look: http://tahoe-lafs.org/~marlowe/TWN18.html Announcements and News ====================== pycryptopp 0.6.0 Coming Soon - ---------------------------- The Tahoe-LAFS devs hope to release pycryptopp_ 0.6.0 on 12/16/2011. pycryptopp is a set of Python wrappers for a few of the best crypto algorithms from the `Crypto++`_ library. Below are some of the tickets this release will resolve: * `#35`_: python2+3 compatibility * `#40`_: XSalsa20 * `#42`_: Python HKDF * `#46`_ and `#47`_: AESb XSalsa20 * `#65`_: Microsoft compiler problems * `#70`_: passing IVs smaller than 16 bytes to pycryptopp.cipher.aes.AES uses uninitialized memory * `#75`_: ed25519 .. _pycryptopp: https://tahoe-lafs.org/trac/pycryptopp .. _`Crypto++`: http://cryptopp.com/ .. _`#35`: https://tahoe-lafs.org/trac/pycryptopp/ticket/35 .. _`#40`: https://tahoe-lafs.org/trac/pycryptopp/ticket/40 .. _`#42`: https://tahoe-lafs.org/trac/pycryptopp/ticket/42 .. _`#46`: https://tahoe-lafs.org/trac/pycryptopp/ticket/46 .. _`#47`: https://tahoe-lafs.org/trac/pycryptopp/ticket/47 .. _`#65`: https://tahoe-lafs.org/trac/pycryptopp/ticket/65 .. _`#70`: https://tahoe-lafs.org/trac/pycryptopp/ticket/70 .. _`#75`: https://tahoe-lafs.org/trac/pycryptopp/ticket/75 - From the tahoe-dev Mailing List =============================== Tahoe as a Backend Driver for iRODS - ----------------------------------- Jimmy Tang submitted the idea of `using tahoe as a backend driver for iRODS`_. iRODS_ is a data grid software system developed by the Data Intensive Cyber Environments research group (developers of the SRB, the Storage Resource Broker), and collaborators. The list discussed Jimmy's previous work with Tahoe-LAFS and `git-annex`_, paying attention particularly to potential performance bottlenecks. The prevailing hope is Jimmy will attempt the project to determine if the potential bottlenecks are real. .. _`using tahoe as a backend driver for iRODS`: https://tahoe-lafs.org/pipermail/tahoe-dev/2011-December/006872.html .. _iRODS: https://www.irods.org/index.php/IRODS:Data_Grids,_Digital_Libraries,_Persis… .. _`git-annex`: http://git-annex.branchable.com/ Tahoe Provisioning Tool - ----------------------- Jimmy Tang also submitted a patch for the `tahoe provisioning tool`_. The patch would update the provisioning tool to be more current with disk and user data sizes. Brian Warner |brian| contemplated removing the tool from the Tahoe executable and making it a standalone program. When Brian makes this change, he will implement Jimmy's patch. An example of Brian's work on this may be seen here_. .. _`tahoe provisioning tool`: https://tahoe-lafs.org/pipermail/tahoe-dev/2011-December/006876.html .. _here: https://github.com/warner/tahoe-lafs/tree/deprovisioning Patch Needing Review of the Week ================================ There are five (5) tickets still needing review for 1.10: * `#393`_: mutable: implement MDMF * `#1265`_: New Visualizer is insufficiently labelled/documented (plus layout problem) * `#1398`_: make docs/performance.rst more precise and accurate * `#1566`_: if a stored share has a corrupt header, other shares held by that server for the file should still be accessible to clients * `#1593`_: the drop-upload dircap should be in BASEDIR/private/ .. _`#393`: http://tahoe-lafs.org/trac/tahoe-lafs/ticket/393 .. _`#1265`: http://tahoe-lafs.org/trac/tahoe-lafs/ticket/1265 .. _`#1398`: http://tahoe-lafs.org/trac/tahoe-lafs/ticket/1398 .. _`#1566`: http://tahoe-lafs.org/trac/tahoe-lafs/ticket/1566 .. _`#1593`: https://tahoe-lafs.org/trac/tahoe-lafs/ticket/1593 - ---- *The Tahoe-LAFS Weekly News is published once a week by The Tahoe-LAFS* *Software Foundation, President and Treasurer: Peter Secor* |peter| *. Scribes: Patrick "marlowe" McDonald* |marlowe| *, Zooko Wilcox-O'Hearn* |zooko| *, Editor: Zooko.* `View TWN on the web`_ *or* `subscribe to TWN`_ *. Send your news stories to* `marlowe(a)antagonism.org`_ *b submission deadline: Friday night.* .. _marlowe(a)antagonism.org: mailto:marlowe@antagonism.org .. |zooko| image:: zooko.png :height: 35 :alt: zooko :target: http://tahoe-lafs.org/trac/tahoe-lafs/wiki/AboutUs .. |brian| image:: warner.png :height: 35 :alt: brian :target: http://tahoe-lafs.org/trac/tahoe-lafs/wiki/AboutUs .. |peter| image:: psecor.jpg :height: 35 :alt: peter :target: http://tahoe-lafs.org/trac/tahoe-lafs/wiki/AboutUs .. |marlowe| image:: marlowe-x75-bw.jpg :height: 35 :alt: marlowe :target: http://tahoe-lafs.org/trac/tahoe-lafs/wiki/AboutUs - -- - ---------------------------------------------------------------- | Patrick R. McDonald GPG Key: A2D1E972 | | https://www.antagonism.org/ <marlowe(a)antagonism.org> | | <mcdonald.patrick.r(a)gmail.com> | | <patrick(a)opensecurityfoundation.org> | - ---------------------------------------------------------------- | Malo