- cypherpunks-legacy - lists.cpunks.org

Bug in PGP2.6 when editing your key
by Jeffrey I. Schiller 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- We have found an important bug in PGP 2.6 (and 2.5). Problem: If you store your pass phrase in the PGPPASS environment variable or supply it via the PGPPASSFD hack and you edit your key (pgp -ke) you may lose. Specifically if you edit your key and do *not* change your pass phrase, then it gets clobbered and you lose access to your private key. What to do if this happens to you: You will know that this has happened because you will edit your key and then not be able to use your private key. *IMMEDIATELY* restore your secring.pgp and pubring.pgp from the ".bak" versions that PGP automatically creates. This will put things back the way they were. Work Around: You can avoid this problem when editing your key by doing one of the two things below. 1) Remove the PGPPASS environment variable (or don't use PGPPASSFD) when editing your key. You will then have to manually type in your pass phrase when editing your key, but the pass phrase will not get clobbered this way. 2) If you still use the PGPPASS environment variable, then when the key editing process asks you if you wish to change your pass phrase answer "y" (i.e., tell it that you wish to change your pass phrase) it will then prompt you twice for your new pass phrase. Note: You can set it to what it was, effectively not really changing it. PGP will not know the difference and your pass phrase will not get clobbered. Status: This problem has a known fix and it will be included in the next release. -Jeff -----BEGIN PGP SIGNATURE----- Version: 2.6 iQBVAgUBLiCWkVUFZvpNDE7hAQF/GQIAoWi86mx1TylR5CUWInJrYy/L5kNB0qqB Uo/gA+u4M7YYeFEVF+voeBBRW686j2ksWaMA3ERTN8o6HWc5hrcf+A== =fXWk -----END PGP SIGNATURE-----

1 0

using RSA-the-cryptosystem to secure RSA-the-company's patent?
by Jef Poskanzer 17 Dec '03

17 Dec '03

Apropos the recent thread on tamper-proof programs... Can anyone think of a way that RSA-the-company could include some sort of RSA-cryptosystem-secured check in a release of PGP so that it would only interoperate with other versions that have the same check? I don't see how it could be done, but it's sure an intriguing idea. --- Jef

2 1

LD's Cypherwonks list
by rishab＠dxm.ernet.in 17 Dec '03

17 Dec '03

Peterwheat(a)aol.com: > found this by doing a keyword search (cryptography) in America Online's > database of mailing lists. I thought it might be of interest to the > cypherpunks mailing list: > > CYPHERWONKS: The Development of Cyberspace I subscribed to this when LD first announced it early last December. I never received any mail. At that time I do believe Julf had said something supporting this list. Incidentally the address for LD in your database on AOL is ancient. And the description message seems watered down. The original post was full of LD's paranoid gems -- here's an excerpt for your entertainment: > anonymity. However, we do not necessarily believe that others are > required to read anonymous postings. To the contrary, we believe that > the individual should have the tools and freedom to filter his or her > own mail based on real identities. In particular, we condemn the > practice of `pseudospoofing,' the dangerous deception where a person > builds up a pseudonym and misrepresents it as being that of a real > person's identity. We police each other on the list to prevent it, and > require a promise that our members refrain from it. While our trust can > be betrayed, only those that are honest are true cypherwonks, and > anyone who betrays our trust we consider a dishonist hypocrite, or worse, > a *traitor* Note the Detweilerese: pseudospoofing, honest and true, hypocrite, *traitor*. ----------------------------------------------------------------------------- Rishab Aiyer Ghosh "Clean the air! clean the sky! wash the wind! rishab(a)dxm.ernet.in take stone from stone and wash them..." Voice/Fax/Data +91 11 6853410 Voicemail +91 11 3760335 H 34C Saket, New Delhi 110017, INDIA

