- cypherpunks-legacy - lists.cpunks.org

re: Double encryption
by Not MY universe! 17-May-1993 0927 17 May '93

17 May '93

Skye asks (upon brute-force attacks): >If so, how about double-encrypting a file with two completely different and >very complex programs? Then, even if it did get the first, it couldn't tell >because the resulting data would still be largely gobbledegook. Maybe. The question is the same as the mathematical question "does the encryption algorithm form a group?". "Groupness" refers to whether two applications of an encryption can be collapsed (by some arbitrary key) into a single application of the same encryption. [or, for two differing encryptions, a single application of some algorithm either less complex than the sum of the two original encryptions, or using a key shorter than the two original keys...] For example, consider Caesar rotations. Here, the key is just a number from 0 to 26 and rot13 (rotation by 13, a->n, being the USENET standard for encrypting dirty jokes). We can "collapse" any pair of Caesar rotations into a new single rotation; it's just rotate for the sum of the two keys. So, Caesar rotations form a group, and it does no good to encrypt twice, because brute force needs to solve only one problem, not two, as combinatorics would suggest. But what about something more... interesting? Say, a Caesar rotation followed by a N-skipped version of the alphabet (for N=1, this is the identity alphabet, for N=2, the alphabet is "a,c,e,g,i,k,m,o,q,s,u,w, y,b,d,f,h,j,l,n,p,r,t,v,x,z", for N=3, it's "a,d,g,...".) Now, there's no possibility of collapsing the two encryptions into one operation; no Caesar rotation can give any of the N-skip alphabets (except the trivial case of N=0), and most pairings of Caesar rotations followed by skipping alphabets cannot be faked by either a Caesar rotation or a skip-alphabet alone. Thus, we can say that Caesar followed by N-skip "does not form a group" and so is as hard to crack by brute force as combinatorics suggest. Back in the early days of DES, it was not known if DES encryption followed by another DES encryption formed a group. That's why triple DES encryption was designed to use an intermediate DEcryption (not encryption) stage, so that even if double-DES-encryption formed a group, encryption/decryption/encryption would not (since it's possible to DES-encrypt any possible message stream, therefore some set of cyphertext bits corresponds to some possible plaintext, and that plaintext can be reencoded) and so it would not be possible to collapse the first two operations into a single DES encode, collapse the <first+second> and the third into yet another single encode and thereby save much time for the brute force attack. However, it's now been proven that DES encode followed by DES encode does NOT form a group, and so it doesn't really matter any more. >Probably a stupid question, but I was curious. No, it's an *excellent* question. -Bill

2 1

Double encryption
by poier＠sfu.ca 17 May '93

17 May '93

Hi. Being the security freak that I am, even with military grade encryption (for whatever THATS worth) I feel a little insecure, as most routines are, as far as I can tell, still succeptable to at the least brute force attacks. I was wondering: how to cracking programs determine that they have successfully decrypted a file? Does it simply look for english text (or file headers etc)? If so, how about double-encrypting a file with two completely different and very complex programs? Then, even if it did get the first, it couldn't tell because the resulting data would still be largely gobbledegook. Probably a stupid question, but I was curious. Skye -- "Thppt bwach oop ack" - Bill the Cat | -----====> Skye Merlin Poier <====----- PGP Public Key available on request | Undergrad in CMPT/MATH (Virtual Reality) !!!!!!! FIGHT CLIPPER / LEEF !!!!!!! | email: poier(a)sfu.ca

1 0

Washington Post story
by Mike Godwin 17 May '93

17 May '93

Look for a major story in the Washington Post about Clipper, Digital Telephony, and related matters. It will be coming any day now and should get major play. The reporters are John Schwartz and John Mintz. -Mike

1 0

Diffie Statement to Boucher's Committee
by whitfield.diffie＠Eng.Sun.COM 16 May '93