periculosam libertatem quam quietum servitium | - ---------------------------------------------------------------- -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) iQIcBAEBCAAGBQJO5zw+AAoJEAT4nRyi0elyJ34P/0cxzylSkRB9W8giBdrpcHUb 6snAZMMkoUDvjq3yhMn7KKW1P6+Af6KZsnJndUoDuWwuiBhcVEER5oRBDniVE/It 2XoMgH5MrLI0APEfJddBEr6sbSuIRevrsLVKsZUSgubVDDxr344GMoBIU3xLymjc OYmd9OSpB8FnM05GeDRggIABbaBsF/gjSAA/fV20vSy9NOxMJkOm13WKEai+eFS9 4HNthfvWInroAKgbhaVzh8gY0YtpFqSo8torPrqHqqWUvtDO+2NxaudmrdTe0/xH G7zWaya2gxYkQVwRE5ew0R6cfV4G+dGDyyxNkS8VERascDMJLSsT6btm2Jz8e/XW 0AgiizBl8ejgxetW7y38kLMBfKD3f2ttnT3rnStv7Vjqo6ttJoJnK/EQFTK6c5tx e5WkMSRco0T1bgoWm7pAHpoZxTwdEQaHn3xWMF3YO41TUgXWvzdxmaH+f5rk5In5 m+4aXaaTDxiEwm8abqWMo84HvnxET/4aVwCkldX0uHWWHNjxcJn0igN4UsFdiTFa 6ftsDEku7Ampo6cL+Hg+cVGRBmbSFOo9FZOGNd5joTby9VnaKhZQz35mjZUjX9f8 /Pqvsguc1XoWGKtn8AJXhVIsJBbeft+6mEwW2k/dO4hhyjB/NfuFw14zyqeqJDns k0/R2MXe39kpJ8pLSyz2 =gUFL -----END PGP SIGNATURE----- _______________________________________________ tahoe-lafs-weekly-news mailing list tahoe-lafs-weekly-news(a)tahoe-lafs.org http://tahoe-lafs.org/cgi-bin/mailman/listinfo/tahoe-lafs-weekly-news ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

[cryptography] Malware-signing certs with 512-bit keys
by Peter Gutmann 06 Jul '18

06 Jul '18

[NB: Crossposted to two lists where this issue has been discussed in the past] So it seems like pretty much everyone (at least on these lists) has heard about the Malaysian CA that issued 512-bit certs for which the keys were factored and used to sign malware, and that had their CA cert pulled because of this. What's had much less (in fact apparently zero) attention is the fact that Digicert Sdn. Bhd. only issued three of the nine certificates that were used for malware signing. Three more were issued by Cybertrust, and one each by GlobalSign, Taiwan-CA, and Anthem. The first three are root CAs, Anthem is one of the vast number of you'll-only-find-out-they-exist-when-they're-used- to-attack-you sub-CAs that are out there. Given that the Malaysian CA had its cert pulled for this, can we get a statment from browser vendors on whether Cybertrust, GlobalSign, and the others will also similarly have their certs pulled for exactly the same behaviour? A rather interesting feature of the malware signatures is that although the issuers look like random unconnected CAs, if you look at the signatures that the nine certs were used with, each of them ends up at the GTE Cybertrust (= Verizon, the last time I checked) root. Using data from the mid-2010 dates in question: http://www.securityspace.com/s_survey/data/man.201004/casurvey.html gives them a 0.11% market share, but they represent 100% of the roots used for the malware signatures. That just doesn't seem right. Finally, there are even further 512-bit certs out there, some issued as recently as a few months ago. The A-Data one in the collection below was reported to the CA but they haven't taken any action (do they get their cert pulled as well for that?). As the person who provided them commented, "so knock yourself out, have the modulus factorized and sign some crazy code :-)". Acknowledgements: Michael Sandee and Ondrej Mikle provided information for this report. Any inadvertent mangling of details was my fault. Peter. -----BEGIN CERTIFICATE----- MIIEMjCCAxqgAwIBAgIDCCiOMA0GCSqGSIb3DQEBBQUAMIGHMQswCQYDVQQGEwJB VDFIMEYGA1UECgw/QS1UcnVzdCBHZXMuIGYuIFNpY2hlcmhlaXRzc3lzdGVtZSBp bSBlbGVrdHIuIERhdGVudmVya2VociBHbWJIMRYwFAYDVQQLDA1hLXNpZ24tU1NM LTAzMRYwFAYDVQQDDA1hLXNpZ24tU1NMLTAzMB4XDTEwMTEyMzEyMDYzMloXDTE1 MTEyMzEyMDYzMlowOTEgMB4GA1UEAwwXbW9id2ViZGF2LmhvY2hnZXJuZXIuYXQx FTATBgNVBAUTDDY3OTU0Njc0MzMwNDBcMA0GCSqGSIb3DQEBAQUAA0sAMEgCQQCX zfoFylBNoYtgK//wMeJ/0ihq1N8hfjr9gw1Tqgk6IeBDnFmxIqz6eSssC8N/HyBE i2VGRlplzorD7Q0QGdazAgMBAAGjggG6MIIBtjATBgNVHSMEDDAKgAhAPqHTYrQD 3TByBggrBgEFBQcBAQRmMGQwJwYIKwYBBQUHMAGGG2h0dHA6Ly9vY3NwLmEtdHJ1 c3QuYXQvb2NzcDA5BggrBgEFBQcwAoYtaHR0cDovL3d3dy5hLXRydXN0LmF0L2Nl cnRzL2Etc2lnbi1zc2wtMDMuY3J0MEsGA1UdIAREMEIwQAYGKigAEQEUMDYwNAYI KwYBBQUHAgEWKGh0dHA6Ly93d3cuYS10cnVzdC5hdC9kb2NzL2NwL2Etc2lnbi1z c2wwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge2xkYXA6Ly9sZGFwLmEtdHJ1c3QuYXQv b3U9YS1zaWduLVNTTC0wMyxvPUEtVHJ1c3QsYz1BVD9jZXJ0aWZpY2F0ZXJldm9j YXRpb25saXN0P2Jhc2U/b2JqZWN0Y2xhc3M9ZWlkQ2VydGlmaWNhdGlvbkF1dGhv cml0eTARBgNVHQ4ECgQIQjKcthkEWcUwDgYDVR0PAQH/BAQDAgWgMB4GA1UdEQQX MBWBE3JvbWFuQGhvY2hnZXJuZXIuYXQwCQYDVR0TBAIwADANBgkqhkiG9w0BAQUF AAOCAQEAJfdXmLQUKUQByU4WS2pthkD9QZW2CB498FwCfT/v69lgtzU8h8Hu1L1g zVwG0GbitXk92rDxwF7XdU9MANFvGSxqKxGfcErZuqCX2+pYU4/zJCHlR6voYHoX AJQPCY3PRM5USUWmysKaQ2wzwap8nqWpRMpcq+fUk49LR8CfFa9f63z++GthJtl6 d2OytiukgZ8Ea0edLyLDWr4B9UC+C+UhNJXjKtiMXHDYbbFmNzIszdUNOPuN4YI9 