- cypherpunks-legacy - lists.cpunks.org

Corrected Printing of Applied Cryptography Now Available
by Bruce Schneier 17 Dec '03

17 Dec '03

Wiley has finally published a corrected printing of Applied Cryptography, 2nd ed!!! They didn't correct everything, only changes that didn't affect page breaks. Still, I counted over 250 individual corrections. And under a dozen errors remaining. I'm thrilled that they finally did this. The fifth printing (or greater) is the corrected printing. To find what printing you own, turn to page iv (it's opposite the "Contents in Brief" page). The last line (under "Printed in the United States of America") is a series of numbers, counting down from 10. The lowest number is the printing. You have a fifth printing if your last line looks like: 10 9 8 7 6 5 If you want to buy a fifth printing, you have two options. One, you can go to a bookstore and find one. You can't ask the bookstore to buy a fifth printing; all he can do is order a copy of the book and hope for the best. I believe that the fourth printing is sold out (in softcover, at least), but I cannot be sure. The other option is to buy it from me. I have a large supply of fifth printings that I will sell at the usual 15% discount: softcover - $42.00 hardcover - $59.00 Postage is as follows: surface to US - $3.00 air to US - $5.00 Canada - $5.00 surface elsewhere - $5.00 Contact me if you want airmail overseas. It's expensive. Cheers, Bruce ************************************************************************ * Bruce Schneier 2,000,000,000,000,000,000,000,000,002,000, * Counterpane Systems 000,000,000,000,000,000,002,000,000,002,293 * schneier(a)counterpane.com The last prime number...alphabetically! * (612) 823-1098 Two vigintillion, two undecillion, two * 101 E Minnehaha Pkwy trillion, two thousand, two hundred and * Minneapolis, MN 55419 ninety three. * http://www.counterpane.com ************************************************************************

1 0

Re: Netscape plans to support GAK
by John Young 17 Dec '03

17 Dec '03

Robert Hettinga wrote: >Yup. Looks like Barksdale(?) was right in his Pro-Excrow comments two years >ago in Boston after all. > >Mr. Weinstein's Black Rhino Ammunition Inc. "Mr. Kevlar" award went for >naught, I'm afraid... While it might be too touchy for Netscaper cryptographers to address openly, I wonder if there is not a scheme afoot to go along with the current restrictions in order to be better positioned to compete with others intending to launch robust encryption as soon as the leak in the dam globally breaks. There may be more to this story than appears in the PR of industry and government. The crypto fight may be a diversion. Suppose the governments intend to relax crypto restrictions once other technologies to monitor electronic transactions are in place and and enforcers have been trained to snare illegal transactors based on physical evidence of crime beyond the digital. Recall that that's what Peter Neumann and others on the NRC crypto panel suggested as an agenda for the FBI to forego undue crypto emphasis. Is it not possible that the US and other nations will allow strong encryption so long as other means are at hand to control any action merely cloaked in encrypted language, as has been done forever with stylistic literature and speech? To, as with its predecessors, tolerate the artist of cryptoanarchy but guillotine the actor.

1 0

Re: Fingerprint Stego
by Alec 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- At 12:37 PM 4/29/97 -0700, Mike Duvos thoughtfully wrote: |A funny story in last night's Seattle Times... | |It seems the INS and FBI are unwilling to grant US citizenship to |persons without legible fingerprints. [snip] Fingerprint escrow? Does this mean that, ipso facto (I love it), physically challenged individuals with missing or deformed hands are excluded regardless of other qualifications? What a monstrosity of a rule! Was this carried over the wire? AP? |"This is not something we take lightly," said INS spokesperson |Irene Mortensen. "We can't just arbitrarily give out citizenship |to just anyone." The fact that Irene Mortensen has citizenship at all proves her point. Is it not possible to retroactively _remove_ the citizenship of such an arrogant bureaucrat to test whether she could make the grade imposed on the rest of the world's "refuse?" "Dear Irene Mortensen: We regret to inform you....." Thanks, Mike, for the increase in BP. Alec -----BEGIN PGP SIGNATURE----- Version: 4.5 iQCVAgUBM2ZiXiKJGkNBIH7lAQH8CAQArOmQYxiaavj5FXdJUomjviRBcVfkxCRX PWCDZ/wMC68poOWEjKJECKYscVT0kMuw+FMOUKPYlMhR8kK33lvg4tOqbjMKyYMS LZbPU4M+jQNFq3y5c6hFUmtZg8zLATBIeb8lVRnWQ8qChSH8jdTSZLxhmTx8Azgt mrTXcnOk3dQ= =JZZe -----END PGP SIGNATURE-----

