- cypherpunks-legacy - lists.cpunks.org

HELP ME, PLEASE, I CAN�T WITH THIS INFORMATION. !!GETTINGS!!
by Agapito lopezcaste 16 Apr '01

16 Apr '01

nesecito ayuda quien me puede asesorar sobre este tipo de informacion aaaaaahhhhhh por cierto los mensajes del enanito como puedo abrir el codigo de este mensaje. >COMMAND > > Novell Remote.NLM Password Decryption Algorithm > >SYSTEMS AFFECTED > > Novell Netware > >PROBLEM > > 'dreamer' found following. Novell is known to use a one-way hash > algorithm in their password encryption, so all captured encrypted > passwords must be brute-forced, slowly and painfully. However, a > few days ago, he cryptographically cracked Novell's Remote.NLM > password encryption algorithm. It is a very weak algorithm > compared to what Novell has implemented in NDS, as it is > instantaneously decryptable. RConsole password encryption is > different from Remote.NLM password encryption because: > > 1) Encrypted RConsole passwords are sent across the wire, via > RConsole. Remote.NLM's encrypted passwords are generated at > the server console by typing REMOTE ENCRYPT MyPass, and they > are optionally stored in SYS:System\LDRemote.NCF. > > 2) They use a different password encryption algorithm. RConsole > passwords are encrypted with information from the workstation > that is currently running RConsole. Remote.NLM passwords are > encrypted with a time byte, one of 255 constants in a hash > table, appended characters, some XORing, and bit-order > separation. > > 3) Encrypted RConsole passwords are locally obtained with a packet > sniffer, but Remote.NLM passwords are remotely accessible to > anyone with the ability to view SYS:System\LDRemote.NCF. > > The Remote.NLM passwords are decrypted using only five steps. To > encrypt, simply reverse the steps. The password will look > something like this: > > AF8CBBF48CA9955F5ADAFDADAA23 > > The structure of the password is as follows: > > AF8CBBF48CA99 55F5ADAFDADAA - 23 > > The first section contains the low-order bits, and the second, the > high-order bits. 23 is the time byte, which is decremented by the > server once every two seconds, from FF to 02, then back up to FF, > etc. > > Step 1) Realign the low-order bits and high-order bits > ======================================================= > This is extremely simple to do. The high-order bits are in order > from the first character to the last, and so are the low-order > bits. Example: > > Password: AF8CBBF48CA99 - 55F5ADAFDADAA, > Output: 5A 5F F8 5C AB DB AF F4 D8 AC DA A9 A9 > > At this point, ignore 5A 5F F8 5C, or the first four bytes. They > are appended somewhere during encryption, and decrypt to "%*@$". > It was a TERRIBLE idea for Novell to implement those four > characters into every single password, as those are what helps > rebuild their hash table from scratch. Also, if the length of the > password is 10, the password is automatically decryptable to nul. > > Step 2) > ======= > Match each of the password characters (group of two hex > characters) to the hash table below. Use their position from the > beginning of the table to determine the value of the pre-hash > encrypted password. Example: F4, the 8th character of the > password, matches the hash table at 95. This means that 95 is the > pre-hash value of F4. Thus far, (ignoring the first four > characters) the password was: > > AB DB AF F4 D8 AC DA A9 A9 > > and now the password is: > > 98 A0 9B 95 A1 9D A6 9C 9C > > Remote.NLM Hash Table > > 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F > > 00 5B 58 5E 5F 59 5C 5A 5D-73 70 76 77 71 74 72 75 > 10 13 10 16 17 11 14 12 15-7B 78 7E 7F 79 7C 7A 7D > 20 53 50 56 57 51 54 52 55-03 00 06 07 01 04 02 05 > 30 1B 18 1E 1F 19 1C 1A 1D-0B 08 0E 0F 09 0C 0A 0D > 40 2B 28 2E 2F 29 2C 2A 2D-63 60 66 67 61 64 62 65 > 50 83 80 86 87 81 84 82 85-3B 38 3E 3F 39 3C 3A 3D > 60 8B 88 8E 8F 89 8C 8A 8D-33 30 36 37 31 34 32 35 > 70 93 90 96 97 91 94 92 95-6B 68 6E 6F 69 6C 6A 6D > 80 9B 98 9E 9F 99 9C 9A 9D-A3 A0 A6 A7 A1 A4 A2 A5 > 90 F3 F0 F6 F7 F1 F4 F2 F5-AB A8 AE AF A9 AC AA AD > A0 DB D8 DE DF D9 DC DA DD-FB F8 FE FF F9 FC FA FD > B0 23 20 26 27 21 24 22 25-B3 B0 B6 B7 B1 B4 B2 B5 > C0 CB C8 CE CF C9 CC CA CD-BB B8 BE BF B9 BC BA BD > D0 C3 C0 C6 C7 C1 C4 C2 C5-D3 D0 D6 D7 D1 D4 D2 D5 > E0 43 40 46 47 41 44 42 45-E3 E0 E6 E7 E1 E4 E2 E5 > F0 4B 48 4E 4F 49 4C 4A 4D-EB E8 EE EF E9 EC EA ED > > Step 3) > ======= > Subtract the length (the number of groups of hex characters, > excluding the time character) of the full password from each > encrypted password character. Now you have the ACTUAL pre-hash > encrypted password. If the subtracted value is negative then > simply continue from FF down to the negative value. Example: if > the password character is at 04, and the length is 6, the value of > the password character will be FF. The length is 13 (D in hex), > so the password was: > > 98 A0 9B 95 A1 9D A6 9C 9C > > and is now: > > 8B 93 8E 88 94 90 99 8F 8F > > Step 4) > ======= > Get the time var, in this situation 23 (hex), and subtract it > from FF. This new character is for use in Step 5. Example: > > FF-23=DC. > > Step 5) > ======= > Finally, XOR each character (group of 2 hex characters) of the > encrypted password with the new time character, and you now have > the decrypted password! The password was: > > 8B 93 8E 88 94 90 99 8F 8F (before the XOR) > > Now, the decrypted password is: > > 57 4F 52 54 48 4C 45 53 53 > > "WORTHLESS" > > TheRuiner ('dreamer') has written a program in Pascal (oh well) > which decrypts Remote.NLM passwords instantaneously. It was > tested on a password of around 50 characters, and it worked > flawlessly, so there shouldn't be anything to worry about > regarding the length limit. It can decrypt any character, from 00 > to FF, and it will display that value upon execution. The source > of the program is below. > > --- > Content-Type: application/octet-stream; name="remote.zip" > Content-Transfer-Encoding: base64 > Content-Disposition: inline; filename="remote.zip" > Content-MD5: GJdEvw/Ya/aVRkxDK1lSyg== > > >UEsDBBQAAgAIAPy0hyZ84rYL1AoAAPcqAAAKAAAAUkVNT1RFLlBBU71a227bSBJ9D5B/aMw+ > >SBpdQFIX62IaoERyE0BJBEfZ2AjyQEsdW4BNZikqjncx/5xPmDpsstm8SJaTiTUzHLJ5uup0 > >dVdVV9OLMLgOvTtm81X48DU653dBxN/O3yy87fY+CNeTly9evvg/u3pgyxt+vtv4PGR/iba2 > >H7Cdv4m2bdGyCvxt9PIFY6+87c3Su7rlbMysMPQePmmdjt5vxdfPLPjC3kfhxr/+ZHxmJquj > >C2P1Wn9aa9X6Q1wcXFxcRrjMcLFwsely0sVFw2WAywkuOi49XAxc+rVGK5WrA68DrwOvA68D > >rwOvA6/30Qn6T6D/BPpPoP8E+k+g/wT6T2xFbh9y+5Dbh9w+5PYhtw+5fcjtQ64GnAacBpwG > >nAacBpwGnJbjCx46eOjgoYOHDh46eOjgocMOGnAacBpwGnAacBpwGnCaytcA3gDeAN4A3gDe > >AN4A3oDcAfgOwHcAvgPwHYDvAHwH4DtQ+Q6BHwI/BH4I/BD4IfBD4IewQxf6u9Dfhf4u9Heh > >vwv9XejvqnyHwA+BHwI/BH4I/BD4IfBD8O1Cfxf6u9Dfhf4u9Hehvwv9XZXvCPgR8CPgR8CP > >gB8BPwJ+BL4D6B9A/wD6B9A/gP4B9A+gf6DyHQE/An4E/Aj4EfAj4EfAj8DXgn4L+i3ot6Df > >gn4L+i3ot1S+LvAu8C7wLvAu8C7wLvAu+FrQb0G/Bf0W9FvQb0G/Bf2WytcG3gbeBt4G3gbe > >Bt4G3gZfFzgXOBc4FzgXOBc4Fzg3t87A1wBfA3wN8DXA1wBfA3wN8J0CNwVuCtwUuClwU+Cm > >wE1VO8zAYwYeM/CYgccMPGbgMQOPGfhOgZsCNwVuCtwUuClwU+CmKt8ZeMzAYwYeM/CYgccM > >PGbgMQNfGzgbOBs4GzgbOBs4Gzhb5dsDvgd8D/ge8D3ge8D3gO9BrgOcA5wDnAOcA5wDnAOc > >k5OL8fUwvh7G18P4ehhfD+PrYXw92MEBzgHOAc4BzgHOAc4BziE7NOIQHz185Wnsfu2v+fcl > >NVB0DvmKsoBQXfxdtC4pwk8fIj6pAnB/Hbe/N2JZyc/Mgn+s+JsX5vQSZJxnEQtZ3K8dP05R > >reRxubnj6T3w6f0HX31K8hqECr2ptDn3r6ObWNtrP+LXPExSXeHXbrdN0/zx4wdbhMGKr3ch > >Z24Q3nvhmqQxekGvCVQafpwTsz7/5hFpTTiwp/wSbZOyNDEGy49tMfl5aefcu91cx3bja5I7 > >+SVuH/wbEoQZCuJdwK9Je7+7omHSeJPpn/yq3axVtPNun2Cx/dIu3p1DzsdNdPMkq+0Z6U1w > >L/ZfcvP1ZGnuzl9Fm8Bn7D80petUUH1xn67/BnlsENxyz588QZrc0s2DlYemOjm/9JyGdK4j > >pfHvNK3kmvXpOAkPEzZv2TmBSfNx0qJwGUDe+3CVdm1kjv0Uu5GUZSBECmmPUXqM2zKAqIWt > >TMAxUSCTVhGUfvp3KCgp0djLRUWKl2r4fPniil9vfLS//sIWHpUPs2DnR6emxqIbHr+QCMY+ > >hpuIz/1J7qleY0ysdZau0bQEoQKDoi79p9YctcbkEWkftt41HxdxeJP8hLoO/87Z6ddE59nj > >cuXv4w0P1a5ss2WeT1lOsF6z9A275sTYQ9PVwwFCjP1x7rx5t3SY83Z2frlYsjcPMMYfzIto > >Bt5+ZL2OrrMtD7+RTVBdkdt2pMBX3m1U18UTpVrGb7e8YPrc9JzpcnZyoOLYc1RfX/sBpp05 > >36PQE9I4TdGWdfCPJJPm+qKwxdiM+8AF9BSc5XJ6m7TRcmfe2CSOARNprb5osHWQcKKR1Bef > >vM9nZs2rNcjua/F8ata+0DMGpoilF2Pzw9eZt+UxKlVMUophMe3SUIwDXMohA5i6pmJyFlRN > >JtczrY+3H+YEXHm7LUdfdis2HfRG1zLjpZOpyQZ1PovyEzfBpNSaGb9mjQQmk0E9K2c4nlH/ > >G0xQsW5VQgeWBGMO5TuxIiNv42/ZJhG5uqGpXsWrg2aTMGWBQkCFz9CWgZ2ShTMZKh11rWeL > >TfxfXP/xIClj+BGJdG/kVEJlTszYdD2apEkSQ+Via5zlVlmVU9xnXgGnoAbhFpp0i3vhFyPa > >2sv1Q4Lq9dQjACBNNSvtkntBXd2sa+xZBe7LcJeuzHip7Rnab5qYw5vgnM3l27FZ9ue2MVEq > >CYpEWfiQ/Zr652Zle1y8/PYBlvblaqUmEveOdrPhI4WaNW9Zr2hdevFZnN7pGH1xDLe3dINw > >VqiZKqs7ue7f7u5m5LrblnCC9FfYRqSUqV2lHwvKbyvqWYl2F6yZ0Tg9O7S7ODayHUjzyyw+ > >k2kQrb8qkdwPIsa/cb9TndCXN4Shf0P+390mJNVfyOOuyLzUEs/hHfejJ+Xu1KDxwkwssd58 > >Y0aaMDe3twDUpSFb7zf/4+++ZA2NFqJClnRFa4fuxmatVpF4U50ywuSSSCbBmscZ9l0ugyp5 > >Nod9VYltproqO8UUc4/N2Y0yVCG1UWycKxyyHUlyPlAQ+PszyIGKWHEcaoUbKt4mTkaKLtW6 > >qnQpl7Z266RdTUdy5tR1khyNZOtENDRa/0q2HrE0NTkdXoUH1o6yckpC6e3YrHt/Go22ns0R > >rBCrAaVPV3HgFbcUhZXFKs+GOhdjVBwB0/uVC5aiCLxWWEjZueWFXJaF7O+KF7IU/qQIaSms > >PpvpnKo98/vF7KAqHrK4bZarbEWsouJS2Tmm5kVSlq3Z4n/evdKxxwTK+k+ReyrM9DVFLE2r > >pRum+sWZqSWbl4tTc5RUACmYPGhsIjZcNHtDsZOJNypJT13pqvf39+33G1LhZabwskKhnnS6 > >LCu8VBReVinM+qYKS2ak/Uty9xzhqnTkdlS4WihJX9k2HBHF1B2bzEz/ROQ5GGaEzyWBJn3I > >Qo2EZodVSVNLDkkWbChzm8lrxd3ybv4c/nf8wZpas7RWhayyLc2vMkfbgi9OCaEWIHgW9YdY > >6J7I/mhutHEHaN5HEhFWQYS7XwRBm7qmcNALHPQiB6+pD/6sCzG6wqRERS9Q0YtUKiUJQjJg > >2MlhGO699vxUk72N/qBJLUIjpLXnOQa2qcue87ZX6Ektsifdx+pWJCT2DX0gDbLK4tUqi1db > >GWxWTTn+7KQh6agrPWW4KnWlAbfTAccMsE8/goHx8wyM/Qzkyh+b22eqPZUPCWqARMOeZLaQ > >lWbSSyk/lTATf9miGq0VVwi/fSiFrxh7i7rWVWvVWrd4uagD6FDEyL7DyfCe9FJCyVEBv/9o > >wKd4L8P9Spg1/ThwIOingXxd6gHTyJpibK7Yd2KilBZiFOpXA66UXHLY2X0z6fSc27JHv5Ac > >c4IF36TehWgvWirivXixL+JLQVZJkHtIUCHu451e4nMg9ovXe6O/lGeV5LmPy1NzgGJzwj/D > >JD/+4eqoDzxl51V8lIZOoou5xssivZdF+oVMGN6+SO8pkd5TIn2pqxrpEw6FbLOPg/HzHIz9 > >HBRb/9aN3cGPw7lZUg+2yh8L+Fp+lhizWjP7KimjUqNR7Fr4UZ+x+OCQ9niewLX/86madKtr > >j4VRbFbOVlb5zHZcVZKdphjyGMXIzk+yHFYvJLFGu/e0wuVQHrPjBGbnMldcgsSbo0auAklN > >eMQ6zf7U5Y238fH3LvGfhu7/Exc5YZJ64YMy23NGz6qOtlnVORmrqkZZafvFyrsYVu0zZIHO > >yxd/A1BLAwQUAAIACAAiuYcmvVbFX84AAAAnAQAACgAAAFJlYWRtZS50eHRNj71Ow0AQhHtL > >fodRGqDIoUi8AAVSimCQiUR9scc/iu01u3ckeXsuOBK0Oz/7TclRAh3PxBoFw6dX4sltNigX > >pdi9YvZmJ9EaNSu9zIHq8uymJy0l371VfoBJ1IqopGZybL11LpwDsDiWji5dEfxhIO6N/J9B > >I4o56izGx2i+5UOqybPVh4zE2377UkJmqg/91MIuFjgaLDYNFY3KiBP98Q+X0y9uL5Nb5dka > >z/iKiXmxFvLNYbiz9DmqEdJc96fc8Vq+Z9VNMkjb0xLDD1BLAwQUAAIACAAGtYcmPLcZn98T > >AADwIAAACgAAAFJFTU9URS5FWEWVmA10E9eVgN/ckcaybIQTCEv+zLglyhYTZ6TRr20I+hvo > >LhDXGOzAUuoQBUgTw8qSHRoii3hLao/NabqnexqfdjfE2e4ecLMk5bQy9NgiNhhDaQw5p6Qk > >m8PJTzscJZTYjjG2LO19I8k2BJqNyaeZee/e++579777ZrJm41VyB/kfUkKCBcHDG+BqipDU > >XELuI4T8liEkhpxD/ojEkWHkGpJAOCAkD+GRB5GliAmRkDVIJVKN1CJPIs8hLyAvIm3IAeS/ > >kV8hbyJHkbeQc8gfkTgyjFxDEgjH4njIQsSIOJEQ8ivkCNKN9CAnkPeRPyNXkWtIAmE0hNyN > >8MgDyBLEgjiRtch6ZCOyBQkizyER5IdIO9KBMFpC5iHLkFrkWeR5pBXJ5wixIcsQN7IS+Q6y > >Afk+EkAakT3IS8jPkF8gryIHkUHk3hxCShARkZB/RB5DQsgLyE+RD5BR5Dqi1aHvyPeQHyAv > >Ir9F/oAsyyVkNfIfyG+QY8gA8hdkHAE9IQWIgKxAdiFH89AP5BLC5BNyB1KMPI28gLyIdCOD > >yDvIJWQceW0OIVFkhQHXA5GRHyP/iUSRXqQfGUQ+QBTkr8goch3hMOesyAvIy8i/I79BTiJn > >kD8h1xEowHVGliIMYZl7GZYpYFlmVy7LyMgBJIaQzF8Jz1f6n9kZ9PMVtfX1jTsDT/Be/9bA > >7l1Bf4Dn+YeQx3fzVdv9laEddf6AjufX19du85cW8tm/tHqJ/1k/X74rY2O5i5/5q97uD8zu > >43fU87V1vL8uPcwTfLaH3+bHIWpp0+O7H5ll4RuVvjWPVvl431pP5WMVVfya3dTZb/C1Qb6W > >X1vNW0pMJr7eH2hAn7furKvf+bS/pIjnv72tbmdgR9023vdsMFCLEwzUPuPHedXzJfRfMT8z > >Z3Rp7frV/OP+rbWhej8f3O7nn/bXbQtupz0moWQOn10Wao8puR+t1zXUPr3jiVvMo4SuGu/b > >gVZUf4K1O+rq+R0Z+a3b0Y+tqhs7A3SkJVT6FquxvbaeLzcJsxRK1rd8EgXoOAsss/dTvIlz > >LJMbC7OXx0jvhtzC6o7/1bJMx0vYrT629/whuaC6lxBDdcfiHJZ5inTsQo2bpL6kNEqVHv7b > >Su09H1Apx9c0/TuqVP1Vpnuo1Mu3lYoypGMB5vXlIUZdgWUMCVtvPd771NKf/r9OtvckpxZU > >P8V0/JxTH1B5e4p0LM/JPvVWsYXTTa37kknh45Z9iSQ6VIaXJmeLlIyzKSkph5ORY8lkbaAw > >c/dk43y8a21OJis6NupxK4aTP/phFStLSaoY+r1qWAFGFwvWR5ZXsfrQw5kZnKfDTt52BqaY > >uhTx0ow4nUDvg0xGXDXb0UnvrLSt81YmLreQjPIlOpad+XohHaJK65mvCKk6jWbmq0I62EdT > >nGMyKc4xbe/s72t7L0GX/0SDpuvgS8JnI6/tf++klCIRbNMHvp8Nw0Q6DBPJphoak7gmhb9y > >T0JdfyGQl711NiymtzOxKHcFFt7UIjVyOAIT19BxZLRD7YZeb5VSg29pCHWRZHchgVeqWOHj > >Vas6q3TtPSS1oPpAlW6FPN6K4a3oWKGjqUOS6dYbmtNhqdLMJNRg398uK8W0UFTNlKadT6qF > >atesIla3M8j7G/x1JUvSstiE/wX8/xzaEUBTT2LFeXw3FvuAHwfZVveMvy6oFhUNl5mOhkNH > >X+4Gcu36T3JjIfZy23RyJDCC+7VfLznOU6Uu7VclB5V6V/uV+/0UmXYOdxrmBOptT8JTQoeE > >UTuJcSK4ozD6ifSOTGBl3EtapATdlAk5nKCrj5cfNU8lZCnB4kYdn25KTLX3JCYWoDsJDJfq > >Cd5OLqimetg7K2rYfj3TPpW4sX1WycARqA+hf0k391ZpZ4earrohm0QG6K3isJfQyatzkb6Y > >PdcJWZpokYbprKRhnNTnOKlxOqlxKihL4+curWqRxtp7hpPUrzGclDabfMNYEWRpLJ172tne > >hnH5ngLVn5NcJUvimiReIuEvSGjPSW5dumFduuGJVyoxy+Wr5y4xV+WhV9bhw/fHBXZi7wAQ > >DCE11XEXWg6VpUdU55NZROqUql6h6lUodpJJfm5mRXAiTGT5OnZuSI4sr2TnBtnLu1I4M5ww > >3s5PDfaBIKg7L1scCNN7SGeoTm+6rJnmMEf23Im/uU35ssRpBfKjfZCKL8AW/Z4C/J3bpKft > >drW9OaxRpTWqtEaVZlRpjSqtUaU1qjSTSo/UH9ZxM3HMlIN8NuNUPqum4UzssHDISMu+0XR9 > >Gk1i/P6LtOwbV0vUOPaOJ2n49o1hRo/SYPWMJTFUXDaAo7i2MvamI8jdJoJpXbUl9ZuJ5FNE > >2Uhu0T8rudWY3SJt0R/qJq76llQ2dbnZqZsJRD5R59z8aX62SIcTJxp0XeUQgMOQrdS9Fj3G > >KDw67UgkjNV4Hv46G+e0Sli6HxIwmyfi92CTKzAff6VGQ7rDRbR62hcJTwmBu/HX2TivVZpS > >VY5f0rB0U0zEeexwBVB9Smqcn+5WFaclaJRD38QtVCxxubHnDXinJQw+UO3cdDu9fRAFmVAR > >pkexNJEW5FTBiYwgl75FjZe7C9SNOd4cHid77sDf3KY8zFaaQdIX8YXYoKeJNT6XJta41kUe > >0tOeadWf3EZ37La6Y+oi9ofzuexKDr6lu/ksUs+TG3dE+viZbnuKUVzJm46dTEDvzNq5E05y > >VTmkV5tPQ3d1OnSzqy8ttNKVqBYr0hXM6M6ZMisl1Go00d5zRa1GE7OT+YpajSa+nMvKVlrT > >VMeUGrwdw6mL0liLNJq2k2oYVT4ls71Jt/dW5WQLDe3LFJacwhvKsHQFs/nxVLrq6rJ5q5vO > >2wn6bnFj3kbCCTVNE2qaJjJpOk7TNKGmaUJN08RMmo5HwpNqmk6qaTo5k6bjVBHTdFJN00k1 > >TSdvSFMqIdNfuq60qGRCwmV95Xp/NocGY2J6+liXslmYbA4n1UxKqpmUVDNpkmZSUs2kpJpJ > >yWwmTU6r/uQ2uonb6iZUF/rD3KwsBLJg+vMIXzKyH1Wl/AL+5r9V/mdL+Ztz9pZvDjRpeyWD > >IXuI0PRV46qsIrd+j80qUsHNhuk34JzC27z3Zs5gTfYM1ky/a5LUDe+a+0iSYCGknwZs5nye > >3gkPabCUT0xhiZ9q2Tc8pZb44SncEO20xE+pJR57x6fSJR7fMYYTaomfam0mqekzelIt8VN0 > >W0w3p7fFarQ7OpUWSa9K9lRFO63YdcP7B7mxkE9RZzD1d6fSXV86uzoIYRlcBvyMoKug/OJz > >hf9C+fQLZcs1xXhdeWVS+WRSWZsczHxmEHL0ELP/YhvnYMXPlC165RUi92vnkTc07yht59m3 > >OvVsZz7Lchq208B2LmQ772M7F7P7Udx4AEgnzw5wS9g/kjbDUrZ3g77HCd3zyI8TJV1HrGeL > >Wu5v80HzgObDvxYaFh3NZ6LkgbNFR+cx0W/S63skupheNUz0Ebwuim7QFVYUVkS3gqHCoKwF > >g3IKopgAM22l2NYNZ8TYzzdF/jJ33S9+/ljkk6uRqatBw4rI21czz0Fmxaur2T4xdhrIZHM/ > >V9P8l0V7B/6NRBLOerY3lao+UnW2SP40snYBU7PpsY3f3bJ5Uc7b0SGConE2eoo8timeE00R > >cVB8T12ZyU4zKx/P6wsuO1DA5sWCD++PGQ8UELy7t7iv8e+uvbuMFNQXHMW99yF7PJBjLON0 > >JMAZD8wn8XPyqba+4kIH2xwvaDFY2JZCG9tfWMK2xdDcPDHWWcJ2CmxnORutYwwV3Loz6hIY > >lCXpeRuUIrhxTR8oPHEXrhRd0qsHLGweZ2OD3zq2GpQl5ICZVczk2CZQCskBG6usIIdLlfUE > >pRQrOfY9UHKoyJHVZ4tKWnP0sSCnOIgnPtL3xhPY84ZeAXw1NH889rlGqEALNa39fRWt/QpD > >aire0JxXFJbULJ6rEcpLA6DJaR06wp0t6iNwb9E3F1usNrvDWVpWvmz5I6HKUF1wxzN+3h8I > >4HcJof87h5TM0ZOKnYHgjp119bxn567dgR3btgf5v9/6Ld7kdIhLnWbevTPwdG3dE2LsRa6c > >PdO8vJwlIebMgXJ8YUzKo7b9XjCWrYemnD3zjWXawFx84PbomnCtfZpG5kx0kFxelYxeIJfd > >SS2BwJzi/vrca++WcaVsAHtPk8tLkkfF8/L7hbb+Jp3tRKMmIcYORQ9fOBSNkEN4e+hQuy94 > >qA3bynIPRVkG27oNZORQ96Mk73wot6v0VIOm9dRHui5cN/bgh+Pm2MFFp3VEfh/t6W3ySo2x > >xafBK4fXfLzq8GoQY/hL7/Sn9eToGxfiuqNvXoizR399Yb38KVZbo+yDZW9cCN657M0LwTnL > >Dl8IFgzg7J8k8cWVXLVBeYBspCbWQ9bMsQKirCZBzjjgg8MXNp/WkMMkDoeZjLm9zwNaW0iv > >aFBHbW0j8YUVx+YT5S5Sg67nH7uPKHoyo89Vc9XG1N2YyjQJt+T0pZdIYzyxPt8or9EY5fuP > >PHK2KFBAh0dnBnw6QhahIt7pCYlfmSUvDhpfXKOjGitQI6f4eJCN+lXh2wqBGEv3q93y/c2T > >mgbuyPJ0D3ak88Bq3NuEMwuVGOVGnbGsUR8sLuTWVRpPVKOPW/Q57EV2OJEaKh5ue2tTziJj > >S6MuLxbS9dH5byd9Fd+prObWKSKzKWfLxsdqsjZCv+tLW19Brb95IeQ0yo+iD0264reLz9Vr > >2NPiec7Y35jPJg/ziZGDxckcY0sTqjZpQrmVaPBDsilnIybHKXWgHSRjblXGnGuWueNo7pQY > >Q6f3XzT2b8lnJxMjrxVPqs5mTM6pqNyARtvR6Hc31qD/saxZGtzvctFjWvG8ciUZ0hubm+4h > >QVbZRWgAu8rnBPPL7wneUTYSGkGhvrKRYG5XuT7IrBVjfdEhbVYfSE8F23ZRqUnNmHhINZEW > >SLfp05NglTvVLm6dMbVlfiY7+tSnhdknVS0/WsPJazk5rJM36FfioSIP4HFUPLDq4ObTnOrc > >XHQu72DZyKXhj7Qo3EfdUlV1xtYc88doQt7AFQ+FtRVKXRInHtTLDdSYpLyepDZQFgXyzge1 > >yrdJXDginC3CaklI4AH1BNrPLSViKmEs1QZzulOp4dfjo80DrHytmzDDr780NlTILUKHEgdf > >Gnlt0WY8D3ARgfzrGarbGyHG1jnmz1aK732Ua4ws4xvZlR9ek6+lHxrUh4Hik0GN5x9CH/Ql > >5PfbLmarR9fB1lNm+h5xERcp3XOiUY+9nA2j3lV6vAFaj8/I6ElWOx/ldK1YZlGOyxtsYrsZ > >wn5efDwwbwXVzBt8HsTBsuMNnHw8jlvgoHxKNaAjNwyvut1lJNp6nfGkNtV6fGyIvb6y9VTG > >IVyywhMN+gQtVktbh8xjtDhQleLTgftcK7uGXw/dJQ/If5JPf3vkl0GDPC6fkRv0UvzPYiyu > >WYXfTbhSuulp6eje7DK2PoADlP4eJ/Z7/WCQw5n9MgSl/Vnn6NwPMwdtrSs1B3GZs+7q0QBH > >62N2JmpA6QsifrUzz2sHJI4h2U9wPVeNr1oV+Em2Ck++M8n+sIGWQXb6PQcFUg0cHs3Y3ZU0 > >KJeTmTadQXk2KX+y+XT+LPMk/E/NYR0Jb9gb1qVI06N7w1yKhOmQqS8PqaND1iRnjYRtrMRV > >pEdbjqM9lx4t3ZCrDqdTS9uJJo042DInSpalK/Ccw5DS4u2vLwThSHnkeYEEc9vXY+IGNrZo > >o3maoyxD3y3Swg/L90eJ92zR2FuR6Pdol3xKvhiar6rjPiwm0bKsAlbtNy+0+Oa3rF/QsmZh > >y+Z7Bnz3RTQDvkLsVuuoeF4cRHPgPlv0UIQ0XyT1GjGGx95peYiOgs3tP42Q7ghJV/V6zDDx > >vbJ3g3wE2+4Jsp74sPxO8RDuo4wVao4W6r6bUzxRdq0+h/2cvb720amR1xJqjqtJoKOJTbMA > >S2b6gMT78toAV/6DRljKY2r0VrKFOd2v6ovfPndZjCVGDvURQsDqBqsDrD6wSmB1gtUDVhdY > >vWAXwS6A3QZ2O9hNYLeA3Qx2K5hEMAlgsoHJDiYTmCxgMoPJCnY32B1g94FdArsT7B6wu8Du > >BasIVgGsNrDawWoCqwWsZrBaQRDxowwEGwh2EEwgWEAwg4D23WBygMkHJglMTjB5wOQCkxcE > >NwgOEHwgSCA4QfCA4ALBC2Y3mB1g9oFZArMTzB4wu8DsBZsINgFsNrDZwWYCmwVsZrBZwSGC > >QwCHDRx2cJjAYQGHGRxWEN0gOkD0gSiB6ATRA6ILRC843OBwgMMHDgkcTnB4wOEChxdEEUQB > >RBuIdhBNIFpANINoBacITgGcNnDawWkCpwWcZnBaweYGmwNsPrBJYHOCzQM2F9i84HSD0wFO > >HzglcDrB6QGnC5xecIngEsBlA5cdXCZwWcBlBpcVJBEkASQbSHaQTCBZQDKDZAWXG1wOcPnA > >JYHLCS4PuFzg8oLXDV4HeH3glcDrBK8HvC7wekFyg+QAyQeSBJITJA9ILpBwPUUwC2C2gdkO > >ZhOYLWA2g9kKbhHcArht4LaD2wRuC7jN4LaCxw0eB3h84JHA4wSPBzwu8HjB7Qa3A9w+cEvg > >doLbA24XuL3gEcEjgMcGHjt4TOCxgMcMHit4RfAK4LWB1w5eE3gt4DWD1woWESwCWGxgsYPF > >BBYLWMxgsYJPBJ8APhv47OAzgc8CPjP4UN4NFgdYfGCRwOIEiwcsLrB4wecGnwN8PvBJ4HOC > >zwM+F/i85Et/qRT5On8FKwh5BV8H8WQEgq/bN/z9H1BLAwQUAAIACAActYcmNv60/wECAACg > >AwAACAAAAGhhc2gudHh0NZK7qp43EEX7A/87rBdQ0HU0KnUbUsQuQl7AgQMpbFzY74/nOyZq > >VAxLa29Jf79/+/7z/Y/Pf33izy8//uOfL/9+fX+9vd7wFSMxETOxECuxEYXYiUocxElcxE08 > >xEu0B3OEtmhKuzSjDdqmTdoJvdAjXeidnuiVnunt9ZYcSgXfkpA6KZEqKZNa6Iuu9Es3+qBv > >+qSf11t+TIUWaULrtESrtExr4ckb/w+bPrJ7CTeVx7RISrokIw3SJk3SCU8Z/d3ko97+aOim > >6lBeZCVfspEHeZMn+QQpSEQE6UhCKpIRN3kutKARFbSjCa1oRlsoi6KUSzHKoGzKpLhJHmih > >il7U0IFudKInlIKnL0LplESplExxk98pozAiQxidkRiVkRktyEIUuYghA9nIRNykD7QYyrgM > >YwzGZkzGCbMwI1OYnZmYlZmZbnIFVrCICdaxhFUsYy3MxVTmZRpzMDdzMt3kR3EWRzmXY5zB > >2ZzJOcEWptjFDBvYxibm0HquvOBvnIXcyYlcyZncwir4eAmrsxKrsjLL422H9mIr+7KNPdib > >PdknrMVS1mUZa7A2a7LcdB6o4OwWdmcndmVndgun4OMjnM5JnMrJHDddh2rBP0YVaqcmaqVm > >agu34OMr3M5N3MrNXIfsgRZVqZdq1EHd1Ek94S6uci/XuIO7uZPr8X4BUEsBAhQAFAACAAgA > >/LSHJnzitgvUCgAA9yoAAAoAAAAAAAAAAQAgALaBAAAAAFJFTU9URS5QQVNQSwECFAAUAAIA > >CAAiuYcmvVbFX84AAAAnAQAACgAAAAAAAAABACAAtoH8CgAAUmVhZG1lLnR4dFBLAQIUABQA > >AgAIAAa1hyY8txmf3xMAAPAgAAAKAAAAAAAAAAAAIAD/gfILAABSRU1PVEUuRVhFUEsBAhQA > >FAACAAgAHLWHJjb+tP8BAgAAoAMAAAgAAAAAAAAAAQAgALaB+R8AAGhhc2gudHh0UEsFBgAA > AAAEAAQA3gAAACAiAAAAAA== > > ----- > >SOLUTION > > Nothing yet. >gettings for all. >bye > > >Send FREE April Fool's Greetings to your friends! >http://www.whowhere.lycos.com/redirects/American_Greetings.rdct _________________________________________________________________________ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.