O2LG3YUH44McHiFGdU4WKtIOpkDJJPi7xPQp8uAOxCHnSFuJWem21ca/am1InMPG hPWV3vw3Qht0GbhHrROdAu2Rxi5Kfg== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIID0zCCArugAwIBAgIDLo6gMA0GCSqGSIb3DQEBBQUAME4xCzAJBgNVBAYTAkhL MRYwFAYDVQQKEw1Ib25na29uZyBQb3N0MScwJQYDVQQDEx5Ib25na29uZyBQb3N0 IGUtQ2VydCBDQSAxIC0gMTAwHhcNMTEwODAyMDQwNjQxWhcNMTIwODI4MDgyNzUx WjCBtTELMAkGA1UEBhMCSEsxJjAkBgNVBAoTHUhvbmdrb25nIFBvc3QgZS1DZXJ0 IChTZXJ2ZXIpMRMwEQYDVQQLEwowMDAxODUyODYwMSEwHwYDVQQLExgzODkxNzE1 MjAwMDAxMTEyMDAwTFA0MDkxKjAoBgNVBAsTIVRDSElCTyBNRVJDSEFORElTSU5H IEhPTkcgS09ORyBMUDEaMBgGA1UEAxMRb3RzLnRjaGliby5jb20uaGswXDANBgkq hkiG9w0BAQEFAANLADBIAkEA4K8j18RyT+8dXi396kNp+5/GbJsjDpYJYNDWo8Ba pmJXDapaR3RHsbtmMmpnXjaBCH+s7cNxWy6BIgiQju3vEQIDAQABo4IBGDCCARQw PgYDVR0gBDcwNTAzBgorBgEEAf0eAQETMCUwIwYIKwYBBQUHAgEWF3d3dy5ob25n a29uZ3Bvc3QuZ292LmhrMAkGA1UdEwQCMAAwEQYJYIZIAYb4QgEBBAQDAgZAMA4G A1UdDwEB/wQEAwIFIDBaBgNVHSMEUzBRoUukSTBHMQswCQYDVQQGEwJISzEWMBQG A1UEChMNSG9uZ2tvbmcgUG9zdDEgMB4GA1UEAxMXSG9uZ2tvbmcgUG9zdCBSb290 IENBIDGCAgR5MEgGA1UdHwRBMD8wPaA7oDmGN2h0dHA6Ly9jcmwxLmhvbmdrb25n cG9zdC5nb3YuaGsvY3JsL2VDZXJ0Q0ExLTEwQ1JMMS5jcmwwDQYJKoZIhvcNAQEF BQADggEBAEBPvjxHDOFXYbkHeIWoF6Y3iODAtxYoDvPXIsEPYCS+MAyxWUYoOtIi XHKnuSk17czOwsFsr/7rmKUID1lzH0l0/XduELw7SzsiwuSEFrS35Zsy8LYXdXLa Y131CRGlM6ZTW6+OZRaavD0SC5S1ZACpSoG2DV5ZfvUgbqnJRpmGkA4VMC7cD2Iv xCGNjGoS3XTmFC0ZFnwAelguyzqgCvIyR2cTAfKf0vyTOJq4ntD5ZCkQN9sKd4o6 0UNKI0KAjFOE6mdrEnKYTfIogYMLJAw+QtxF2KesTI00OrYCIWhrz/tZVKL8IXah 76Z3si0R7Dki1cHdVMrQrFRxExiSRPY= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIID2zCCAsOgAwIBAgIDLi8KMA0GCSqGSIb3DQEBBQUAME4xCzAJBgNVBAYTAkhL MRYwFAYDVQQKEw1Ib25na29uZyBQb3N0MScwJQYDVQQDEx5Ib25na29uZyBQb3N0 IGUtQ2VydCBDQSAxIC0gMTAwHhcNMTAxMDIwMDIyMzUxWhcNMTIxMTAzMDY0NzUw WjCBvTELMAkGA1UEBhMCSEsxJjAkBgNVBAoTHUhvbmdrb25nIFBvc3QgZS1DZXJ0 IChTZXJ2ZXIpMRMwEQYDVQQLEwowMDAxNzYwOTg5MSUwIwYDVQQLExwwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDBMQ1NEMSEwHwYDVQQLExhIb25nIEtvbmcgU0FSIEdv dmVybm1lbnQxDTALBgNVBAsTBExDU0QxGDAWBgNVBAMTD29pYy5sY3NkLmdvdi5o azBcMA0GCSqGSIb3DQEBAQUAA0sAMEgCQQDxH35W/jV6jNLBDJ1y9n+ANnjPfLLy VrAicVMaK9/azMvt+xSfZ9+BSNbtF737Vj8hrohRrFWr/IOnb7oS8RT/AgMBAAGj ggEYMIIBFDA+BgNVHSAENzA1MDMGCisGAQQB/R4BARMwJTAjBggrBgEFBQcCARYX d3d3Lmhvbmdrb25ncG9zdC5nb3YuaGswCQYDVR0TBAIwADARBglghkgBhvhCAQEE BAMCBkAwDgYDVR0PAQH/BAQDAgUgMFoGA1UdIwRTMFGhS6RJMEcxCzAJBgNVBAYT AkhLMRYwFAYDVQQKEw1Ib25na29uZyBQb3N0MSAwHgYDVQQDExdIb25na29uZyBQ b3N0IFJvb3QgQ0EgMYICBHkwSAYDVR0fBEEwPzA9oDugOYY3aHR0cDovL2NybDEu aG9uZ2tvbmdwb3N0Lmdvdi5oay9jcmwvZUNlcnRDQTEtMTBDUkwxLmNybDANBgkq hkiG9w0BAQUFAAOCAQEAEMFWGh83PWc61ymoOFv0tvo8xMkQQmB+vO3MWhBf8YzS aEetmYVP5O1LINV5KHHWpT5EZMIIA3ffRD7QVkRZOxPFewkLWK6UaujV9XevP2Fe RotXs0tPpOHQbz5+z7ZCRvQBxayT+O/dQopKC0gfDEvDvJrV+6Mlelkric+mPkSM x5zYaRdqMupVUTvYiY8D/dtG9ITrpk/lhVKcIJzwY0EFRCVUoUX1ldAEn4gyckMP VSrG8qtuZmzsv8JjFOcwpDe+5Ull/87SCw3KUmnA0VNbU26WfzPYhTEBIizbj4dI YinocNVD3+LRLubcgApi7YI0aepeBYns+OOOfwL+RQ== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIID2zCCAsOgAwIBAgIDLi8KMA0GCSqGSIb3DQEBBQUAME4xCzAJBgNVBAYTAkhL MRYwFAYDVQQKEw1Ib25na29uZyBQb3N0MScwJQYDVQQDEx5Ib25na29uZyBQb3N0 IGUtQ2VydCBDQSAxIC0gMTAwHhcNMTAxMDIwMDIyMzUxWhcNMTIxMTAzMDY0NzUw WjCBvTELMAkGA1UEBhMCSEsxJjAkBgNVBAoTHUhvbmdrb25nIFBvc3QgZS1DZXJ0 IChTZXJ2ZXIpMRMwEQYDVQQLEwowMDAxNzYwOTg5MSUwIwYDVQQLExwwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDBMQ1NEMSEwHwYDVQQLExhIb25nIEtvbmcgU0FSIEdv dmVybm1lbnQxDTALBgNVBAsTBExDU0QxGDAWBgNVBAMTD29pYy5sY3NkLmdvdi5o azBcMA0GCSqGSIb3DQEBAQUAA0sAMEgCQQDxH35W/jV6jNLBDJ1y9n+ANnjPfLLy VrAicVMaK9/azMvt+xSfZ9+BSNbtF737Vj8hrohRrFWr/IOnb7oS8RT/AgMBAAGj ggEYMIIBFDA+BgNVHSAENzA1MDMGCisGAQQB/R4BARMwJTAjBggrBgEFBQcCARYX d3d3Lmhvbmdrb25ncG9zdC5nb3YuaGswCQYDVR0TBAIwADARBglghkgBhvhCAQEE BAMCBkAwDgYDVR0PAQH/BAQDAgUgMFoGA1UdIwRTMFGhS6RJMEcxCzAJBgNVBAYT AkhLMRYwFAYDVQQKEw1Ib25na29uZyBQb3N0MSAwHgYDVQQDExdIb25na29uZyBQ b3N0IFJvb3QgQ0EgMYICBHkwSAYDVR0fBEEwPzA9oDugOYY3aHR0cDovL2NybDEu aG9uZ2tvbmdwb3N0Lmdvdi5oay9jcmwvZUNlcnRDQTEtMTBDUkwxLmNybDANBgkq hkiG9w0BAQUFAAOCAQEAEMFWGh83PWc61ymoOFv0tvo8xMkQQmB+vO3MWhBf8YzS aEetmYVP5O1LINV5KHHWpT5EZMIIA3ffRD7QVkRZOxPFewkLWK6UaujV9XevP2Fe RotXs0tPpOHQbz5+z7ZCRvQBxayT+O/dQopKC0gfDEvDvJrV+6Mlelkric+mPkSM x5zYaRdqMupVUTvYiY8D/dtG9ITrpk/lhVKcIJzwY0EFRCVUoUX1ldAEn4gyckMP VSrG8qtuZmzsv8JjFOcwpDe+5Ull/87SCw3KUmnA0VNbU26WfzPYhTEBIizbj4dI YinocNVD3+LRLubcgApi7YI0aepeBYns+OOOfwL+RQ== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIID6TCCAtGgAwIBAgIDLi62MA0GCSqGSIb3DQEBBQUAME4xCzAJBgNVBAYTAkhL MRYwFAYDVQQKEw1Ib25na29uZyBQb3N0MScwJQYDVQQDEx5Ib25na29uZyBQb3N0 IGUtQ2VydCBDQSAxIC0gMTAwHhcNMTAxMDE5MDM0MzE0WhcNMTIxMTA3MDMxMzI3 WjCByzELMAkGA1UEBhMCSEsxJjAkBgNVBAoTHUhvbmdrb25nIFBvc3QgZS1DZXJ0 IChTZXJ2ZXIpMRMwEQYDVQQLEwowMDAxODU2ODU4MSEwHwYDVQQLExgzMDI4ODIy MDAwMDA1MDhBMDA2NzcxNDcxPDA6BgNVBAsTM0ZBUlJJTkdUT04gQU1FUklDQU4g RVhQUkVTUyBUUkFWRUwgU0VSVklDRVMgTElNSVRFRDEeMBwGA1UEAxMVd3d3LmFt