- cypherpunks-legacy - lists.cpunks.org

Cyphernomicon
by dsc＠swcp.com 17 Dec '03

17 Dec '03

Thanks to all who helped me get my hands on Cyphernomicon. I now can breeze through the html site at www.oberlin.edu. I guess at 2am it didn't work because either I or oberlin were too sleepy. I still cannot open an FTP port at netcom. I got a copy on my Mac by giving a lot of memory to Netscape and getting it from www.swiss.ai.mit.edu. I also got a copy from Jeff's zipped copy at ftp.goblin.punk.net, but my unzipping utility hacked out a few lines. Here is a summary of what I learned: Cyphernomicon File Size: 1,287,731 (single character newlines) FTP sites: ftp.netcom.com/pub/tc/tcmay/CP-FAQ The original. "crowded" (I couldn't open an FTP port.) ftp.goblin.punk.net/pub/docs/cypherpunk.faq.gz ftp.goblin.punk.net/pub/docs/cypherfq.zip 28.8 bps modem, newline=CR, but .zip will change to newline=CRLF About 432Kbytes. (On PPP(a)14.4 it took me 6+ minutes to get it.) "until someone posts it on a site with higher bandwidth" [the upcoming new/changed/mirrored Cypherpunk site] HTML site: http://www.oberlin.edu/~brchkind/cyphernomicon/ nice. Other http: sites: http://www.swiss.ai.mit.edu/6095/articles/cyphernomicon/CP-FAQ text. very responsive and fast (6 minutes for my 14.4 connection). http:/www.isse.gmu.edu/~pfarrell/crypto/CP-FAQ text http://www.msen.com/~lwp/Cyphernomicon.gz About 432Kbytes. Need g[un]zip utility. Clearly missing are credits and contact info. I probably won't get to the FAQ much this weekend (wife & kids expect me to do my share and bring home the bacon), but maybe in a week or two. Do I have to read the sci.crypt FAQ, too, to earn my FAQ badge? Dar (list newbie) =========================================================== Dar Scott Home phone: +1 505 299 9497 Dar Scott Consulting Voice: +1 505 299 5790 <--- 8637 Horacio Place NE Email: darscott(a)aol.com Albuquerque, NM 87111 dsc(a)swcp.com Fax: +1 505 898 6525 http://www.swcp.com/~correspo/DSC/DarScott.html My preference for attached files are in this order: AOL, Mime, Binhex4, PGP, UUencode ===========================================================

2 1

Re: ON OFF-TOPIC [NOISE]
by Alan Olsen 17 Dec '03

17 Dec '03

>Is there something authoritarians want, that we don't mind them having, >for which crypto would be an enabling technology? Some of them _might_ >be interested in having better encryption for TV channels so that kids >can't watch a NotForKids channel (though many of them might rather ban >it outright) or so they can easily control whether their kids get to >watch MTV even though the V-Chip doesn't have a NoisyKidsMusic bit. >Perhaps they'd enjoy having reputation systems available, so they can >easily filter out politically incorrect material, or do a thumbs-down >on things they disapprove of, or let the Baptists and Catholics and >Anti-Baptists all have their own convenient ratings. MTV has a pretty funny parody of the V-chip concept that they have run on occasion. They are advertising that kids should get the MTV-chip which prevents parents from watching MTV while the kids are at school. Their slogan is "keep mind control at home where it belongs". (I find it interesting that they have an anti-censorship stance, yet censor many of their videos. Kind of hypocritical...) | Minister of Forced Caffinization in the DNRC | alano(a)teleport.com | |"The moral PGP Diffie taught Zimmerman unites | Disclaimer: | |all mankind free in one-key-stenography-privacy!"| Ignore the man | | -- PGP 2.6.2 key available on request -- | behind the keyboard.| | http://www.teleport.com/~alano | <fnord> |

1 0

[NOISE/Fun] some 'special' primes
by Laurent Demailly 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I hope this is not extremely already know,... but, seeing on the list a sig with someone claiming to have the 'last' prime, I played a bit this nite and searched for the *first* alphabetically sorted prime (once written as spelled, sorted like with unix's sort) dependending on the language : Easiest: English : 11 : eleven A bit more fun : German : 811 (dunno how to write it, but it starts with an "a") Exotic one : slovenian: 10019 desettisocdevetnajst And..... the tricky one, which I hope is the good one (challenge: find one 'before') : French (and possibly spanish/italian,...too) : 105 105 000 105 167 (it spells cent cinq mille cent cinq milliards cent cinq mille cent soixante sept) [note that 'billion' is not used for numbers in common language, and that soixante-dix has a - and not a space :-) ] More languages ? better results anyone :-) ? Regards dl ps: I used gnu MP lib for my hack when I hit the 2^32 limit, but it's rather slow... (ok, its prolly due to my lasy prime algo too, but...) is there some well-known fast mp lib to play around with primes ? (should I look and extract PGP's ?) - -- Laurent Demailly * http://hplyot.obspm.fr/~dl/ * Linux|PGP|Gnu|Tcl|... Freedom 105 105 000 105 167 -----BEGIN PGP SIGNATURE----- Version: 2.6.2i Comment: Processed by Mailcrypt 3.3, an Emacs/PGP interface iQCVAgUBMFEKvXk52/beodHxAQH+cgQAwUzDczvIzXaBzYx/Q5oerXFZ/ABDjp8b Sz20qgBmB3BP9jE8GbibqIF1FOExS2r3irg4PQHhUwuX7wWT/deo8KzWMrb3C2fi X3kMbtWM9hQNHJ1mRpAE41M1NuHgk8xM43WbkZcLyYOPXXWSAAs0qc+bdNamtUDT iujkF9fQxck= =mkaz -----END PGP SIGNATURE-----