1 0

Re: XSPLIT now own ftp.wimsey.bc.ca
by gtoal＠an-teallach.com 17 Dec '03

17 Dec '03

: > How about doing this with n of m? Anyone have code? : What do you mean? The sources are included with XSPLIT. The algorithm is : very very simple. : What exactly did you mean by n of m? Since at each byte the numbers are picked He means an n-of-m error correcting code applied to secret sharing. Take a Hamming code for example. I used to use a 4-bit one when I worked in teletext. 4 bit nibbles were encoded as 8 bit words. You could corrupt 2 bits and recover the 4 bits correctly, thus it was a 2-in-4 error-correcting code. I think it was also a 3-in-4 error *detecting* code, because if three of the eight bits were in error, you could know there was an error but not reliably correct it. Thus you can take a stream of data, split it up into 4 bits, and hamming encode each nibble. Then you give 1 bit from each output byte to a different person. The original file can be rebuilt if 6 of the 8 people get together - effectively you're decoding each 8-bit byte by assuming that the bits from the two missing people were corrupted in transit (ie any value you supply will do) Error-correcting codes are well understood (though not necessarily by me ;-) ) and can be tailored to any n of m, eg you could have a code that took 24-bit units, made a 100-bit output word, and could rebuild the original 24-bit word by having access to only say 70 of the 100 bits. The application of this to secret sharing is obvious. What isn't so obvious is that since these codes are designed for data transmission rather than data hiding, you're liable to find that for some bit positions in the output word, you have a direct copy of one of the input bits! So in my first example above where 4 bits mapped to 8 bits, 4 of the 8 bits of output were actually just the four input bits even though the other 4 bits were in some way random 'check bits'. So just by finding the right 4 people and analysing the data you'd get if you took their bits as actual data, you could tell whether you'd found the cleartext bits or not. Thus a straight Hamming code can't be used to split secrets; I'm not sure of the modifications necessary - I *think* it might be enough to whiten the input data with random noise, but I'm far far less than 100% convinced of this. I'll have to think about it some other time when I don't have as much on my mind. I expect some textbook has already covered the application of these things to cryptography. Wish I had one :-( G

1 0

Attention: the us.* hierarchy and its effect on the gun groups
by d9bertil＠dtek.chalmers.se 17 Dec '03