16 May '93

The Impact of a Secret Cryptographic Standard on Encryption, Privacy, Law Enforcement and Technology Whitfield Diffie Sun Microsystems 11 May 1993 I'd like to begin by expressing my thanks to Congressman Boucher, the other members of the committee, and the committee staff for giving us the opportunity to appear before the committee and express our views. On Friday, the 16th of April, a sweeping new proposal for both the promotion and control of cryptography was made public on the front page of the New York Times and in press releases from the White House and other organizations. This proposal was to adopt a new cryptographic system as a federal standard, but at the same time to keep the system's functioning secret. The standard would call for the use of a tamper resistant chip, called Clipper, and embody a `back door' that will allow the government to decrypt the traffic for law enforcement and national security purposes. So far, available information about the chip is minimal and to some extent contradictory, but the essence appears to be this: When a Clipper chip prepares to encrypt a message, it generates a short preliminary signal rather candidly entitled the Law Enforcement Exploitation Field. Before another Clipper chip will decrypt the message, this signal must be fed into it. The Law Enforcement Exploitation Field or LEEF is tied to the key in use and the two must match for decryption to be successful. The LEEF in turn, when decrypted by a government held key that is unique to the chip, will reveal the key used to encrypt the message. The effect is very much like that of the little keyhole in the back of the combination locks used on the lockers of school children. The children open the locks with the combinations, which is supposed to keep the other children out, but the teachers can always look in the lockers by using the key. In the month that has elapsed since the announcement, we have studied the Clipper chip proposal as carefully as the available information permits. We conclude that such a proposal is at best premature and at worst will have a damaging effect on both business security and civil rights without making any improvement in law enforcement. To give you some idea of the importance of the issues this raises, I'd like to suggest that you think about what are the most essential security mechanisms in your daily life and work. I believe you will realize that the most important things any of you ever do by way of security have nothing to do with guards, fences, badges, or safes. Far and away the most important element of your security is that you recognize your family, your friends, and your colleagues. Probably second to that is that you sign your signature, which provides the people to whom you give letters, checks, or documents, with a way of proving to third parties that you have said or promised something. Finally you engage in private conversations, saying things to your loved ones, your friends, or your staff that you do not wish to be overheard by anyone else. These three mechanisms lean heavily on the physical: face to face contact between people or the exchange of written messages. At this moment in history, however, we are transferring our medium of social interaction from the physical to the electronic at a pace limited only by the development of our technology. Many of us spend half the day on the telephone talking to people we may visit in person at most a few times a year and the other half exchanging electronic mail with people we never meet in person. Communication security has traditionally been seen as an arcane security technology of real concern only to the military and perhaps the banks and oil companies. Viewed in light of the observations above, however, it is revealed as nothing less than the transplantation of fundamental social mechanisms from the world of face to face meetings and pen and ink communication into a world of electronic mail, video conferences, electronic funds transfers, electronic data interchange, and, in the not too distant future, digital money and electronic voting. No right of private conversation was enumerated in the constitution. I don't suppose it occurred to anyone at the time that it could be prevented. Now, however, we are on the verge of a world in which electronic communication is both so good and so inexpensive that intimate business and personal relationships will flourish between parties who can at most occasionally afford the luxury of traveling to visit each other. If we do not accept the right of these people to protect the privacy of their communication, we take a long step in the direction of a world in which privacy will belong only to the rich. The import of this is clear: The decisions we make about communication security today will determine the kind of society we live in tomorrow. The objective of the administration's proposal can be simply stated: They want to provide a high level of security to their friends, while being sure that the equipment cannot be used to prevent them from spying on their enemies. Within a command society like the military, a mechanism of this sort that allows soldiers' communications to be protected from the enemy, but not necessarily from the Inspector General, is an entirely natural objective. Its imposition on a free society, however, is quite another matter. Let us begin by examining the monitoring requirement and ask both whether it is essential to future law enforcement and what measures would be required to make it work as planned. Eavesdropping, as its name reminds us, is not a new phenomenon. But in spite of the fact that