- cypherpunks-legacy - lists.cpunks.org

Re: Viacrypt PGP source code unavailable
by peter honeyman 27 Aug '93

27 Aug '93

> Yet still some people pay for software because > they feel better using a legal version. People who feel this way would > perhaps also prefer a legal version of PGP. i remind you (all) that the courts have long recognized an exemption from patent infringement liability for research and experimental use. this exemption makes my use of pgp legal, maybe yours, too peter

1 0

Matrix extensions of the rsa algorithm.
by Timothy Newsham 27 Aug '93

27 Aug '93

I have posted this before and never saw any reply. The following sounded appealing to me because it gives public key features with private key cryptosystem speeds. Matrix Extensions of the RSA Algorithm Chih-Chwen Chuang and James George Dunham CRYPTO '90 Abstract A new matrix extension of the RSA algorithm is proposed which is based on the Cayley-Hamilton theorem and a one-way function. The security of this algorithm rests on that of the RSA algorithm and the one-way function. The computational efficiency of the new algorithm depends on the dimension of the marix. The most efficient implementation is the 2x2 case in which both the encryption and decryption use a single modulo arithmetic multiplication and single evaluation of the one-way function. later in the paper.. 'Under a chosen plaintext attack on the key, the security of the new algorithm is equivalent to that of the RSA algorithm. Under a known plaintext attack on the message, the security of the system rests upon that of the one-way function.' '..theyse public key cryptosystems hvae the potential of a fast implementation.' Has anyone looked into this paper? Has anyone implemented the cryptosystem explained in it?

1 0

Re: Commercial PGP: Verifying Trustworthiness
by peter honeyman 27 Aug '93

27 Aug '93

> This means that I am trusting the "pseudo-random" stuff not to be > some secrets that PGP has read from my disk. trust? you could read the code, starting at about line 550 of crypto.c. of course, you have to trust your eyes, your editor (if you use one), and your operating system not to deceive you. (i think i've carried this too far.) > The only benefit > that I see to the pseudo-random stuff is to send the same message > to several people without revealing the fact that the messages are > the same except to those that can decode the messages. that is a big win, in my view, but the random prefix also also helps defeat chosen plaintext attacks, does it not? peter

1 0

Re: What, Me Worry?
by peb＠PROCASE.COM 27 Aug '93

27 Aug '93

The WSJ article about GPS has a familiar cypherpunk ring to it...the commercial GPS signal is weakened (millitary 10ft accuracy signal is encrypted), the "enemies" are using it for missile guidance anyway (better than gyroscopes), and the hegemony of the US is wanning as perfectly predicted in The Great Reckoning (James Davidson and Rees-Mogg): defensive technology is improving over destructive technology and information technology eventually leaks out. Paul E. Baclace peb(a)procase.com

2 1

Another "fan"
by ferguson＠icm1.icp.net 27 Aug '93

27 Aug '93

On Fri, 27 Aug 93 13:25:39 -0500, Anonymous <nowhere(a)bsu-cs.bsu.edu> wrote - > Being new to this list, I've got a ways to go before I understand > everything I'm reading. But one thing I'd like to know today, is > JUST WHO IS DAVID STERNLIGHT? I've seen his name mentioned here > for the first time, and many times since. <chuckle> You must not follow the Usenet nesgoups sci.crypt, alt.privacy, alt.privacy.clipper, comp.eff.org.talk (etc, etc, ad nauseam) which Sternlight frequents. He even has a news.group named for him (by his detractors), alt.fan.david.sternlight. ,-) Paul

1 0

Whois Sternlight?
by ferguson＠fiber.sprintlink.net 27 Aug '93

27 Aug '93

On Fri, 27 Aug 93 13:25:39 -0500, Anonymous <nowhere(a)bsu-cs.bsu.edu> wrote - > Being new to this list, I've got a ways to go before I understand > everything I'm reading. But one thing I'd like to know today, is > JUST WHO IS DAVID STERNLIGHT? I've seen his name mentioned here > for the first time, and many times since. <chuckle> You must not follow the Usenet nesgoups sci.crypt, alt.privacy, alt.privacy.clipper, comp.eff.org.talk (etc, etc, ad nauseam) which Sternlight frequents. He even has a news.group named for him (by his detractors), alt.fan.david.sternlight. ,-) ---------------------------- ----------------------------- Paul Ferguson Minbank Consulting Group ferguson(a)fiber.sprintlink.net Fairfax, Virginia USA ferguson(a)icm1.icp.net