17 Dec '03

WHATS UP: There is discussion over at news.groups to start a new top-level hierarchy named us. The main argument being that the US of A should have an own hierarchy since everyone else has one. Now you might have whatever opinion on that, that is not core of the matter, but some people are trying to sneak in something very bad under cover of the us.* hierarchy question. They, and I'm talking of a cabal of seven persons calling themselves the "US Hierarchy Coordinating Committee" out of a net population of twenty million, want to sneak through severe changes in the newgroup creation procedures that would put them in absolute command of the us.* hierarchy. TODAY: Today when a new newsgroup is to be created, anyone can propose it, a period of discussion where anyone can participate follows and its fate it decided by a vote, in which anyone can participate. TOMORROW: In the us.* hierarchy groups can only be created by the cooperation of the US Hierarchy Coordinating Committee. After they have decided on a name for the group, and 'firmed up the charter', they will start a public discussion by announcement on a (by them) moderated group. If they decide that the group get enough support they will create it. The US Hierarchy Coordinating Committee is not elected by anyone. They are totally self-appointed. Their proposal does not include any rules or guidelines on how new cabal members are choosen, nor any ways to depose the current ones. To quote them directly: "The Committee feels that it would be better to wait until the hierarchy exists for a while so that the lay of the land may be better understood before proposing a whole system of rules for changes to the Committee, the creation guidelines, and the structure of the hierarchy." They themselves want to write the rules (if any) by which they themselves can be replaced, but they don't want to show us the rules, we should just accept them, they say. WHY: Why rip up the old democratic guidelines and replace them with this oligarchic mess? They say it is to make the us.* hierarchy more efficient and easy to use. Proposals to concentrate power in the name of efficiency always makes me wary. THE NEXT 40 LINES OF THIS MESSAGE SHOULD BE UNNECESSARY: Because this proposal should not be judged after how much good the the Comittee might do, and certainly not after what good things *they* claim they'll do, but after what bad things they *can* do since their proposal totally lacks any checks and balances. So what I have written upto this point should be enough to make you jump to the "WHAT CAN I DO" part:) MY FEAR: There have been much talk recently about how Usenet is lawless, about how various nastiness float around here, and about how the wild frontier needs to be tamed. I think that is what they intends. This is an attempt to impose authority on the net, put barbed wire across the frontier. I doubt that any controversial newsgroups will pass the comittee. I suspect that us.rec.guns will be as impossible to get past the comittee tomorrow as rec.illegal.drugs would be today. So therefore I urge everyone who has interests that is ever so slightly non-mainstream, either in reality or as pictured by the media, or feels that your interests might slide out of the mainstream soon, to vote NO to the us.* hierarchy, if you want a place to discuss your interests on on Usenet tomorrow. Around here I'm thinking of you who are any or all of pro-rkba, anti-WoD, anti-BATF, anti-censorship's, anti-clipper, libertarians, etc etc. [only 4 of which is correct about me, but that is irrelevant:) ] SO WHAT? So what? This will only cover the us.* hierarchy? The rest of Usenet will be as before? Right? Well yes and no. Formally that is right, but the net is growing at an amazing rate. New sites are added daily, many of them schools and schools lower and lower on the age scale is getting access. What do you think they will choose if given the choise between getting only the pg-13 us.* hierarchy, the R-rated normal Usenet or the X-rated altnet? Especially since the us.* hierarchy advertises itself as handling the US-specific issues on the net, I think most new sites in the US will play it safe and only get the us.* hierarchy. And the way the net is growing new sites will soon be in the majority and not long after that take up 90% of the total net sites. So if you want to say something that more than 10% hear, you'll have to go through the us.* hierarchy, and you better hope your interest is covered by the cabal-approved charter of a cabal-approved newsgroup. And if you have angered any of the cabal-members in the past you are f*cked. period. WHAT CAN I DO: You can vote NO to the proposed us.* hierarchy. A us.* hierarchy might or might not be a good idea, but under these rules it would be a disaster. It should be possible to just reply to this message (press 'R' on rn/trn/rrn), edit out all quoted text except the 1 line between the dashes, and send it off. You should however check that your mail is going to "voting(a)qualcomm.com" and not to me before sending it off. --------- I vote NO on this us.* hierarchy proposal. --------- After voting you should recieve an ack by mail within a day or two. If not then remail your vote. The voting closes on August 8, so vote early! IMPORTANT CAVEAT: In their CFV the cabal plainly writes that they will *not* accept the usual 'more than twice as many yes as no' criteria for group creation, and if they get defeated they also plainly state that they will rewrite their proposal and refile it immediately without waiting 6 months as is the normal procedure. They claim they can do this since there arn't any formal rules for HIERARCHY creation, just NEWSGROUP creation. Well most people assumed that in the absence of specified rules, the group rules would have jurisdiction, since a hierarchy is just a bunch of individual groups, but the cabal seems determined to steamroller this through despite any opposition. Kinda makes me wonder if they'd even follow their own rules, provided they ever write any that is. Therefore it is of the utmost importance that they are made to realize that the opposition to their oligarchic proposal is compact. Explain the gravity of the situation to all your on-line friends and collegues, and get them to vote too. This is doubly important if they are sysadmins or similiar. Get them to state that they will not carry a us.* hierarchy that does not abide by normal newgroup creation procedures. Thanks -bertil- ADDITIONAL INFORMATION: The full text (the little there is) is available on news.announce.newgroups under the Subject "CFV: us.* hierarchy" and with Article ID <us_hierarchy-CFV1(a)uunet.uu.net> A SECOND OPINION: Quoted without permission under the fair use doctrine from a call to vote NO posted on news.groups by John De Armond: * New rules are being proposed by a new defacto cabal that replaces the voting system that has worked well for the most part, with a system of "bosses" who control what gets created and what doesn't. And it replaces defined criteria for passage or failure with the "judgement" of the bosses. It replaces the will of the users with the will of a few men sitting on high. This is the antithesis of the net spirit. * The proposed group creation criteria is most unsatisfactory. The newly formed cabal proposes to replace the current vote with an "interest poll" whereby if 100 people sorta indicate an interest in the group it is created regardless of the number of negative votes. This is NOT the way to create new groups. * The makeup of the cabal has been decreed from the cabal and no procedure for removing or replacing members is contemplated in this proposal. The highly controversial nature of several of the proposed cabal members combined with no mechanism for removal almost guarantees a spoils system with no checks and balances at all. "Piss me off and your group fails" isn't the way to run the net. * This vote is being conducted in a very abnormal manner, without the usual CFD discussion period. If changes are needed in the current group creation process, the proper way is to implement them in accordance with the old procedures until those procedures are formally changed. Change via fiat is again the antithesis of the net culture. For all those reasons and more, I urge everyone to REJECT this proposal and vote NO. This is a BAD heirarchy and a BAD proposal and deserves to die. -- Legal Notice: Exporting 'personal data' to non-European countries without special license issued by the Computer Inspection Agency ('Datainspektionen') for each specific case (message) is a crime. Personal data include names, even my name. If you read this message outside Europe, I'm a criminal.