police and spies have been doing it for a long time, it has acquired a whole new dimension since the invention of the telegraph. Prior to electronic communication, it was a hit or miss affair. Postal services as we know them today are a fairly new phenomenon and messages were carried by a variety of couriers, travelers, and merchants. Sensitive messages in particular, did not necessarily go by standardized channels. Paul Revere, who is generally remembered for only one short ride, was the American Revolution's courier, traveling routinely from Boston to Philadelphia with his saddle bags full of political broadsides. Even when a letter was intercepted, opened, and read, there was no guarantee, despite some people's great skill with flaps and seals, that the victim would not notice the intrusion. The development of the telephone, telegraph, and radio have given the spies a systematic way of intercepting messages. The telephone provides a means of communication so effective and convenient that even people who are aware of the danger routinely put aside their caution and use it to convey sensitive information. Digital switching has helped eavesdroppers immensely in automating their activities and made it possible for them to do their listening a long way from the target with negligible chance of detection. Police work was not born with the invention of wiretapping and at present the significance of wiretaps as an investigative tool is quite limited. Even if their phone calls were perfectly secure, criminals would still be vulnerable to bugs in their offices, body wires on agents, betrayal by co-conspirators who saw a brighter future in cooperating with the police, and ordinary forensic inquiry. Moreover, cryptography, even without intentional back doors, will no more guarantee that a criminal's communications are secure than the Enigma guaranteed that German communications were secure in World War II. Traditionally, the richest source of success in communications intelligence is the ubiquity of busts: failures to use the equipment correctly. Even if the best cryptographic equipment we know how to build is available to them, criminal communications will only be secure to the degree that the criminals energetically pursue that goal. The question thus becomes, ``If criminals energetically pursue secure communications, will a government standard with a built in inspection port, stop them. It goes without saying that unless unapproved cryptography is outlawed, and probably even if it is, users bent on not having their communications read by the state will implement their own encryption. If this requires them to forgo a broad variety of approved products, it will be an expensive route taken only by the dedicated, but this sacrifice does not appear to be necessary. The law enforcement function of the Clipper system, as it has been described, is not difficult to bypass. Users who have faith in the secret Skipjack algorithm and merely want to protect themselves from compromise via the Law Enforcement Exploitation Field, need only encrypt that one item at the start of transmission. In many systems, this would require very small changes to supporting programs already present. This makes it likely that if Clipper chips become as freely available as has been suggested, many products will employ them in ways that defeat a major objective of the plan. What then is the alternative? In order to guarantee that the government can always read Clipper traffic when it feels the need, the construction of equipment will have to be carefully controlled to prevent non-conforming implementations. A major incentive that has been cited for industry to implement products using the new standard is that these will be required for communication with the government. If this strategy is successful, it is a club that few manufacturers will be able to resist. The program therefore threatens to bring communications manufacturers under an all encompassing regulatory regime. It is noteworthy that such a regime already exists to govern the manufacture of equipment designed to protect `unclassified but sensitive' government information, the application for which Clipper is to be mandated. The program, called the Type II Commercial COMSEC Endorsement Program, requires facility clearances, memoranda of agreement with NSA, and access to secret `Functional Security Requirements Specifications.' Under this program member companies submit designs to NSA and refine them in an iterative process before they are approved for manufacture. The rationale for this onerous procedure has always been, and with much justification, that even though these manufacturers build equipment around approved tamper resistant modules analogous to the Clipper chip, the equipment must be carefully vetted to assure that it provides adequate security. One requirement that would likely be imposed on conforming Clipper applications is that they offer no alternative or additional encryption mechanisms. Beyond the damaging effects that such regulation would have on innovation in the communications and computer industries, we must also consider the fact that the public cryptographic community has been the principal source of innovation in cryptography. Despite NSA's undocumented claim to have discovered public key cryptography, evidence suggests that, although they may have been aware of the mathematics, they entirely failed to understand the significance. The fact that public key is now widely used in government as well as commercial cryptographic equipment is a consequence of the public community being there to show the way. Farsightedness