1 0

Re: Who is David Sternlight?
by collins＠newton.apple.com 27 Aug '93

27 Aug '93

>[...] WHO IS DAVID STERNLIGHT? [...] David Sternlight is a particulary active, if not universally admired, poster to sci.crypt et al (including a special fan club news group). The volume of his posts and their position (often antithetical to positions taken by cypherpunks) has led some to speculate that he is not an individual at all, but a group with an agenda. Some people delight in reading his posts, either because they approve, or for the same reason I like to read 'Ask Marilyn' in Parade: because they like to get riled up. Some people just add him to their 'kill' files. There has been debate over adding software moderation to sci.crypt that automatically redirects David Sternlight posts to a side group. In any case, DS (as he is sometimes referred to) is a prominent political feature of the privacy/cryptography related news groups. If you really want to know who he is: join sci.crypt; read some of his posts; and then ask him in e-mail. If you do send him e-mail -- make sure that if you use an anonymous remailer of the variety that allows him to respond to you, unlike the one you used to post this request. Hope this helps, Scott Collins | "Few people realize what tremendous power there | is in one of these things." -- Willy Wonka ......................|................................................ BUSINESS. voice:408.862.0540 fax:974.6094 collins(a)newton.apple.com Apple Computer, Inc. 1 Infinite Loop, MS 301-2C Cupertino, CA 95014 ....................................................................... PERSONAL. voice/fax:408.257.1746 1024/669687 catalyst(a)netcom.com

1 0

ViaCrypt PGP and source code
by technopagan priest 27 Aug '93

27 Aug '93

I am sure that businesses will buy ViaCrypt PGP, even for $100. PGP has proven itself to be a useful and safe encryption package, and also can do digital signature, a feature not seen in similarly priced PC security packages. I think to not release the source code with ViaCrypt PGP is a serious mistake. First, I cannot see how releasing the RSA source can be harmful to ViaCrypt. People can freely examine PD PGP, I can't see how any trade secrets are going to be revealed by showing the RSA source. Perhaps it is slightly faster, but information theoretic limits show that RSA quickly becomes lengthy to encrypt, and I doubt PKP nor ViaCrypt have made any significant progress towards making it faster compared with PD PGP. I had to laugh when people suggested the "Clipper-Like" review. Why is it good for ViaCrypt, but not good for the government? Let's face it...if ViaCrypt is serious about security, they will release all source code for examination, and will digitally sign all programs and have those signatures tracable to a key on a ViaCrypt owned dial-up BBS. I understand that there is a contractual problem with releasing the RSA source. Perhaps the contract should be re-negotiated. I will bet ViaCrypt PGP will rapidly become a best-seller if implemented properly. There is plenty of money to be made if everything is kept on the cryptographic "up and up." -Thomas

2 1

Phil Zimmerman Press Briefing?
by edgar＠spectrx.Saigon.COM 27 Aug '93

27 Aug '93

To: Bay Area Extropians <exi-bay(a)gnu.ai.mit.edu> Cypherpunks <cypherpunks(a)toad.com> I just spoke to Phil Zimmerman on the phone (8/27 about 10am). He told me he plans to attend the Extropganza tomorrow, and to use the occasion to hold some kind of press briefing of his just- announce product "ViaCrypt", a commercial version of PGP. He asked me to send out this E-mail request for all of you who know any press people to invite them to attend. Unfortunately, Phil was unable to tell me exactly when he expects to arrive. -- edgar(a)spectrx.saigon.com (Edgar W. Swank) SPECTROX SYSTEMS +1.408.252.1005 Cupertino, Ca

1 0

Re: Commercial PGP; trapdoor rumors
by nobody＠alumni.cco.caltech.edu 27 Aug '93

27 Aug '93

> In April, I talked to Jim Bidzos @ PKP, and he agreed to allow his > licensed RSA code to be built into a PGP compatible freeware program. have you considered the possibility that bidzos is a FUCKING LIAR? shaen bernhardt put it well many months ago: Don't sell out cypherpunks, RSA Inc. will stab you in the back as quickly as anyone else. here's another quote i like to review when i'm feeling too calm. it comes from a tcmay description of a cpunx mtg in sf: I think I mentioned somewhere that I put Bidzos on the spot with what I called "The 64-bit Question": Are you going to cut a deal and sell us out? [regarding clipper/capstone] Bidzos was very sober when he answered this, and said, roughly: "If you mean will I conspire with the government to deny strong crypto to users, no. But if Clipper and Capstone are destined for deployment and they come to us and offer royalties, what choice will we have? We have a duty to our shareholders." And as he was leaving for the day, he leaned in the door to our meeting and said, as if to reiterate the point, "Tim, I won't sell you out." let me translate bidzos' reply: I WILL SELL YOU OUT. so go ahead, rely on bidzos' word. but take my advice: count your fingers after shaking hands.

1 0