1 0

A cite: "Elementary Number Theory"
by Jim Choate 16 Apr '01

16 Apr '01

Hi, I've a cite for, Elementary Number Theory Underwood Dudley pp. 208 prob. 87 Unfortunately the only copy I can find is a 2nd ed. and the page numbers are off. If somebody who has this book could tell me what the chapter title is and a quote of the problem I'd appreciate it. I want to find out if it's still in the 2nd ed and if so what it's current identity is. Please respond directly, off list. Thanks. ____________________________________________________________________ The ultimate authority...resides in the people alone. James Madison The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

1 0

RE: Starium?
by Trei, Peter 16 Apr '01

16 Apr '01

Here it is.... http://www.L-3Com.com/cs-east/programs/infosec/privatel.htm 3DES, 1024 bit D-H, TEMPEST compliant. Handles both voice and data. > ---------- > From: Trei, Peter > Reply To: Trei, Peter > Sent: Monday, April 16, 2001 1:35 PM > To: Dr. Evil; 'Declan McCullagh' > Cc: cypherpunks(a)cyberpass.net > Subject: RE: Starium? > > At the RSA conference I saw a company selling Starium-equivalent > units, both for voice and data encryption. The voice only units were > about $1400 apiece. (frankly, at that price, you could plug a PC > with an A/D converter card between the handset and the base, and > roll your own). > > I'm still decompressing, and have not unpacked all my bumph, else > I'd have more specific data. > > Peter Trei > > > ---------- > > From: Declan McCullagh[SMTP:declan@well.com] > > Reply To: Declan McCullagh > > Sent: Sunday, April 15, 2001 1:46 PM > > To: Dr. Evil > > Cc: cypherpunks(a)cyberpass.net > > Subject: Re: Starium? > > > > I have a pair of their preproduction units they sent me in December. > > --Declan > > > > > > On Sun, Apr 15, 2001 at 02:01:10AM -0000, Dr. Evil wrote: > > > Does anyone know if Starium is ever going to release anything? I > > > noticed on their News section that they have engaged an M&A > > > specialist. That's probably not a good sign for them operating as a > > > stand-alone company. email to them bounces. > > >

1 0

Dempster-Shafer Theory
by Jim Choate 16 Apr '01

16 Apr '01

http://yoda.cis.temple.edu:8080/UGAIWWW/lectures/dempster.html -- ____________________________________________________________________ The ultimate authority...resides in the people alone. James Madison The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- --------------------------------------------------------------------

1 0

The Theory of the corporation
by brainteaser 16 Apr '01

16 Apr '01

Thats one thing I don't get about what (many) people post on this list. There is a lot of shit about the government did this and federal agents are doing that, but very little about what corporations do. Partly this is probably because of some sort of a "the market must be right" mentality, even though as I see it we are a long way from any sort of a free market (I see IP law as we have it as a hindrancxe to the free market). Anyway to my point, one pet hate a lot of people seem to have is surveillance cameras. The fact is surveillance cameras exist, and people see they serve a useful purpose. My issue with them is not that the government control them, but that the government don't control them, security firms do. The ideal would be if they were controlled openly at a level far below government, say each street employs their own camera monitor. But thats all irrelevant cos if anyone really has a reason to put up a secret camera they can, and they don't have to tell you about it. If I had a need personally for secure anonymity my threat model would be 1) whoever Im hiding from, 2) interested corporations, with government running a distant third. -------------------------------------- FREE ANONYMOUS EMAIL! Sign up now. http://www.subdimension.com/freemail

10 11

RE: A suggested musical tune
by Trei, Peter 16 Apr '01

16 Apr '01

"Won't get Fooled Again" by The Who. Most of us are familiar with the version on "Who's Next". However, it was originally written for Pete Townshend's "Lifehouse" project, a hugely ambitous and prescient work about escape from a dystopian society, only recently released. Also consider "Ever Breath You Take" by the Police. Peter Trei > ---------- > From: Jim Choate[SMTP:ravage@EINSTEIN.ssz.com] > Reply To: Jim Choate > Sent: Friday, April 06, 2001 8:02 PM > To: cypherpunks(a)EINSTEIN.ssz.com > Cc: The Club Inferno > Subject: CDR: A suggested musical tune > > > "Eve of Destruction" > > There are two 'classic' version. The first by the writer, Barry McGuirre . > The second by The Turtles (released in 1970 when I was 10 years old > learning to love my country and hate my government). > > Look at todays headlines and then listen to the song... > > The Armadillo Group ,::////;::-. James Choate >

1 0

Second Cryptuk Meeting (London, Wednesday 25th April 2001) (fwd)
by Jim Choate 16 Apr '01

16 Apr '01

____________________________________________________________________ The ultimate authority...resides in the people alone. James Madison The Armadillo Group ,::////;::-. James Choate Austin, Tx /:'///// ``::>/|/ ravage(a)ssz.com www.ssz.com .', |||| `/( e\ 512-451-7087 -====~~mm-'`-```-mm --'- -------------------------------------------------------------------- ---------- Forwarded message ---------- Date: Sat, 14 Apr 2001 22:04:21 +0100 From: Antonomasia <ant(a)notatla.demon.co.uk> To: cryptography(a)wasabisystems.com, cryptuk-announce(a)notatla.demon.co.uk Subject: Second Cryptuk Meeting (London, Wednesday 25th April 2001) Wed 25th April 2001, 7-9pm http://www.pubs.com/chesec4.htm I suggest we grab a table in the lowest level Cellar bar. These can not be reserved. Pete Chown on IPsec: Pervasive Encryption for the Internet? ----------------------------------------------------------- In the first part I will explain what IPsec is and how it is supposed to work. I will explain the three protocols which provide security, and explain the relationships with other technologies such as DNSsec. I will then explain how to set up FreeS/WAN under Linux. I will explain how to patch your kernel and how to make the FreeS/WAN patch co-exist with the international kernel patch. Finally I will explain how to configure and start FreeS/WAN so as to communicate securely with another machine. In the final part I will talk about issues with IPsec, such as interactions with firewalls, and how IPsec could be used to provide all-pervasive encryption on the Internet. I am hoping that this part of the talk will become more of an "open forum" where ideas can be put forward; there are real issues here and I don't claim to have all the answers. -- ############################################################## # Antonomasia ant notatla.demon.co.uk # # See http://www.notatla.demon.co.uk/ # ############################################################## --------------------------------------------------------------------- The Cryptography Mailing List Unsubscribe by sending "unsubscribe cryptography" to majordomo(a)wasabisystems.com