continues to characterize public research in cryptography, with steady progress toward acceptable schemes for digital money, electronic voting, distributed contract negotiation, and other elements of the computer mediated infrastructure of the future. Even in the absence of a draconian regulatory framework, the effect of a secret standard, available only in a tamper resistant chip, will be a profound increase in the prices of many computing devices. Cryptography is often embodied in microcode, mingled on chips with other functions, or implemented in dedicated, but standard, microprocessors at a tiny fraction of the tens of dollars per chip that Clipper is predicted to cost. What will be the effect of giving one or a small number of companies a monopoly on tamper resistant parts? Will there come a time, as occurred with DES, when NSA wants the standard changed even though industry still finds it adequate for many applications? If that occurs will industry have any recourse but to do what it is told? And who will pay for the conversion? One of the little noticed aspects of this proposal is the arrival of tamper resistant chips in the commercial arena. Is this tamper resistant part merely the precursor to many? Will the open competition to improve semiconductor computing that has characterized the past twenty-years give way to an era of trade secrecy? Is it perhaps tamper resistance technology rather than cryptography that should be regulated? Recent years have seen a succession of technological developments that diminish the privacy available to the individual. Cameras watch us in the stores, x-ray machines search us at the airport, magnetometers look to see that we are not stealing from the merchants, and databases record our actions and transactions. Among the gems of this invasion is the British Rafter technology that enables observers to determine what station a radio or TV is receiving. Except for the continuing but ineffectual controversy surrounding databases, these technologies flourish without so much as talk of regulation. Cryptography is perhaps alone in its promise to give us more privacy rather than less, but here we are told that we should forgo this technical benefit and accept a solution in which the government will retain the power to intercept our ever more valuable and intimate communications and will allow that power to be limited only by policy. In discussion of the FBI's Digital Telephony Proposal --- which would have required communication providers, at great expense to themselves, to build eavesdropping into their switches --- it was continually emphasized that wiretaps were an exceptional investigative measure only authorized when other measures had failed. Absent was any sense that were the country to make the proposed quarter billion dollar inventment in intercept equipment, courts could hardly fail to accept the police argument that a wiretap would save the people thousands of dollars over other options. As Don Cotter, at one time director of Sandia National Laboratories, said in respect to military strategy: ``Hardware makes policy.'' Law, technology, and economics are three central elements of society that must all be kept in harmony if freedom is to be secure. An essential element of that freedom is the right to privacy, a right that cannot be expected to stand against unremitting technological attack. Where technology has the capacity to support individual rights, we must enlist that support rather than rejecting it on the grounds that rights can be abused by criminals. If we put the desires of the police ahead of the rights of the citizens often enough, we will shortly find that we are living in police state. We must instead assure that the rights recognized by law are supported rather than undermined by technology. At NSA they believe in something they call `security in depth.' Their most valuable secret may lie encrypted on a tamper resistant chip, inside a safe, within a locked office, in a guarded building, surrounded by barbed wire, on a military base. I submit to you that the most valuable secret in the world is the secret of democracy; that technology and policy should go hand in hand in guarding that secret; that it must be protected by security in depth. Recommendations There is a crying need for improved security in American communication and computing equipment and the Administration is largely correct when it blames the problem on a lack of standards. One essential standard that is missing is a more secure conventional algorithm to replace DES, an area of cryptography in which NSA's expertise is probably second to none. I urge the committee to take what is good in the Administration's proposal and reject what is bad. \begdis o The Skipjack algorithm and every other aspect of this proposal should be made public, not only to expose them to public scrutiny but to guarantee that once made available as standards they will not be prematurely withdrawn. Configuration control techniques pioneered by the public community can be used to verify that some pieces of equipment conform to government standards stricter than the commercial where that is appropriate. o I likewise urge the committee to recognize that the right to private conversation must not be sacrificed as we move into a telecommunicated world and reject the Law Enforcement Exploitation Function and the draconian regulation that would necessarily come with it. o I further urge the committee to press the Administration to accept the need for a sound international security technology appropriate to the increasingly international character of the world's economy.