ZXh0cmF2ZWwuY29tLmhrMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAM9OjldrW2Ar jiLKl6MhSFzonx787bsy54r/cmKhsH+wb27BVf/Oo1Da4oPerVDH1DG3E3WRsoNc Ew5bN5lYiHUCAwEAAaOCARgwggEUMD4GA1UdIAQ3MDUwMwYKKwYBBAH9HgEBEzAl MCMGCCsGAQUFBwIBFhd3d3cuaG9uZ2tvbmdwb3N0Lmdvdi5oazAJBgNVHRMEAjAA MBEGCWCGSAGG+EIBAQQEAwIGQDAOBgNVHQ8BAf8EBAMCBSAwWgYDVR0jBFMwUaFL pEkwRzELMAkGA1UEBhMCSEsxFjAUBgNVBAoTDUhvbmdrb25nIFBvc3QxIDAeBgNV BAMTF0hvbmdrb25nIFBvc3QgUm9vdCBDQSAxggIEeTBIBgNVHR8EQTA/MD2gO6A5 hjdodHRwOi8vY3JsMS5ob25na29uZ3Bvc3QuZ292LmhrL2NybC9lQ2VydENBMS0x MENSTDEuY3JsMA0GCSqGSIb3DQEBBQUAA4IBAQAqIGebX6Iqm1pRg9JkuVzdAfpA TDqO7S/4pZNXC9ZIp+fv/1sLIJiNwhmtMhyuO6h8wWkiMREP34orSXJ0xLks/JPM cmyuSb12DduUPVFYnykEYtDHUD+By+62u08Gg0VeBNuSzPDWHFlVEHweCsbaDrvo +eN3s1v8mDduWE5iNkAwGbtnDC4mKgj66TIip15YAlHxF9U0X6Iaq03L+oXxy76n BAUke1picAgMX5ShALRlGuOUOFI0Yi4S383xuXOE0ZjgOobNArFIDZbSkEtTiEyl PrM/QFq8c7K/mhO7Wsrt0TBBauIVqKA/irIKpg+jeJG+lL6JP7/9P1yTSVma -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIID6zCCAtOgAwIBAgIDI4qRMA0GCSqGSIb3DQEBBQUAMEkxCzAJBgNVBAYTAkhL MRYwFAYDVQQKEw1Ib25na29uZyBQb3N0MSIwIAYDVQQDExlIb25na29uZyBQb3N0 IGUtQ2VydCBDQSAxMB4XDTA5MTEyMzA0MjkyMVoXDTExMTIwOTAzMjMzOFowgdUx CzAJBgNVBAYTAkhLMSYwJAYDVQQKEx1Ib25na29uZyBQb3N0IGUtQ2VydCAoU2Vy dmVyKTETMBEGA1UECxMKMDAwMTIxMDkzMTEnMCUGA1UECxMeMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwREgtUkhVMSEwHwYDVQQLExhIb25nIEtvbmcgU0FSIEdvdmVy bm1lbnQxITAfBgNVBAsTGERILVJhZGlhdGlvbiBIZWFsdGggVW5pdDEaMBgGA1UE AxMRd3d3LmRoLXJodS5nb3YuaGswXDANBgkqhkiG9w0BAQEFAANLADBIAkEAoqbv uYXV9xswou8XILtutEmdT9kwUMb5ltUdBSDGQcAz/Ku1r/rG22JG5Wenih7Du1tt qzpKEbKgtSAaEjSe0wIDAQABo4IBFTCCAREwPgYDVR0gBDcwNTAzBgorBgEEAf0e AQEQMCUwIwYIKwYBBQUHAgEWF3d3dy5ob25na29uZ3Bvc3QuZ292LmhrMAkGA1Ud EwQCMAAwEQYJYIZIAYb4QgEBBAQDAgZAMA4GA1UdDwEB/wQEAwIFIDBaBgNVHSME UzBRoUukSTBHMQswCQYDVQQGEwJISzEWMBQGA1UEChMNSG9uZ2tvbmcgUG9zdDEg MB4GA1UEAxMXSG9uZ2tvbmcgUG9zdCBSb290IENBIDGCAgPtMEUGA1UdHwQ+MDww OqA4oDaGNGh0dHA6Ly9jcmwxLmhvbmdrb25ncG9zdC5nb3YuaGsvY3JsL2VDZXJ0 Q0ExQ1JMMi5jcmwwDQYJKoZIhvcNAQEFBQADggEBAAu625vond5fw/D2B2a0Cj4S 5OMtNOKxzR485W3UoTV/b7ABx13QRKwJK3AWlMwRY7HzbHtDQOHg2HiXvXICpYsq J3PKRotpR+s7yXKjxxtEY0o/cdlYMTTHc443ZIYvDQBbI2CPJsSD8O6q+4dxj1Qp w3H/pCFoZ/z7tNK7nzVuVQolLbruVv5i99dGCa2kNN5+2qgp9aV8G4vo1GpLxpi/ rb/ZUvCDqzOeigmewW/vtGZe0mOZJW29EMLEXBfzcrW2iIw7TClvIGxaQXrxFjAc zu1JEq19/96d7sMkIxdWGW9BfOoY9zMFb9w5srUupK7Z/Y8Ydn/DBsOrnS6AxMQ= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIID3DCCAsSgAwIBAgIDLm8+MA0GCSqGSIb3DQEBBQUAME4xCzAJBgNVBAYTAkhL MRYwFAYDVQQKEw1Ib25na29uZyBQb3N0MScwJQYDVQQDEx5Ib25na29uZyBQb3N0 IGUtQ2VydCBDQSAxIC0gMTAwHhcNMTEwNDI2MDI1MzA0WhcNMTMwNTE5MDcyODA5 WjCBvjELMAkGA1UEBhMCSEsxJjAkBgNVBAoTHUhvbmdrb25nIFBvc3QgZS1DZXJ0 IChTZXJ2ZXIpMRMwEQYDVQQLEwowMDAxODQ4NzM4MSUwIwYDVQQLExwwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDBMQ1NEMSEwHwYDVQQLExhIb25nIEtvbmcgU0FSIEdv dmVybm1lbnQxDTALBgNVBAsTBExDU0QxGTAXBgNVBAMTEGltdHMubGNzZC5nb3Yu aGswXDANBgkqhkiG9w0BAQEFAANLADBIAkEAyey2HOeEHR459PxjQwBQmX8Z8AJ0 IemQhl19uXZJcd6IGOtcFrCWOKT1/pEn1IxzeAejErxAVJAUSoDqnMq1qQIDAQAB o4IBGDCCARQwPgYDVR0gBDcwNTAzBgorBgEEAf0eAQETMCUwIwYIKwYBBQUHAgEW F3d3dy5ob25na29uZ3Bvc3QuZ292LmhrMAkGA1UdEwQCMAAwEQYJYIZIAYb4QgEB BAQDAgZAMA4GA1UdDwEB/wQEAwIFIDBaBgNVHSMEUzBRoUukSTBHMQswCQYDVQQG EwJISzEWMBQGA1UEChMNSG9uZ2tvbmcgUG9zdDEgMB4GA1UEAxMXSG9uZ2tvbmcg UG9zdCBSb290IENBIDGCAgR5MEgGA1UdHwRBMD8wPaA7oDmGN2h0dHA6Ly9jcmwx Lmhvbmdrb25ncG9zdC5nb3YuaGsvY3JsL2VDZXJ0Q0ExLTEwQ1JMMS5jcmwwDQYJ KoZIhvcNAQEFBQADggEBAFSjUZ7jGO593Gt2soWUQmDsEhLlRRaW3V4cyr7glVL5 9UIw+Zn4fciiLTAgXsG6DSaxcsoDZSWxFzjgZCGGw2rWnSnHxbXWQudD3y+jnPC9 h4j/XB8XRkdPDyESOJkF1cwPqYsqZZV+gvMBO9nU7W4q8nt6WCy6qi5DOiHtzyea NO+hQJAd807ge9pKdveH8hPbZdMSBAmhkZZSMN14ItyfEqe1wNCNv6siRtUgzfp8 0G9fV8OoZATYOHlqLuFrXcyRwGqPu/rwcMb1fDyf7PM5L9JerwDsz1ygIgCwmKTV vH4ElrId5uf3mSBt87bkvwLT3VGKS0eldjbIhEwp4Ns= -----END CERTIFICATE----- _______________________________________________ cryptography mailing list cryptography(a)randombit.net http://lists.randombit.net/mailman/listinfo/cryptography ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

[cryptography] Donbt trust satellite phones b The GMR-1 and GMR-2 ciphers have been broken
by Jeffrey Walton 06 Jul '18

06 Jul '18

http://cryptanalysis.eu/blog/2012/02/02/dont-trust-satellite-phones-the-gmr… Today, February 2nd 2012, Benedikt Driessen and Ralf Hund gave a very interesting talk at Ruhr UniversitC$t Bochum about their work on satellite phone security. In a nutshell, they were able to reverse engineer and to break the secret ciphers used in many satellite phone systems, namely the GMR-1 and the GMR-2 ciphers. ... _______________________________________________ cryptography mailing list cryptography(a)randombit.net http://lists.randombit.net/mailman/listinfo/cryptography ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: [ExI] The NSA's new data center
by Anders Sandberg 06 Jul '18

06 Jul '18

I did a little calculation: at what point can governments spy 24/7 on their citizens and store all the data? I used the World Bank World Development Indicators and IMF predictors for future GDP growth and the United nations median population forecasts, the fit 10.^(-.2502*(t-1980)+6.304) for the cost (in dollars)per gigabyte (found on various pages about Kryder's law) and the assumption that 24/7 video surveillance would require 10 TB per person per year. Now, if we assume the total budget is 0.1% of the GDP and the storage is just 10% of that (the rest is overhead, power, cooling, facilities etc), then the conclusion is that doing this becomes feasible around 2020. Bermuda, Luxenbourg and Norway can do it in 2018, by 2019 most of Western Europe plus the US and Japan can do it. China gets there in 2022. The last countries to reach this level are Eritrea and Liberia in 2028, and finally Zimbabwe in 2031. By 2025 the US and China will be able to monitor all of humanity if they want to/are allowed. So at least data storage is not going to be any problem. It would be very interesting to get some estimates of the change in cost of surveillance cameras and micro-drones, since presumably they are the ones that are actually going to be the major hardware costs. Offset a bit because we are helpfully adding surveillance capabilities to all our must-have smartphones and smart cars. I suspect the hardware part will delay introduction a bit in countries that want it, but that just mean there will be hardware overhang once they get their smart dust, locators or gnatbots. Note that this kind of video archive is useful even if you don't have a myriad analysts, perfect speech recognition or AI (in fact, it would be a great incentive and training corpus for developing them). When you figure out that somebody is doing or have just done something nasty, you can easily backtrack and check on everybody they had been in touch with. It would be quite easy to catch most members of any rebel network this way as soon as it was recognized as a rebel network - and one could easily create incentives for not associating with potential subversives and/or reporting them, adding crowdsourced reporting. The only kind of uprisnings with any kind of chance would be spontaneous eruptions. The more interesting (sinister) uses of this kind of intelligence corpus is of course to do trials and experiments to see what predicts social norm compliance and obedience. How well does various forms of nudging work? What about the longitudinal loyalty effects of natural or deliberate experiments? How well can you predict people from their saccade patterns? We might actually be living in a short window of opportunity right now. The problem is not the surveillance per se, but the danger from non-accountable uses of them once they are in place. Totalitarian governments with this kind of transparency might prove extremely hard to dislodge, and could become stable attractor states. This suggests that we should work very hard on figuring out how to maintain government accountability even when it has total surveillance powers, and how to prevent open societies from sliding into the totalitarian trap. Given that the tail statistics of big disasters is dominated by pandemics, wars and democides we have very good reasons to view this as among the top questions for human survival. Appendix: 2018 Bermuda 2018 Luxembourg 2018 Norway 2019 Australia 2019 Austria 2019 Belgium 2019 Canada 2019 Denmark 2019 Finland 2019 France 2019 Germany 2019 Iceland 2019 Ireland 2019 Japan 2019 Kuwait 2019 Netherlands 2019 Singapore 2019 Sweden 2019 Switzerland 2019 United Kingdom 2019 United States 2020 Cyprus 2020 French Polynesia 2020 Greece 2020 Israel 2020 Italy 2020 New Caledonia 2020 New Zealand 2020 Oman 2020 Puerto Rico 2020 Seychelles 2020 Slovakia 2020 Slovenia 2020 Spain 2020 United Arab Emirates 2021 Antigua and Barbuda 2021 Bahamas 2021 Bahrain 2021 Barbados 2021 Chile 2021 Croatia 2021 Czech Republic 2021 Equatorial Guinea 2021 Estonia 2021 Hungary 2021 Lithuania 2021 Poland 2021 Portugal 2021 Saudi Arabia 2021 Trinidad and Tobago 2021 Turkey 2022 Argentina 2022 Belarus 2022 Botswana 2022 Brazil 2022 Bulgaria 2022 China 2022 Costa Rica 2022 Cuba 2022 Dominica 2022 Dominican Republic 2022 Gabon 2022 Grenada 2022 Kazakhstan 2022 Latvia 2022 Lebanon 2022 Malaysia 2022 Mauritius 2022 Mexico 2022 Palau 2022 Panama 2022 Peru 2022 Romania 2022 South America 2022 Suriname 2022 Uruguay 2023 Albania 2023 Algeria 2023 Angola 2023 Azerbaijan 2023 Belize 2023 Bhutan 2023 Colombia 2023 Ecuador 2023 El Salvador 2023 Fiji 2023 Iraq 2023 Mongolia 2023 Morocco 