1 0

Re: Data Privacy Laws
by Hodge Podge 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Ulf =?ISO-8859-1?Q?M=F6ller?= (3umoelle(a)informatik.uni-hamburg.de) wrote: >It is worth noting that the "Data Privacy Commissioners" in Germany >(equivalent to the British Data Protection Registrar) are beginning to >advocate technologies such as anonymous e-cash, pre-paid chipcards, >pseudonyms, and of course encryption, rather than more laws. But according to alt.security.pgp (4/28/97): BONN, Germany (Reuter) -- A German cabinet minister called Monday for increased efforts to fight crime on the Internet and demanded that cyber-sheriffs have keys to unlock coded messages. Interior Minister Manfred Kanther told a conference ....."The technical and organizational competence of agencies charged with fighting computer crime must be strengthened." "The criminals are hiding in the anonymity of the networks, wiping their electronic tracks." Kanther said. So clearly the government disagrees. -- HP -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Charset: noconv iQDzAwUBM2dBN7mgWaN4MfkFAQGN2gbwkqnKKh5GpM79icxPEiybj//h46tWIZGc Wn4eOrQZ2WKtCvAmR+vHR8/jKAV+MbcR4NKovfxNxN9aA0iyWu/AW+5lWyMyXenr 01zx+MmNFR6HG7ESXikiNMiyJyXL3iKCF3vP5lrQlZaa82sQSRauAqBuu0JahFO2 qmfPO+/bmvKI8BQS/NEIbut+U8O7rOKddsdIWzQ4FanM1q+cb9C7aV6/Fvk7yTeK IuTCyI5oTi4GLBCZ5fqwDscHp1V0HlsU7WXcC7d4t04EisyQSoFEnEgZp8j1M+JP MNfnJIx2 =//r6 -----END PGP SIGNATURE-----

3 2

Make a ton of Money Sending Postcards!!
by RHS Linux User 17 Dec '03

17 Dec '03

******************************************************** This is a one time mailing. We apologize if it offends you. To be removed from a master mailing list, type REMOVE as the Subject and send to: remove(a)lotsmorehits.com ******************************************************** A PROFESSIONAL AND ETHICAL MARKETING GROUP HAS JOINED WITH A STABLE AND VISIONARY HEALTH PRODUCTS COMPANY! AND HERE ARE THE RESULTS! 1. Thousands of people are being introduced to affordable life enhancing products of the highest quality! 2. The marketing group does all the sales work! ALL YOU DO IS: 1. Mail a postcard that refers people to the marketing group! WHAT YOU GET IS: 1. A STRESS FREE AND RISK FREE PROFITABLE HOME BUSINESS! 2. THE FINEST HEALTH CARE PRODUCTS AT WHOLESALE! 3. A BUSINESS THAT EVEN YOUR CHILD CAN TAKE PART IN! 4. A 90 DAY 100% MONEY BACK GUARANTEE THAT YOU WILL BE PROFITABLE! ********************************************************** TAKE THE FIRST STEP TO HEALTH AND WEALTH! TO RECEIVE YOUR POSTCARD TO SUCCESS, CALL 1-510-549-7890 24 HOURS, OR SIMPLY REPLY TO: vitality(a)mail-response.com AND LEAVE YOUR NAME ADDRESS AND PHONE # You can also get full details right now by sending an email to: infoback(a)mail-response.com ********************************************************* NETWORK MARKETING WILL NEVER BE EASIER AND MORE PLEASANT THAN THIS! *********************************************************

1 0

Re: Rejecting Dialog with Government Vermin
by jimbell＠pacifier.com 17 Dec '03

17 Dec '03

At 08:40 4/30/97 -0500, Bradley Felton wrote: >What is needed is a "Bonsai" government, that is kept carefully pruned into >exactly the desired shape, and is never allowed to outgrow its pot. With >this analogy in mind, I would posit: > >4) Insufficient pruning mechanisms. I've proposed what I consider to be a very efficient and effective "pruning mechanism." However, I've also suggested that it would continue pruning until the size of government reached zero. Jim Bell jimbell(a)pacifier.com

1 0

Re: SAFE Bill is a Disaster--"Use a cipher, go to prison"
by geeman 17 Dec '03

17 Dec '03

At 05:19 PM 4/30/97 -0800, Tim May wrote: ..elided.. > >""§2804. Prohibition on mandatory key escrow > >"(a) PROHIBITION. -- No person in lawful possession of a key to encrypted >information may be required by Federal or State law to relinquish to >another person control of that key. >"(b) EXCEPTION FOR ACCESS FOR LAW ENFORCEMENT PURPOSES.-Subsection (a) >shall not affect the authority of any investigative or law >enforcement officer, under any law in effect on the effective date of this >chapter, to gain access to a key to encrypted information. " > >Sounds good...a ban on key escrow, right? No, because "EXCEPTION FOR ACCESS >FOR LAW ENFORCEMENT PURPOSES" could easily be used to mandage key escrow. >After all, even Louis Freeh and Dorothy Denning have never argued that key >escrow is for use by non-law enforcement! > I'd like to point out that the key phrase in there seems to be "under any law in effect on the effective date of this chapter" -- altho it's gobbledegooked, the intent seems to say "if there is no law in effect mandating GAK when this bill becomes law, there can never be a law passed which does" Or in other words, it has the effect of making GAK no better, or worse, than under current law, while preventing passage of GAK laws in the future.