1 0

List
by x62727g2＠usma8.USMA.EDU 16 May '93

16 May '93

I think I may have somehow gotten wiped off the mailing list. I haven't received in cypherpunk mail in 3 days. Anthony J. Gatlin |-------------------------------------| Cadet Private, Co. G-2 |PGP Public Key available on request. | United States Military Academy |-------------------------------------|

1 0

No Subject
by nobody＠alumni.cco.caltech.edu 16 May '93

16 May '93

This is the second of two documents I received anonymously. Maybe they're real, maybe they're forgeries. Decide for yourself. >Here are exerpts of the .......... of Mykotronx, > >the Torrance Based Big-Brother outfit that is going > >to make the Clinton Clipper wiretap chip. I have > >left off their chart of accounts numbers, since you > >don't care about that. ......... > >Period: 01/01/93 to 04/30/93 (first 4 months of 1993) > > > >Acct Descr Beg Bal Debits Credits > > > >==1000 series== > >Shearson Lehman 286,511 2,620,096 2,670,822 > >Paine Webber 95,602 868 0 > >Dean Whitter 55,391 484 0 > >Petty Cash 3,000 0 0 > >Union bank payroll act 13,408 900,000 816,443 > >Accts rcvbl -customer 1,185,829 1,981,356 2,562,064 > >Accts rcvbl - eployees 7,125 48,450 55,575 > >Franchise tx rcvbl 2,165 0 0 > >Unbilled costs&fees 567,792 533,347 0 > >Raw inventory 172,252 0 76,064 > >Prepaid taxes 1,116 0 0 > >Prepaid sales tax 688 0 688 > >Equp/mach/furn 383,038 20,695 0 > >Accum depreciation 234,425 0 23,000 > >Deposits 9,272 0 0 > > > >==2000 series== > >Accts Payable 482,895CR 1,869,477 1,684,555 > >Sales tax payable 147CR 176 0 > >Sales tax paid 0 0 0 > >FIT withheld 0 10,854 135,741 > >FICA withheld 0 0 56,622 > >CA state IT withh 0 0 36,163 > >CA state disability 0 0 8,730 > >SUI pybl employer 0 0 5,788 > >FUTA payable 0 0 2,007 > >FICA employer 0 0 56,621 > >Pd Payroll txs withh 0 290,820 0 > >401K withheld 0 0 42,712 > >Accrued payroll 25,637CR 343,682 318,045 > >Dental withheld 0 0 674 > >Dental plan pd 0 674 0 > >Withh 401K pd 0 42,712 0 > >Accrued bonuses 214,040 341,240 127,200 > >(holy shit - I wish I worked for a place that paid bonuses like that!) > >Accrued Vacation 44,252 0 0 > >Excess billings 139,216 154,706 55,036 > >Gross payroll 0 751,859 0 > >Gross payroll distrd 0 2,552 754,412 > >Lease obligations 4,911CR 0 0 > > > >==3000 series== > >Common Stock 169,320 0 61,435 > >Capital disbursement 916,675 222,230 0 > >Retd Earnings, begng 2,385,020CR 0 0 > > > >==4000 series== > >Sales, returns&allowc 0 6,014 2,577,323 > >Interest income 0 0 1,353 > >Int income tax free 0 0 2,490 > > > > > >==5000 series== > >Consultants 0 47,395 47,395 > >Subcontracts 0 932,210 110,419 > >Other direct costs 0 62,265 5,454 > >Printing/repro costs 0 542 0 > >Equipment rental/leasg 0 1,537 1,537 > >Maint, repairs 0 1,761 0 > >Delivery 0 3,217 0 > >Postage 0 960 0 > >Materials/parts 0 186,252 22,423 > >Telephone 0 93 0 > >Travel 0 10,437 0 > >Inv Cost of Mfg Prod 0 76,064 0 > >Direct labor-Engnrg 0 240,341 54,172 > >Direct labor-Technician 0 129,839 37,459 > >Direct labor-Adminst 0 47,542 10,081 > > > > > >==6000 series== > >Indirect labor 0 60,319 0 > >Holidays 0 32,867 27,331 > >Sick leave 0 3,276 0 > >Vacation 0 38,096 25,976 > >Retroactive pay 0 4,400 0 > >Job advertisments 0 655 0 > >Grp Med Ins non sharhl 0 25,522 1,818 > >Mykotronx pd payrl txs 0 64,417 0 > >Workers comp 0 9,554 1,418 > >Interest pd 0 0 0 > >Consultants 0 2,013 0 > >ADP Acctg 0 1,493 0 > >Real World Acct Suppt 0 1,485 0 > >Bank charges 0 155 0 > >Blueprints/repro 0 390 0 > >Proposals 0 2,817 0 > >Copier expense 0 514 0 > >Depreciation - elec eq 0 23,000 0 > >Dues & memberships 0 749 0 > >Education & Training 0 2,850 0 > >Employee relations 0 4,531 0 > >Business expense 0 7,431 0 > >Equip rental/lsng 0 4,458 0 > >Computer software 0 2,114 0 > >Insurance 0 9,061 1,380 > >Janitorial 0 20 0 > >Licenses & Permits 0 175 0 > >Maint, repairs 0 2,096 0 > >Delivery 0 995 13 > >Postage 0 942 0 > >Amort organiz expense 0 0 0 > >Taxes - franchise 0 2,763 0 > >Real & Pers prop tax 0 0 0 > >Rent 0 54,080 0 > >Subscriptions/books 0 325 0 > >Office/lab supplies 0 14,183 446 > >Telephone 0 7,961 36 > >Travel 0 10,296 1,303 > >Utilities 0 5,833 0 > >LTD Ins, non sharehld 0 2,877 594 > >401K Mykotronx contrib 0 17,411 0 > > > > > >==7000 series== > >Special Bonus 0 132,200 123,200 > >(Double holy shit!) > >G&A Labor 0 103,4520 0 > >Legal Services 0 5,895 0 > >Board of Dir Expnse 0 1,078 0 > >Financial Svc 0 7,505 0 > > > >Totals 0 12,555,101 12,555,101 > > > > > > > >Other little items: > > > >Locks at Mykotronx installed and maintained by Torrance Lock and Key, > >2421 Torrance Bl. Torrance, CA 90501 (310) 320-8840 For some > >reason, Mykotronx is over 90 days late paying a lousy $50 invoice. > > > >Mykotronx has a Mossler safe. It cost $1,693 when they bought it > >11/27/90. They have never changed the combination. > > > >Outstanding VLSI purchase orders: > >VLSI Tech (Capstone) $212,000 > >AT&T (Myk-78) $71,200 > >Motorola (Myk-77) $76,200 > >AT&T (Misc) $100,000 > >Compass (Software) $159,400 > >VLSI Tech (Myk-78) $66,200 > >Litronics (PCMCIA Crypto) $225,000 > >VLSI Tech (Expoteniator) $163,000 > >VLSI Tech (Capstone TFQP) $10,000 > >VLSI Tech (Myk-78 fix) $68,500 > >VLSI Tech (Myk-78A proto) $11,000 > >VLSI Tech (Myk-78A prod.) $220,000 > >VLSI Tech (Myk-80 #1) $48,000 > >VLSI Tech (Myk-80 #2) $33,750 > >VLSI Tech (Myk-82) $80,000 > >VLSI Tech (Myk-79) $79,500 > > > > > > > >Their LAN was installed by Strategies, Inc for about $14,000. > > >--