2023 Namibia 2023 Serbia 2023 Thailand 2023 Tonga 2023 Tunisia 2023 Turkmenistan 2023 Ukraine 2024 Armenia 2024 Georgia 2024 Guatemala 2024 Guyana 2024 Honduras 2024 India 2024 Indonesia 2024 Marshall Islands 2024 Paraguay 2024 Philippines 2024 Samoa 2024 Sri Lanka 2024 Swaziland 2025 Bangladesh 2025 Cameroon 2025 Djibouti 2025 Egypt 2025 Ghana 2025 Lesotho 2025 Nicaragua 2025 Nigeria 2025 Pakistan 2025 Papua New Guinea 2025 Sao Tome and Principe 2025 Senegal 2025 Solomon Islands 2025 Sub-Saharan Africa 2025 Sudan 2025 Uzbekistan 2025 Zambia 2026 Afghanistan 2026 Benin 2026 Haiti 2026 Kenya 2026 Kyrgyzstan 2026 Mauritania 2026 Mozambique 2026 Tajikistan 2026 Uganda 2027 Central African Republic 2027 Chad 2027 Ethiopia 2027 Gambia 2027 Guinea 2027 Madagascar 2027 Malawi 2027 Mali 2027 Nepal 2027 Niger 2027 Rwanda 2027 Sierra Leone 2027 Togo 2028 Burundi 2028 Eritrea 2028 Liberia 2031 Zimbabwe -- Anders Sandberg, Future of Humanity Institute Philosophy Faculty of Oxford University _______________________________________________ extropy-chat mailing list extropy-chat(a)lists.extropy.org http://lists.extropy.org/mailman/listinfo.cgi/extropy-chat ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

[cryptography] Malware-signing certs with 512-bit keys
by Peter Gutmann 06 Jul '18

06 Jul '18

[NB: Crossposted to two lists where this issue has been discussed in the past] So it seems like pretty much everyone (at least on these lists) has heard about the Malaysian CA that issued 512-bit certs for which the keys were factored and used to sign malware, and that had their CA cert pulled because of this. What's had much less (in fact apparently zero) attention is the fact that Digicert Sdn. Bhd. only issued three of the nine certificates that were used for malware signing. Three more were issued by Cybertrust, and one each by GlobalSign, Taiwan-CA, and Anthem. The first three are root CAs, Anthem is one of the vast number of you'll-only-find-out-they-exist-when-they're-used- to-attack-you sub-CAs that are out there. Given that the Malaysian CA had its cert pulled for this, can we get a statment from browser vendors on whether Cybertrust, GlobalSign, and the others will also similarly have their certs pulled for exactly the same behaviour? A rather interesting feature of the malware signatures is that although the issuers look like random unconnected CAs, if you look at the signatures that the nine certs were used with, each of them ends up at the GTE Cybertrust (= Verizon, the last time I checked) root. Using data from the mid-2010 dates in question: http://www.securityspace.com/s_survey/data/man.201004/casurvey.html gives them a 0.11% market share, but they represent 100% of the roots used for the malware signatures. That just doesn't seem right. Finally, there are even further 512-bit certs out there, some issued as recently as a few months ago. The A-Data one in the collection below was reported to the CA but they haven't taken any action (do they get their cert pulled as well for that?). As the person who provided them commented, "so knock yourself out, have the modulus factorized and sign some crazy code :-)". Acknowledgements: Michael Sandee and Ondrej Mikle provided information for this report. Any inadvertent mangling of details was my fault. Peter. -----BEGIN CERTIFICATE----- MIIEMjCCAxqgAwIBAgIDCCiOMA0GCSqGSIb3DQEBBQUAMIGHMQswCQYDVQQGEwJB VDFIMEYGA1UECgw/QS1UcnVzdCBHZXMuIGYuIFNpY2hlcmhlaXRzc3lzdGVtZSBp bSBlbGVrdHIuIERhdGVudmVya2VociBHbWJIMRYwFAYDVQQLDA1hLXNpZ24tU1NM LTAzMRYwFAYDVQQDDA1hLXNpZ24tU1NMLTAzMB4XDTEwMTEyMzEyMDYzMloXDTE1 MTEyMzEyMDYzMlowOTEgMB4GA1UEAwwXbW9id2ViZGF2LmhvY2hnZXJuZXIuYXQx FTATBgNVBAUTDDY3OTU0Njc0MzMwNDBcMA0GCSqGSIb3DQEBAQUAA0sAMEgCQQCX zfoFylBNoYtgK//wMeJ/0ihq1N8hfjr9gw1Tqgk6IeBDnFmxIqz6eSssC8N/HyBE i2VGRlplzorD7Q0QGdazAgMBAAGjggG6MIIBtjATBgNVHSMEDDAKgAhAPqHTYrQD 3TByBggrBgEFBQcBAQRmMGQwJwYIKwYBBQUHMAGGG2h0dHA6Ly9vY3NwLmEtdHJ1 c3QuYXQvb2NzcDA5BggrBgEFBQcwAoYtaHR0cDovL3d3dy5hLXRydXN0LmF0L2Nl cnRzL2Etc2lnbi1zc2wtMDMuY3J0MEsGA1UdIAREMEIwQAYGKigAEQEUMDYwNAYI KwYBBQUHAgEWKGh0dHA6Ly93d3cuYS10cnVzdC5hdC9kb2NzL2NwL2Etc2lnbi1z c2wwgY8GA1UdHwSBhzCBhDCBgaB/oH2Ge2xkYXA6Ly9sZGFwLmEtdHJ1c3QuYXQv b3U9YS1zaWduLVNTTC0wMyxvPUEtVHJ1c3QsYz1BVD9jZXJ0aWZpY2F0ZXJldm9j YXRpb25saXN0P2Jhc2U/b2JqZWN0Y2xhc3M9ZWlkQ2VydGlmaWNhdGlvbkF1dGhv cml0eTARBgNVHQ4ECgQIQjKcthkEWcUwDgYDVR0PAQH/BAQDAgWgMB4GA1UdEQQX MBWBE3JvbWFuQGhvY2hnZXJuZXIuYXQwCQYDVR0TBAIwADANBgkqhkiG9w0BAQUF AAOCAQEAJfdXmLQUKUQByU4WS2pthkD9QZW2CB498FwCfT/v69lgtzU8h8Hu1L1g zVwG0GbitXk92rDxwF7XdU9MANFvGSxqKxGfcErZuqCX2+pYU4/zJCHlR6voYHoX AJQPCY3PRM5USUWmysKaQ2wzwap8nqWpRMpcq+fUk49LR8CfFa9f63z++GthJtl6 d2OytiukgZ8Ea0edLyLDWr4B9UC+C+UhNJXjKtiMXHDYbbFmNzIszdUNOPuN4YI9 O2LG3YUH44McHiFGdU4WKtIOpkDJJPi7xPQp8uAOxCHnSFuJWem21ca/am1InMPG