2 1

Re: Rejecting Dialog with Government Vermin
by jimbell＠pacifier.com 17 Dec '03

17 Dec '03

At 23:07 4/29/97 -0700, Kent Crispin wrote: >3) There is no serious flaw -- the current government isn't as >bad as we claim. Or, put another way, the evils we see are a function >of size of government, and size of government is more a function of >population than anything else -- the larger the population, the >larger the government. > >I think that strong arguments could be made for any of these, though #3 >would be shouted down in this forum. I disagree that a "strong argument" could be made for item #3. Sure, some people would strenuously ATTEMPT to make that argument, but they would fail miserably. I feel confident that a statistical analysis of various countries' governments would reveal a wide scatter in the relationship between population and government size. One of the main factors in this scatter is simply the amount that government has decided to butt into activities that could (and should) be privatized. Another is the amount that the government steals from one group in order to reliably receive the votes of some other group. Population size would end up being a very poor determinant of government size. Jim Bell jimbell(a)pacifier.com

2 1

HELLO
by stop1＠usa.net 17 Dec '03

17 Dec '03

We apologize if this is an unwanted message. If you wish to be removed from our list simply send a blank message to stop1(a)usa.net -------------------------------------------------------------------- Make $5000 or MORE This Month!!! Are you looking for a business to generate HUGE amounts of cash in very little time, then Fortune 5000 is for you. --> NO Selling, NO Meetings, NO Inventory, NO Recruiting ** FORTUNE 5000 DOES ALL OF THE WORK FOR YOU!! ** All you do is refer people to their 800 number. Their PROFESSIONAL telemarketers do all of the selling and close all of the sales for you. -- At no cost to you! --> No out of pocket monthly purchases --> $100 Fast Start Bonuses paid EVERY Friday --> Phenomenal GUARANTEED Advertising Co-Op Plan --> Fortune 5000 pays to INFINITY! - With unlimited width! CALL NOW - 1-800-811-2141 CODE 14646a Fax On Demand 415-273-6020 * If you are an experienced networker, this is the ideal addition to your portfolio. You still can make GREAT $$$ without having to invest a great deal of time. Fortune 5000 does it all!! * Never tried a home business before? You can do this! I have seen many wealth building programs, and this is by far the easiest to make big money FAST. I encourage you to call the 800 number to get all of the details at no obligation. You will LOVE it! 1-800-811-2141 CODE 14646a

1 0

J/Crypto (fwd)
by Ray Arachelian 17 Dec '03

17 Dec '03

---------- Forwarded message ---------- Date: Thu, 1 May 1997 10:27:33 -0400 (EDT) From: Alex Chaffee <alex(a)earthweb.com> Subject: J/Crypto (original at http://206.20.162.246 JavaZine ) J/CRYPTO - Cryptography class library Baltimore Technologies shipped the first copies of its Java cryptography product J/CRYPTO at the Java Users Group meeting at Communications '97. J/CRYPTO is the world's first cryptography class library written entirely in Java and implements RSA, DES, Triple-DES, SHA1, MD5, Diffie-Hellman and other common cryptographic functions. It plugs into the Java Cryptography Architecture (JCA) and will comply with Sun's Java Cryptography Extension (JCE). J/Crypto includes a range of Java classes including: highly optimized Multi-Precision Arithmetic Modules; cryptographically secure Pseudo-Random Number Generation; RSA key generation & encryption; SHA-1 & MD5 Hashing; DES and Triple-DES encryption; Diffie Hellman Key Exchange Mechanism. J/Crypto includes many advanced features which provide commercial grade security for applications. These features include: full-strength key sizes (512,1024, 2048 bit RSA keys, 112-bit Triple-DES); fast format RSA keys (Chinese remainder theorem & Fermat-4); eeeelimination of weak & possibly weak DES & RSA keys; bfuscation of secret keys and other sensitive data; compatibility with PKCS #1, #3, #5, #8, #11; sample applications and benchmarking. Future developments for J/CRYPTO include implementation of Secure Sockets Layer (SSL), IDEA, RC2, RC4, BSA4, BSA5 ciphers and a range of high-speed stream ciphers. For more info: http://www.baltimore.ie/

2 1