1 0

No Subject
by Anonymous 16 May '93

16 May '93

Info on Mykotronx! First of Two Documents. (This info was sent to me anonymously. I have no idea if it's real, accurate, bogus, etc. Maybe it's real. This may help us in some way. Considering what Mykotronx has planned for us, publishing this stuff is justified. Just take it with a grain of salt. It could be fake.) >Howdy. The following is a sampling of the information I was >able to grab.... .......[stuff deleted to better protect source]...... >and their entire general ledger. Will post more as I get the >time. Do not disclose the origin of this document (me) but >you can publish it if you like to show that the people the >government wants us to trust to keep the Clipper design >secret, don't know jack shit about security. > > > >Information: > >Mykotronx Inc. >357 Van Ness Way (1 blk so. of Del Amo) >Suite 200 >Torrance CA 90501 >(310) 533-8100 >fax (310) 533-0527 >STU III (310) 533-0738 >Founded 1979 > >Resale # SR-AB 12-711252 >Dunn & Bradstreet # 00-611-5281 > >Banking: Shearson Lehman Brothers > Attn: Steve Scerra > Acct # 509 24261 12011 > 21250 Hawthorne Bl > Torrance, CA 90509 > (310) 540-9511 > >Employee Names: > >Bob Gottfried, CEO >Leonard J. Baker, President >Ralph O' Connell, aka "The Father of COMSEC", NSA Lobbyist >Mike Furusawa, Space COMSEC Manager >Patti Linahan, Executive Secretary >Kikuo Ogawa, Buyer >R. Todd, W. Greenfield, KG-44B (Outrunner) Project >John C. Droge, Personnel >Bob Todd, Manufacturing Manager >Landy Riley, Engineering > >Federal Express Acct # 1122-7492-8 > >NSA Contact Home Address: >Ralph O' Connell >1401 Woodbridge Road >Baltimore, MD 21228 >(301) 747-6276 >Principle NSA Technical Contact: >National Security Agency >Maryland Procurement Office >Attn: N244 (CEB) (MDA904-92-G-0354/J.O. 5001) >9800 Savage Road >Fort George G. Meade, MD 20755-6000 >(301) 688-8086 > >NSA Accounting Contact: >National Security Agency >Maryland Procurement Office >Finance and Accounting Office >9800 Savage Road >Fort George G. Meade, MD 20755-6000 >(301) 859-6715 > >KG-46 Tactical Decryptor Unit and >KG-48B Outrunner Provisioning Conference participants: >Robert Todd, Mykotronx >Bill Greenfield, Mykotronx >G. Burgio, NSA >J. Gochnour, NSA >J. Wimpy, Air Force Computer Systems Command >S. Solis, Air Force Computer Systems Command > >To Be Discussed at meeting May 18 & 19, 1993 > >Outrunner Project Milestone Payments: > >1. Preliminary Studies $268,074 2/14/92 >2. Place Subcontract w/ VLSI $47,917 2/22/92 >3. Complete PDR KG-44B $61,431 4/13/92 >4. Complete PDR VLSI $71,090 5/19/92 >5. Complete SFA Review VLSI $78,470 7/12/92 >6. Complete CDR VLSI $106,638 7/17/92 >7. Complete first KG-44B $166,641 8/12/92 >8. Complete CDR $132,454 6/18/92 >9. Complete tests 1st KG-48B $151,957 12/16/92 >10. Complete fab VLSI $203,941 11/17/92 >11a.Deliver 2 KG-44B to NSA $81,080 9/8/92 >11b.Deliver 2 KG-44B to NSA $81,081 10/7/92 >12. Complete Cryto Verif VLSI $152,223 12/16/92 >13. Deliver 4 KG-44B to NSA $171,571 3/2/93 >14a.Deliver 2 KG-44B to NSA $30,432 3/30/93 >14b.Deliver 2 KG-44B to NSA $30,432 4/20/93 >15. Deliver 4 KG-44B to NSA $60,864 4/24/93 >16a.Deliver 1 KG-44B to NSA $15,216 4/28/93 >16b.Deliver 3 KG-44B to NSA $45,648 5/12/93 >17. Deliver 4 KG-44B to NSA $42,840 5/13/93 > >Total: $2,000,000 > > >KG-44 VLSI Procurement: >United Technologies Microelectronics Center >1575 Garden of the Gods Road >Colorodo Springs, CO 80907 >PO#5703-44ACN1 Feb 19, 1992 >Invoice Date Feb 5, 1993 >"Customer to pick up parts. Secret item handling. >Secret Design KG-44LSI. Mykotronx P/N M20/00301XXX" >Government contract # MDA904-92-C-A027 >Group C Testing: $4,400 >5 Parts @ $675ea $3,375 >Job #BE-7281 Group C Samples >PIC Number: HP67AG84WTDLC >"Note: Group B samples also included with this shipment (ref >Packlist #10128" >"The export of this product is controlled by the US Government. >The export of this product or the disclosure of related technical >data to foreign nationals without the appropriate export license >is prohibited by law." > >Test Plan for MYK-80: >Statement of Work for Exatron Inc. 5/13/93 >Develop test interface board for MYK-80 (176 pin TQFP) and >I.M.S. tester. Interface to utilize "particle interconnect" >system. Data on MYK-80 I.O. and IMS tester to be supplied >by Mykotronx. >Interface board to be installed in a work station which utilizes >Exatron "PET" handler, tooled for the MYK-80; a vacuum pick-up >device (manual, pencil type); work surfaces for JEDEC tray >storage and operator support. The IMS tester will mount directly >under the "PET" handler. Two "PET" handlers are to be quoted >with two sets of specific nesting tools for the MYK-80. >Installation in place at Mykotronx and initial operator and >maintenance training to be included. >Design review of the interface board layout, prior to release of >the board to fabrication is to be held at Mykotronx. > > > >Manuals and Training Manuals subcontracted to: > >ELITE Technical Corporation >Warren A. Griswold, President >1903 B Marshallfield Lane >Redondo Beach, CA 90278 >(310) 372-5616 > > >CAPSTONE Financial Commitments by Mykotronx > >Basic VII Cap VLSI 10 $212,000 >Sun 1 Yr maint hw&sw $2,700 >Compass $159,400 >IKOS Systems & sw $57,500 >ELITE Technical Corp $8,000 >IMS/Sun $119,000 >Versatec Plotter $36,500 >SJ (1) $71,200 >SJ (2) $76,200 >Exatron Test System $78,000 >ROM Cell $60,000 >AT&T $100,000 >Surf Mgt (real estate) $13,900 >Universal Shielding (Tempest) $20,600 >Plotter maint $5,000 >Litronics $225,000 >Spyrus (1) $45,600 >Spyrus (2) $44,800 >Compass (2) $110,000 >VLSI Tech $30,000 >VLSI Tech (2) $163,000 >VLSI Tech CAPSTONE TQFP $10,000 >New Media NRE Design $18,700 >South Coast Designers $14,600 >South Coast $6,000 >VLSI Tech Exponeniator Tamper Sys $163,000 >Conres logic analyzer $3,200 >VLSI Myk-78 tester $33,800 > ..end...