2 1

Princes Die! / Re: None
by Anonymous 17 Dec '03

17 Dec '03

The metallic custard scent ripped through the stegosaurus' nostrils. Clearly, the monotreme journey it would begin as it had ended. The ponder-tree hung itself in the heavy air, it's sap becomming purple, and flowed engimatically like a river of broken curves and powdered eggshells. - A'Tak A'Tdurn

1 0

Re: Scientology tries to break PGP - and fails? (fwd)
by kelso＠netcom.com 17 Dec '03

17 Dec '03

> >Tom Rollins writes: > >> If this is the file that the Co$ is trying to crack, then what the > >> is being asked for is a pass phrase that can be handed to the Co$ > >> that will pass the PGP valid key check and still not decrypt the > >> data to anything usefull. > > > >Well, I don't have the PGP 'conventional' encryption format memorized, but > >there is probably a constant after the IV that is prepended to the data. The > >constant is used to determine if the key is correct. Since the conventional > >encryption runs in CFB mode and there is a full block of random IV at the > >beginning of the file, it is extremely unlikely that a key could be found > >that would properly decrypt only the first two blocks while leaving the rest > >unreadable... > > > >> If Larry Wollersheim does have the valid key. It would be a simpler > >> process to know what fake key to use and work it backwards through > >> the MD5 to arrive at an ascii string to produce the fake key. > > > >Not really. Even if you could find an IDEA key that would produce the > >desired output it would be hard to find a passphrase that would produce that > >key when hashed. One of the properties of one-way hash functions is that it > >is difficult to find a plaintext that produces a given hash. Hence the term > >'one-way'.... Even if you did find a passphrase (which, if MD5 is strong, > >would require something like 2^64 operations), it would likely be long, have > >8-bit chars, and would be impossible to type in. It would be tough to > >convince anyone that it was the real passphrase. > > > > > >andrew > > > > > There was a hack to pgp ui published a while back that would allow > someone decrypting a RSA encrypted file to print out the idea key. > > Another feature of the hack allowed someone with the idea key to decrypt > an RSA PGP encrypted file ignoring the RSA headers and using the IDEA > key directly. > > Using this software should allow the reciever of an RSA PGP encrypted > file to allow someone else to decrypt it (by giving them the IDEA key) > without exposing the secret key. The IV block check will allow them to > check that they are using the correct idea key. > Looking at the source code showes that all that is needed to pass the PGP key check is for the first two blocks to decode in such a way that the last 2 bytes of the IV match the 2 check bytes before the actual message. Thus the first 6 bytes of the IV and the last 6 bytes of the next block need not match the actual message. There was a bug in the older versions of PGP that set the IV to a constant instead of a random value when encrypting with the "-c" option. I made a mistake thinking that knowledge of the correct key would help in creating a fake key.

1 0

9K P6
by John Young 17 Dec '03

17 Dec '03

There's a bit more on Intel's supercomp virtual NW tester at: URL: http://www.ssd.intel.com/press/asci1.html Here's a sample: ---------- Intel Scalable Systems Division Fortunately, advances in computer hardware and software technologies are making computer-based virtual weapons testing and prototyping a viable and affordable alternative to the traditional nuclear and non-nuclear testing of stockpile stewardship. The Intel teraflop computer announced today is a key milestone in the shift from nuclear testing to computer-simulated testing. The ASCI Program Located within the DOE's Defense Programs (DP) laboratories, the U.S. Department of Energy's Accelerated Strategic Computing Initiative (ASCI) is a multi-year program to extend DOE's computational resources to support virtual testing and prototyping capabilities for nuclear weapons. ... ASCI has four objectives, each of which requires computational capabilities that are beyond the capabilities of existing systems: * Performance -- Create credible virtual tests to analyze the performance and predict the behavior of nuclear weapons. * Safety -- Predict the behavior of full weapons systems in complex accident scenarios. * Reliability -- Develop the ability to make predictions that will extend the lifetime of current weapons, predict failure mechanisms and reduce routine maintenance requirements. * Renewal -- Use virtual prototyping to reduce production and testing facilities for stockpile requalification and replacement work. ... Beyond its weapons safety impact, the teraflop computer will have a wide range of other applications -- from developing safer, more efficient cars to simulating natural disasters in real-time to finding new drugs to fight disease. The machine will be one of the world's foremost scientific research tools and will act as a magnet for advanced research projects. In 1963, John Kennedy referred to a test ban treaty as a shaft of light cut into the darkness of the Cold War -- a chance to step back from the shadows of war. Today, by making it possible to ensure the safety, reliability, and performance of the weapons stockpile while foregoing nuclear testing, the Intel/Sandia teraflop computer can help the world take a further step back from the shadows of war into the light of peace.