hPWV3vw3Qht0GbhHrROdAu2Rxi5Kfg== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIID0zCCArugAwIBAgIDLo6gMA0GCSqGSIb3DQEBBQUAME4xCzAJBgNVBAYTAkhL MRYwFAYDVQQKEw1Ib25na29uZyBQb3N0MScwJQYDVQQDEx5Ib25na29uZyBQb3N0 IGUtQ2VydCBDQSAxIC0gMTAwHhcNMTEwODAyMDQwNjQxWhcNMTIwODI4MDgyNzUx WjCBtTELMAkGA1UEBhMCSEsxJjAkBgNVBAoTHUhvbmdrb25nIFBvc3QgZS1DZXJ0 IChTZXJ2ZXIpMRMwEQYDVQQLEwowMDAxODUyODYwMSEwHwYDVQQLExgzODkxNzE1 MjAwMDAxMTEyMDAwTFA0MDkxKjAoBgNVBAsTIVRDSElCTyBNRVJDSEFORElTSU5H IEhPTkcgS09ORyBMUDEaMBgGA1UEAxMRb3RzLnRjaGliby5jb20uaGswXDANBgkq hkiG9w0BAQEFAANLADBIAkEA4K8j18RyT+8dXi396kNp+5/GbJsjDpYJYNDWo8Ba pmJXDapaR3RHsbtmMmpnXjaBCH+s7cNxWy6BIgiQju3vEQIDAQABo4IBGDCCARQw PgYDVR0gBDcwNTAzBgorBgEEAf0eAQETMCUwIwYIKwYBBQUHAgEWF3d3dy5ob25n a29uZ3Bvc3QuZ292LmhrMAkGA1UdEwQCMAAwEQYJYIZIAYb4QgEBBAQDAgZAMA4G A1UdDwEB/wQEAwIFIDBaBgNVHSMEUzBRoUukSTBHMQswCQYDVQQGEwJISzEWMBQG A1UEChMNSG9uZ2tvbmcgUG9zdDEgMB4GA1UEAxMXSG9uZ2tvbmcgUG9zdCBSb290 IENBIDGCAgR5MEgGA1UdHwRBMD8wPaA7oDmGN2h0dHA6Ly9jcmwxLmhvbmdrb25n cG9zdC5nb3YuaGsvY3JsL2VDZXJ0Q0ExLTEwQ1JMMS5jcmwwDQYJKoZIhvcNAQEF BQADggEBAEBPvjxHDOFXYbkHeIWoF6Y3iODAtxYoDvPXIsEPYCS+MAyxWUYoOtIi XHKnuSk17czOwsFsr/7rmKUID1lzH0l0/XduELw7SzsiwuSEFrS35Zsy8LYXdXLa Y131CRGlM6ZTW6+OZRaavD0SC5S1ZACpSoG2DV5ZfvUgbqnJRpmGkA4VMC7cD2Iv xCGNjGoS3XTmFC0ZFnwAelguyzqgCvIyR2cTAfKf0vyTOJq4ntD5ZCkQN9sKd4o6 0UNKI0KAjFOE6mdrEnKYTfIogYMLJAw+QtxF2KesTI00OrYCIWhrz/tZVKL8IXah 76Z3si0R7Dki1cHdVMrQrFRxExiSRPY= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIID2zCCAsOgAwIBAgIDLi8KMA0GCSqGSIb3DQEBBQUAME4xCzAJBgNVBAYTAkhL MRYwFAYDVQQKEw1Ib25na29uZyBQb3N0MScwJQYDVQQDEx5Ib25na29uZyBQb3N0 IGUtQ2VydCBDQSAxIC0gMTAwHhcNMTAxMDIwMDIyMzUxWhcNMTIxMTAzMDY0NzUw WjCBvTELMAkGA1UEBhMCSEsxJjAkBgNVBAoTHUhvbmdrb25nIFBvc3QgZS1DZXJ0 IChTZXJ2ZXIpMRMwEQYDVQQLEwowMDAxNzYwOTg5MSUwIwYDVQQLExwwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDBMQ1NEMSEwHwYDVQQLExhIb25nIEtvbmcgU0FSIEdv dmVybm1lbnQxDTALBgNVBAsTBExDU0QxGDAWBgNVBAMTD29pYy5sY3NkLmdvdi5o azBcMA0GCSqGSIb3DQEBAQUAA0sAMEgCQQDxH35W/jV6jNLBDJ1y9n+ANnjPfLLy VrAicVMaK9/azMvt+xSfZ9+BSNbtF737Vj8hrohRrFWr/IOnb7oS8RT/AgMBAAGj ggEYMIIBFDA+BgNVHSAENzA1MDMGCisGAQQB/R4BARMwJTAjBggrBgEFBQcCARYX d3d3Lmhvbmdrb25ncG9zdC5nb3YuaGswCQYDVR0TBAIwADARBglghkgBhvhCAQEE BAMCBkAwDgYDVR0PAQH/BAQDAgUgMFoGA1UdIwRTMFGhS6RJMEcxCzAJBgNVBAYT AkhLMRYwFAYDVQQKEw1Ib25na29uZyBQb3N0MSAwHgYDVQQDExdIb25na29uZyBQ b3N0IFJvb3QgQ0EgMYICBHkwSAYDVR0fBEEwPzA9oDugOYY3aHR0cDovL2NybDEu aG9uZ2tvbmdwb3N0Lmdvdi5oay9jcmwvZUNlcnRDQTEtMTBDUkwxLmNybDANBgkq hkiG9w0BAQUFAAOCAQEAEMFWGh83PWc61ymoOFv0tvo8xMkQQmB+vO3MWhBf8YzS aEetmYVP5O1LINV5KHHWpT5EZMIIA3ffRD7QVkRZOxPFewkLWK6UaujV9XevP2Fe RotXs0tPpOHQbz5+z7ZCRvQBxayT+O/dQopKC0gfDEvDvJrV+6Mlelkric+mPkSM x5zYaRdqMupVUTvYiY8D/dtG9ITrpk/lhVKcIJzwY0EFRCVUoUX1ldAEn4gyckMP VSrG8qtuZmzsv8JjFOcwpDe+5Ull/87SCw3KUmnA0VNbU26WfzPYhTEBIizbj4dI YinocNVD3+LRLubcgApi7YI0aepeBYns+OOOfwL+RQ== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIID2zCCAsOgAwIBAgIDLi8KMA0GCSqGSIb3DQEBBQUAME4xCzAJBgNVBAYTAkhL MRYwFAYDVQQKEw1Ib25na29uZyBQb3N0MScwJQYDVQQDEx5Ib25na29uZyBQb3N0 IGUtQ2VydCBDQSAxIC0gMTAwHhcNMTAxMDIwMDIyMzUxWhcNMTIxMTAzMDY0NzUw WjCBvTELMAkGA1UEBhMCSEsxJjAkBgNVBAoTHUhvbmdrb25nIFBvc3QgZS1DZXJ0 IChTZXJ2ZXIpMRMwEQYDVQQLEwowMDAxNzYwOTg5MSUwIwYDVQQLExwwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDBMQ1NEMSEwHwYDVQQLExhIb25nIEtvbmcgU0FSIEdv dmVybm1lbnQxDTALBgNVBAsTBExDU0QxGDAWBgNVBAMTD29pYy5sY3NkLmdvdi5o azBcMA0GCSqGSIb3DQEBAQUAA0sAMEgCQQDxH35W/jV6jNLBDJ1y9n+ANnjPfLLy VrAicVMaK9/azMvt+xSfZ9+BSNbtF737Vj8hrohRrFWr/IOnb7oS8RT/AgMBAAGj ggEYMIIBFDA+BgNVHSAENzA1MDMGCisGAQQB/R4BARMwJTAjBggrBgEFBQcCARYX d3d3Lmhvbmdrb25ncG9zdC5nb3YuaGswCQYDVR0TBAIwADARBglghkgBhvhCAQEE BAMCBkAwDgYDVR0PAQH/BAQDAgUgMFoGA1UdIwRTMFGhS6RJMEcxCzAJBgNVBAYT AkhLMRYwFAYDVQQKEw1Ib25na29uZyBQb3N0MSAwHgYDVQQDExdIb25na29uZyBQ b3N0IFJvb3QgQ0EgMYICBHkwSAYDVR0fBEEwPzA9oDugOYY3aHR0cDovL2NybDEu aG9uZ2tvbmdwb3N0Lmdvdi5oay9jcmwvZUNlcnRDQTEtMTBDUkwxLmNybDANBgkq hkiG9w0BAQUFAAOCAQEAEMFWGh83PWc61ymoOFv0tvo8xMkQQmB+vO3MWhBf8YzS aEetmYVP5O1LINV5KHHWpT5EZMIIA3ffRD7QVkRZOxPFewkLWK6UaujV9XevP2Fe RotXs0tPpOHQbz5+z7ZCRvQBxayT+O/dQopKC0gfDEvDvJrV+6Mlelkric+mPkSM x5zYaRdqMupVUTvYiY8D/dtG9ITrpk/lhVKcIJzwY0EFRCVUoUX1ldAEn4gyckMP VSrG8qtuZmzsv8JjFOcwpDe+5Ull/87SCw3KUmnA0VNbU26WfzPYhTEBIizbj4dI YinocNVD3+LRLubcgApi7YI0aepeBYns+OOOfwL+RQ== -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIID6TCCAtGgAwIBAgIDLi62MA0GCSqGSIb3DQEBBQUAME4xCzAJBgNVBAYTAkhL MRYwFAYDVQQKEw1Ib25na29uZyBQb3N0MScwJQYDVQQDEx5Ib25na29uZyBQb3N0 IGUtQ2VydCBDQSAxIC0gMTAwHhcNMTAxMDE5MDM0MzE0WhcNMTIxMTA3MDMxMzI3 WjCByzELMAkGA1UEBhMCSEsxJjAkBgNVBAoTHUhvbmdrb25nIFBvc3QgZS1DZXJ0 IChTZXJ2ZXIpMRMwEQYDVQQLEwowMDAxODU2ODU4MSEwHwYDVQQLExgzMDI4ODIy MDAwMDA1MDhBMDA2NzcxNDcxPDA6BgNVBAsTM0ZBUlJJTkdUT04gQU1FUklDQU4g RVhQUkVTUyBUUkFWRUwgU0VSVklDRVMgTElNSVRFRDEeMBwGA1UEAxMVd3d3LmFt