1 0

Para todos nós...
by info＠giganetstore.com 16 Apr '01

16 Apr '01

Se pretender visualizar esta informação numa página do seu browser em formato HTML, basta clicar aqui. <http://www.giganetstore.com/dynamic/mail/LivrosTecnicos.htm> Para todos nós... ----- ..que somos utilizadores destas máquinas a que apelidaram de computadores. Esta semana pensámos: No grande público Nos Profissionais Nos Estudantes E tudo isto em Português, desde as noções básicas de utilização do Microsoft Office até como programar em C++, passando mesmo pelo Linux, dedicado aos fans do "Open Software". ----- Eis algumas Sugestões: Microsoft Office 2000 <http://www.giganetstore.com/products/product.asp?channelId=3&CategoryId =28&subCategory=0&productId=8730> Para todos Nós <http://www.giganetstore.com/products/product.asp?channelId=3&CategoryId =28&subCategory=0&productId=8730> Sérgio Sousa 4.950 ($) 24,69 (€) Poupe 10% Linux - Curso Completo <http://www.giganetstore.com/products/product.asp?channelId=3&CategoryId =28&subCategory=0&productId=10848> 2ª Edição Actualizada Fernado Pereira 6.930 ($) 34,57 (€) Poupe 10% Flash 5 - Conceitos e Prática <http://www.giganetstore.com/products/product.asp?channelId=3&CategoryId =28&subCategory=0&productId=10418> Pedro Cid Ferreira 5.175 ($) 25,81 (€) Poupe 10% XML - A nova Linguagem na WEB <http://www.giganetstore.com/products/product.asp?channelId=0&CategoryId =0&subCategory=0&ProductId=11020> Pedro Coelho 3.960 ($) 19,75 (€) Poupe 10% Programação em C++ <http://www.giganetstore.com/products/product.asp?channelId=3&CategoryId =28&subCategory=0&productId=11013> Algoritmos Estruturas dados <http://www.giganetstore.com/products/product.asp?channelId=3&CategoryId =28&subCategory=0&productId=11013> Pimenta Rodrigues 5.940 ($) 29,63 (€) Poupe 10% ver mais produtos » <http://www.giganetstore.com/index_promocao.asp> ----- Para retirar o seu email desta mailing list deverá entrar no nosso site http://www.giganetstore.com <http://www.giganetstore.com/> , ir à edição do seu registo e retirar a opção de receber informação acerca das nossas promoções e novos serviços.

1 0

pro-privacy legislation or intel reform? was Re: chaffing and winnowing
by Faustine 16 Apr '01

16 Apr '01

First: thanks for the links, david molnar! Great stuff. Quoting Bill Stewart <bill.stewart(a)pobox.com>: > > At 07:40 PM 04/15/2001 -0400, Faustine wrote: > >Does anyone know of any serious work being done on developing the > concepts of > >winnowing and chaffing, as outlined in Ronald L. Rivest's 1998 > >paper 'Confidentiality without Encryption'? > > Other than the initial flurry of activity around the announcement, > there isn't much in chaffing and winnowing that's > really useful in most real-world environments > that would encourage development of new variations. Too bad, it certainly seems like an interesting approach. > The fundamental point was that if *any* kind of digital signature > system is permitted, it can be used to implement encryption, > so bans on encryption technology are inherently bogus. > That doesn't mean that various governments won't try it, > or won't make laws requiring users of digital signature systems > to give up their signature keys when ordered by a court > or sometimes by police, but it doesn't really affect the > forced disclosure of encryption keys problem. Yep, I suppose so. Though it may be true that there would be greater public outcry over handing over authentication keys used for encryption, the argument rests on the idea that governments actually take anything the public says into consideration. And aside from the national policy question, there's always the spectre of black bag operations and the like. Unfortunately there are plenty of reasons to think this is the way things are headed: it stands to reason that everything we know about Echelon and Carnivore is just the tip of the iceberg, STOA reports notwithstanding. Do you really think your average Joe Schmoe has the proverbial snowball's chance of keeping his private keys private, all things considered? It sure doesn't look like it's shaping up to be a winning proposition, does it. So maybe rather than making pro-privacy legislation a priority, calling for oversight, accountability, and reform of the intelligence community ought to come first. That is, unless you see private companies and data merchants as a bigger threat to individual privacy than the various federal agencies. As a libertarian the idea galls me-- but practically speaking, I'm not so sure anymore. And what does it say about free market capitalism itself, when the government has redefined 'national interest' to include economic espionage on behalf of individual corporations? Any thoughts on what Hayek or Mises might have had to say about that? Troubling questions, no easy answers. ~Faustine. **** 'We live in a century in which obscurity protects better than the law--and reassures more than innocence can.' Antoine Rivarol (1753-1801).

2 1

New Flashlight Sees Through Doors As Well As Windows
by Jim Choate 16 Apr '01

16 Apr '01

http://unisci.com/stories/20012/0416015.htm -- Adapt, Adopt, Improvise! - Anonymous Venimus, Vidimus, Delevimus - 1st Linux Motto, Anonymous Tivoli Certification Group, OSCT James Choate jchoate(a)tivoli.com Senior Engineer 512-436-1062

1 0