2 1

Live Live Live
by Announce＠gosnet.com 17 Dec '03

17 Dec '03

New Adult Site Experience LIVE adult shows inside your Browser* without any additional plug ins! See shows broadcasted LIVE from the USA with some of the hottest girls on the Internet. Unlike any other site, you can WATCH the shows WITHOUT paying per minute charges. Plus, view one of the best maintained picture archives around. Must be 18 years of age or older. Don't just take our word for it ==>Take an absolutely FREE tour and experience the future of adult entertainment on the internet, today. goto http://www.gosnet.com/kittycat and click on Guest * Must be running Netscape 3.0 or higher to view the streaming feed. Members can watch live show with NO per minute charges. Must be 18 years of age or older to take the Free Tour. To be placed on the Universal E-mail Remove List e-mail a letter to kittycat(a)gosnet.com and Place the word Remove in the Subject Line this will place you in the UERL pool and will help stop unwanted e-mail from other commercial e-mailers.

1 0

Top 10 Ways to Make a Grouchy Old CypherPunk Smile - #6
by Anonymous 17 Dec '03

17 Dec '03

Top 10 Ways to Make a Grouchy Old CypherPunk Smile -------------------------------------------------- #10) Find his shoes for him. #9) Buy Kent Crispin a Dr. Kevorkian gift-certificate. #8) Nuke Washington DC #7) Send ten copies of this back to Vulis. #6) Have ? the Playtpus send him an email saying "Nude D.C." #5) #4) #3) #2) #1) [This space reserved for T.C. May]

1 0

Re: GAK
by cman＠communities.com 17 Dec '03

17 Dec '03

> >If too much attractive stuff is available by loss of any one public key, >that key gets attacked. To compensate for this, the TIS DRC generates new >public keys periodically to give out to new (or old) customers. > >However, a government warrant which demands the DRC's private key collection >would gain quite a harvest. The economics of the situation seem to dictate that whether you have one key or N keys, it's going to be cheaper to subvert the escrow agent (you guys or whoever) than it is to brute-force even one key. Therefore I'm not clear on how using multiple keys buys you much against the most probable threat -- opponents getting physical access to keys or the subversion of personnel who have legitimate access. Of course, it's still a good policy, reducing the payoff to those too timid to try the direct approach. But I think this threat is significantly less likely than a disgruntled employee selling the DRC private keys on a real instantiation of the Blacknet model, without even being solicited. You may feel very comfortable with the personnel and procedures you have in place now, but auditing and vetting systems are notorious for scaling very, very poorly. You may feel you can vouch for the trustworthiness of everyone at TIS now, but this sort of familiarity also scales very poorly. And clearly, were this to become commercially significant, it would need to scale quite a bit. Douglas Barnes Electric Communities

2 1

Re: Scientology tries to break PGP - and fails?
by Donald M. Kitchen 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- >hack..print out the idea key. >using the IDEA key directly. This would be a neat addition to PGP. It would be fun to take random data and slap PGP headers on it, and maybe throw in a real encryption that doesn't report the true IDEA key. It would be a valuable trick for StealthPGP / stego systems, if we ever need it. Don -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQB1AwUBMFGJicLa+QKZS485AQH9vgMAwnofHnb7EOpcWVtCp9lWdySM2W7wAnQ5 wNvsKWrEW2aCK+lf1fvNUypLwXN5twA9W1ZLqVOqpJZMjLSVnoo9ulTOJ45hoF2p BZQGAaFqlnl6IQHbmA7l2vBt55GfWAnS =lDmq -----END PGP SIGNATURE----- <don(a)cs.byu.edu> fRee cRyPTo! jOin the hUnt or BE tHe PrEY PGP key - http://bert.cs.byu.edu/~don or PubKey servers (0x994b8f39) June 7&14, 1995: 1st amendment repealed. Death threats ALWAYS pgp signed * This user insured by the Smith, Wesson, & Zimmermann insurance company *

1 0