1 0

End of the Universe Hacked
by deltorto＠aol.com 16 May '93

16 May '93

Hi Everybody, This is FYI. Apologies for any overlaps if you get this twice. Note: I was in the Netherlands last year and crashed/partied with these guys and gals and they're ALL RIGHT kinds-a folks. This should be a real feth-ti-val for those who can make it over there. The central Netherlands area is noted for the lack of a "There" there, but what they lack in "There-ness," they more than make up for with a wonderful sense of wackiness. Subliminal Hint: l e t ' s a l l g o ... Peace, ^ ^ dave '[' ...Clip the Clipper Chip! u ------------------------------------------------------------------- H A C K I N G A T T H E E N D O F T H E U N I V E R S E ------------------------------------------------------------------- An 'in-tents' summer congress H U H? ------- Remember the Galactic Hacker Party back in 1989? Ever wondered what happened to the people behind it? We sold out to big business, you think. Think again, we're back! That's right. On august 4th, 5th and 6th 1993, we're organising a three-day summer congress for hackers, phone phreaks, programmers, computer haters, data travellers, electro-wizards, networkers, hardware freaks, techno-anarchists, communications junkies, cyberpunks, system managers, stupid users, paranoid androids, Unix gurus, whizz kids, warez dudes, law enforcement officers (appropriate undercover dress required), guerilla heating engineers and other assorted bald, long-haired and/or unshaven scum. And all this in the middle of nowhere (well, the middle of Holland, actually, but that's the same thing) at the Larserbos campground four metres below sea level. The three days will be filled with lectures, discussions and workshops on hacking, phreaking, people's networks, Unix security risks, virtual reality, semafun, social engineering, magstrips, lockpicking, virusses, paranoia, legal sanctions against hacking in Holland and elsewhere and much, much more. English will be the lingua franca for this event, although some workshops may take place in Dutch. There will be an Internet connection, an intertent ethernet and social interaction (both electronic and live). Included in the price are four nights in your own tent. Also included are inspiration, transpiration, a shortage of showers (but a lake to swim in), good weather (guaranteed by god), campfires and plenty of wide open space and fresh air. All of this for only 100 dutch guilders (currently around US$70). We will also arrange for the availability of food, drink and smokes of assorted types, but this is not included in the price. Our bar will be open 24 hours a day, as well as a guarded depository for valuables (like laptops, cameras etc.). You may even get your stuff back! For people with no tent or air matress: you can buy a tent through us for 100 guilders, a matress costs 10 guilders. You can arrive from 17:00 (that's five p.m. for analogue types) on August 3rd. We don't have to vacate the premises until 12:00 noon on Saturday, August 7 so you can even try to sleep through the devastating Party at the End of Time (PET) on the closing night (live music provided). We will arrange for shuttle buses to and from train stations in the vicinity. H O W ? ------- Payment: In advance only. Even poor techno-freaks like us would like to get to the Bahamas at least once, and if enough cash comes in we may just decide to go. So pay today, or tomorrow, or yesterday, or in any case before Friday, June 25th 1993. Since the banks still haven't figured out why the Any key doesn't work for private international money transfers, you should call, fax or e-mail us for the best way to launder your currency into our account. We accept American Express, even if they do not accept us. But we are more understanding than they are. Foreign cheques go directly into the toilet paper recycling bin for the summer camp, which is about all they're good for here. H A ! ----- Very Important: Bring many guitars and laptops. M E ? ----- Yes, you! Busloads of alternative techno-freaks from all over the planet will descend on this event. You wouldn't want to miss that, now, would you? Maybe you are part of that select group that has something special to offer! Participating in 'Hacking at the End of the Universe' is exciting, but organising your very own part of it is even more fun. We already have a load of interesting workshops and lectures scheduled, but we're always on the lookout for more. We're also still in the market for people who want to help us organize this during the congress. In whatever way you wish to participate, call, write, e-mail or fax us soon, and make sure your money gets here on time. Space is limited. S O : ----- > 4th, 5th and 6th of August > Hacking at the End of the Universe (a hacker summer congress) > ANWB groepsterrein Larserbos (Flevopolder, Netherlands) > Cost: fl. 100,- (+/- 70 US$) per person (including 4 nights in your own tent) M O R E I N F O : ------------------- Hack-Tic Postbus 22953 1100 DL Amsterdam The Netherlands tel : +31 20 6001480 fax : +31 20 6900968 E-mail : heu(a)hacktic.nl V I R U S : ----------- If you know a forum or network that you feel this message belongs on, by all means slip it in. Echo-areas, your favorite bbs, /etc/motd, IRC, WP.BAT, you name it. Spread the worm, uh, word.

1 0

Forestalling paranoia
by gnu 16 May '93

16 May '93

The Little Garden network, which connects toad.com to the Internet, was down today due to some scheduled power outages in a building that our link goes through. Fear not...if you sent something to cypherpunks, it will get through when the power comes back on. John

1 0

Receipt acknowleged?
by fergp＠sytex.com 15 May '93

15 May '93

This is a transcript of a letter that I received in the mail from Senator John Warner of Virginia - 8<------ Begin transcript ------------------ JOHN WARNER Virginia Committees: Armed Services Select Committee on Intelligence Environment and Public Works Rules and Administration United States Senate May 11, 1993 Mr. Paul Ferguson <address omitted> Centreville, Virginia 22020 Dear Mr. Ferguson, Thanks you very much for writing to inform me of President Clinton's new initiative in telecommunications encryption technology. I was not aware of this proposal as presented by the new Administration. Your letter does reveal that you are very knowledgeable in the details of the "Clipper Chip". You have expressed clearly the impact the "Clipper Chip" technology and program would have on government and private business. I will seek more information concerning this new initiative from the Clinton Administration. I appreciate being made aware of this proposal and learning of your specific insights. With kind regards, I am Sincerely, /*signed*/ John Warner 8<-------- End transcript ------------ Paul Ferguson | Boycott AT&T, Network Integrator | Write your elected Centreville, Virginia USA | Representatives. fergp(a)sytex.com | Do the right thing. Just say "NO" to the Wiretap (Clipper/Capstone) Chip(s) I love my country, but I fear its government.

1 0