ZXh0cmF2ZWwuY29tLmhrMFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAM9OjldrW2Ar jiLKl6MhSFzonx787bsy54r/cmKhsH+wb27BVf/Oo1Da4oPerVDH1DG3E3WRsoNc Ew5bN5lYiHUCAwEAAaOCARgwggEUMD4GA1UdIAQ3MDUwMwYKKwYBBAH9HgEBEzAl MCMGCCsGAQUFBwIBFhd3d3cuaG9uZ2tvbmdwb3N0Lmdvdi5oazAJBgNVHRMEAjAA MBEGCWCGSAGG+EIBAQQEAwIGQDAOBgNVHQ8BAf8EBAMCBSAwWgYDVR0jBFMwUaFL pEkwRzELMAkGA1UEBhMCSEsxFjAUBgNVBAoTDUhvbmdrb25nIFBvc3QxIDAeBgNV BAMTF0hvbmdrb25nIFBvc3QgUm9vdCBDQSAxggIEeTBIBgNVHR8EQTA/MD2gO6A5 hjdodHRwOi8vY3JsMS5ob25na29uZ3Bvc3QuZ292LmhrL2NybC9lQ2VydENBMS0x MENSTDEuY3JsMA0GCSqGSIb3DQEBBQUAA4IBAQAqIGebX6Iqm1pRg9JkuVzdAfpA TDqO7S/4pZNXC9ZIp+fv/1sLIJiNwhmtMhyuO6h8wWkiMREP34orSXJ0xLks/JPM cmyuSb12DduUPVFYnykEYtDHUD+By+62u08Gg0VeBNuSzPDWHFlVEHweCsbaDrvo +eN3s1v8mDduWE5iNkAwGbtnDC4mKgj66TIip15YAlHxF9U0X6Iaq03L+oXxy76n BAUke1picAgMX5ShALRlGuOUOFI0Yi4S383xuXOE0ZjgOobNArFIDZbSkEtTiEyl PrM/QFq8c7K/mhO7Wsrt0TBBauIVqKA/irIKpg+jeJG+lL6JP7/9P1yTSVma -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIID6zCCAtOgAwIBAgIDI4qRMA0GCSqGSIb3DQEBBQUAMEkxCzAJBgNVBAYTAkhL MRYwFAYDVQQKEw1Ib25na29uZyBQb3N0MSIwIAYDVQQDExlIb25na29uZyBQb3N0 IGUtQ2VydCBDQSAxMB4XDTA5MTEyMzA0MjkyMVoXDTExMTIwOTAzMjMzOFowgdUx CzAJBgNVBAYTAkhLMSYwJAYDVQQKEx1Ib25na29uZyBQb3N0IGUtQ2VydCAoU2Vy dmVyKTETMBEGA1UECxMKMDAwMTIxMDkzMTEnMCUGA1UECxMeMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwREgtUkhVMSEwHwYDVQQLExhIb25nIEtvbmcgU0FSIEdvdmVy bm1lbnQxITAfBgNVBAsTGERILVJhZGlhdGlvbiBIZWFsdGggVW5pdDEaMBgGA1UE AxMRd3d3LmRoLXJodS5nb3YuaGswXDANBgkqhkiG9w0BAQEFAANLADBIAkEAoqbv uYXV9xswou8XILtutEmdT9kwUMb5ltUdBSDGQcAz/Ku1r/rG22JG5Wenih7Du1tt qzpKEbKgtSAaEjSe0wIDAQABo4IBFTCCAREwPgYDVR0gBDcwNTAzBgorBgEEAf0e AQEQMCUwIwYIKwYBBQUHAgEWF3d3dy5ob25na29uZ3Bvc3QuZ292LmhrMAkGA1Ud EwQCMAAwEQYJYIZIAYb4QgEBBAQDAgZAMA4GA1UdDwEB/wQEAwIFIDBaBgNVHSME UzBRoUukSTBHMQswCQYDVQQGEwJISzEWMBQGA1UEChMNSG9uZ2tvbmcgUG9zdDEg MB4GA1UEAxMXSG9uZ2tvbmcgUG9zdCBSb290IENBIDGCAgPtMEUGA1UdHwQ+MDww OqA4oDaGNGh0dHA6Ly9jcmwxLmhvbmdrb25ncG9zdC5nb3YuaGsvY3JsL2VDZXJ0 Q0ExQ1JMMi5jcmwwDQYJKoZIhvcNAQEFBQADggEBAAu625vond5fw/D2B2a0Cj4S 5OMtNOKxzR485W3UoTV/b7ABx13QRKwJK3AWlMwRY7HzbHtDQOHg2HiXvXICpYsq J3PKRotpR+s7yXKjxxtEY0o/cdlYMTTHc443ZIYvDQBbI2CPJsSD8O6q+4dxj1Qp w3H/pCFoZ/z7tNK7nzVuVQolLbruVv5i99dGCa2kNN5+2qgp9aV8G4vo1GpLxpi/ rb/ZUvCDqzOeigmewW/vtGZe0mOZJW29EMLEXBfzcrW2iIw7TClvIGxaQXrxFjAc zu1JEq19/96d7sMkIxdWGW9BfOoY9zMFb9w5srUupK7Z/Y8Ydn/DBsOrnS6AxMQ= -----END CERTIFICATE----- -----BEGIN CERTIFICATE----- MIID3DCCAsSgAwIBAgIDLm8+MA0GCSqGSIb3DQEBBQUAME4xCzAJBgNVBAYTAkhL MRYwFAYDVQQKEw1Ib25na29uZyBQb3N0MScwJQYDVQQDEx5Ib25na29uZyBQb3N0 IGUtQ2VydCBDQSAxIC0gMTAwHhcNMTEwNDI2MDI1MzA0WhcNMTMwNTE5MDcyODA5 WjCBvjELMAkGA1UEBhMCSEsxJjAkBgNVBAoTHUhvbmdrb25nIFBvc3QgZS1DZXJ0 IChTZXJ2ZXIpMRMwEQYDVQQLEwowMDAxODQ4NzM4MSUwIwYDVQQLExwwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDBMQ1NEMSEwHwYDVQQLExhIb25nIEtvbmcgU0FSIEdv dmVybm1lbnQxDTALBgNVBAsTBExDU0QxGTAXBgNVBAMTEGltdHMubGNzZC5nb3Yu aGswXDANBgkqhkiG9w0BAQEFAANLADBIAkEAyey2HOeEHR459PxjQwBQmX8Z8AJ0 IemQhl19uXZJcd6IGOtcFrCWOKT1/pEn1IxzeAejErxAVJAUSoDqnMq1qQIDAQAB o4IBGDCCARQwPgYDVR0gBDcwNTAzBgorBgEEAf0eAQETMCUwIwYIKwYBBQUHAgEW F3d3dy5ob25na29uZ3Bvc3QuZ292LmhrMAkGA1UdEwQCMAAwEQYJYIZIAYb4QgEB BAQDAgZAMA4GA1UdDwEB/wQEAwIFIDBaBgNVHSMEUzBRoUukSTBHMQswCQYDVQQG EwJISzEWMBQGA1UEChMNSG9uZ2tvbmcgUG9zdDEgMB4GA1UEAxMXSG9uZ2tvbmcg UG9zdCBSb290IENBIDGCAgR5MEgGA1UdHwRBMD8wPaA7oDmGN2h0dHA6Ly9jcmwx Lmhvbmdrb25ncG9zdC5nb3YuaGsvY3JsL2VDZXJ0Q0ExLTEwQ1JMMS5jcmwwDQYJ KoZIhvcNAQEFBQADggEBAFSjUZ7jGO593Gt2soWUQmDsEhLlRRaW3V4cyr7glVL5 9UIw+Zn4fciiLTAgXsG6DSaxcsoDZSWxFzjgZCGGw2rWnSnHxbXWQudD3y+jnPC9 h4j/XB8XRkdPDyESOJkF1cwPqYsqZZV+gvMBO9nU7W4q8nt6WCy6qi5DOiHtzyea NO+hQJAd807ge9pKdveH8hPbZdMSBAmhkZZSMN14ItyfEqe1wNCNv6siRtUgzfp8 0G9fV8OoZATYOHlqLuFrXcyRwGqPu/rwcMb1fDyf7PM5L9JerwDsz1ygIgCwmKTV vH4ElrId5uf3mSBt87bkvwLT3VGKS0eldjbIhEwp4Ns= -----END CERTIFICATE----- _______________________________________________ cryptography mailing list cryptography(a)randombit.net http://lists.randombit.net/mailman/listinfo/cryptography ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

[cryptography] Donbt trust satellite phones b The GMR-1 and GMR-2 ciphers have been broken
by Jeffrey Walton 06 Jul '18

06 Jul '18

http://cryptanalysis.eu/blog/2012/02/02/dont-trust-satellite-phones-the-gmr… Today, February 2nd 2012, Benedikt Driessen and Ralf Hund gave a very interesting talk at Ruhr UniversitC$t Bochum about their work on satellite phone security. In a nutshell, they were able to reverse engineer and to break the secret ciphers used in many satellite phone systems, namely the GMR-1 and the GMR-2 ciphers. ... _______________________________________________ cryptography mailing list cryptography(a)randombit.net http://lists.randombit.net/mailman/listinfo/cryptography ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0