1 0

Re: Cryptosplit note
by gtoal＠an-teallach.com 17 Dec '03

17 Dec '03

It uses rand() when it needs random numbers for the coefficients of the polynomial. I don't know what kind of security risk that poses, but it really should be using something better. It definitely should. It will be trivially crackable. (Well, trivally after someone writes the program I mean, which is more tedious than difficult). (Next question to determine *how* tedious... what do you do to initialise the random sequence? - oh, never mind, I should look at the code, except it's probably not worth the effort now. Just make sure people only use it for fun and not serious data hiding. Ask on sci.crypt if anyone wants to take a crack at decrypting the exored data, given the source code.) Where can I get Blum-Blum-Shub source or documentation on the algorithm? Can't help on that one, sorry. They don't tell us nasty furriners. g

1 0

Anonymous Remailer list
by Jeff Gostin 17 Dec '03

17 Dec '03

C'Punks, I'm looking for a list of Anon Remailers that hopefully have most/all of the following features, or at least get me in the ballpark. Failing that, perhaps just a list of remailers would be nice. Requested features: o I would like to be able to send a PGP [2.3-present versions!] file with commands-etc to be decoded and processed by the Anon Remailer. This allows me to not have to send my password-etc in plaintext. I realize that this will have to wait until after my first email to the remailer, as it has to get my key. o Allows embedded PGP files: One for the remailer, which contains both a second PGP message and commands for the remailer. o Allows passwording of anon accounts (I know, they probably all do this....) o Reports back errors in command syntax-etc, using a pgp encrypted file. o Uses latency and/or reordering. o Relatively quick (this might countermand latency -- I'm not sure which is more important to me) I'm just getting started with remailers, and am interested in secure, anonymous communications. --Jeff -- ====== ====== +----------------jgostin(a)eternal.pha.pa.us----------------+ == == | The new, improved, environmentally safe, bigger, better,| == == -= | faster, hypo-allergenic, AND politically correct .sig. | ==== ====== | Now with a new fresh lemon scent! | PGP Key Available +---------------------------------------------------------+

1 0

(fwd) WWII Enigma traffic
by Jim choate 17 Dec '03

17 Dec '03

Newsgroups: sci.military Path: bga.com!news.sprintlink.net!sundog.tiac.net!usenet.elf.com!news2.near.net!MathWorks.Com!news.duke.edu!godot.cc.duq.edu!newsfeed.pitt.edu!uunet!ncrgw2.ncr.com!ncrhub2!ranger!military From: lharnisch(a)delphi.com Subject: WWII Enigma traffic Message-ID: <CtMKns.J91(a)ranger.daytonoh.ncr.com> Sender: military(a)ranger.daytonoh.ncr.com (Sci.military Login) Organization: Delphi (info(a)delphi.com email, 800-695-4005 voice) Date: Thu, 28 Jul 1994 00:43:04 GMT Approved: military(a)ranger.daytonoh.ncr.com Lines: 13 >From lharnisch(a)delphi.com Does someone know the location of archives (or preferably microfilm) containing undeciphered German Enigma traffic? It isn't important whether it was cracked by the Allies during the war... am simply seeking some original German traffic to test computer program.... I have already gone through messages in the journal Cryptologia...... Pls E-mail me if you know of some sources... Thanks.... Larry Harnisch

1 0

Patently Absurd?
by will＠thinkmedia.com 17 Dec '03

17 Dec '03

I realize this may seem absurd, but for the sake of humor could there be any relationship between the Dept. of Justice near pardon of Microsoft on charges of Anti-trust and the potential adoption of a software encryption standard in Chicago with the blessing of NIST and some goverment agencies. Would it be ridiculous conspirancy theorizing to think that MS and Justice made a deal? I have nothing to back this up, just reading the news and cypherpunks. ______________________________________________________________________________ Opinion is a flitting thing, Thinking Media Research But Truth, outlasts the Sun-- will(a)thinkmedia.com If then we cannot own them both-- (408) 423 3720 Possess the oldest one-- Emily Dickinson

1 0

Re: LITTLE BROTHER INSIDE
by frissell＠panix.com 17 Dec '03

17 Dec '03

At 11:47 AM 7/27/94 +0000, wb8foz(a)nrk.com wrote: >contempt to release her. More recently, Supreme Court ruling defining >limits of civil contempt (UMW vs. JOHN L. BAGWELL) may have an effect on >this.) I know a guy in SF who won the Irish Sweepstakes and refused to repatriate his winnings. Did 2 years for tax evasion and two years for contempt (I think). Contempt was for his refusal to repatriate. Do you know what sort of restrictions the Supremes put on contempt jailings? I always figured that you should shower the judge and other judges in these cases with letters stating in great detail why you will never purge yourself of your contempt. Serves as evidence that holding you is useless and hence illegal punishment not a "legal" attempt to coerce you. DCF "But your honor, I'm desperately trying to *conceal* my contempt for this court!"

1 0