- cypherpunks-legacy - lists.cpunks.org

Algorithm Identifier for CDMF
by Robert Hettinga 17 Dec '03

17 Dec '03

Grab your ankles, ladies and gents. This won't hurt a bit... Cheers, Bob Hettinga <Wait, isn't that a freight train in the distance?> --- begin forwarded text From: Bob Baldwin <baldwin(a)rsa.com> To: "'set-dev'" <set-dev(a)terisa.com> Subject: Algorithm Identifier for CDMF Date: Wed, 8 Jan 1997 09:41:08 -0800 Mime-Version: 1.0 Sender: owner-set-dev(a)terisa.com Precedence: bulk The SET protocol needs an algorithm identifier for a 40 bit variant of des called CDMF for use with the AcqBackMsg. This note defines the value for that identifier. --Bob Baldwin -------------------------- ALGORITHM IDENTIFIER FOR IBM's CDMF ALGORITHM INTRODUCTION The Commercial Data Masking Facility (CDMF) is an application of DES that weakens the DES key from 56 to 40 bits using a key shortening algorithm patented by IBM. Licensing information for the CDMF patent is available from the Director of Licensing, IBM Corporation, 500 Columbus Avenue, Thornwood, NY 10594. This note defines the ASN.1 algorithm identifier and algorithm parameters for IBM's CDMF that has been registered by RSA Data Security Inc. RSA Data Security, Inc.'s Open Systems Interconnection (OSI) object identifier is 1.2.840.113549 (2a, 0x86, 0x48, 0x86, 0xf7, 0x0d in hex), as registered by the American National Standards Institute (ANSI). In the following, the prefix "rsadsi" refers to that object identifier. All object identifiers registered by RSA Data Security begin with this prefix. CDMFCBCPad This is a Cipher Block Chaining mode of operation with padding of a 40-bit variant of DES. It is defined in: IBM Journal of Research and Development, "The Commercial Data Masking Facility (CDMF) Data Privacy Algorithm", Volume 38, Number 2, March 1994. Following the ASN.1 style of the "Agreements for Open Systems Interconnection Protocols: Part 12 OS Security", it is defined by: ALGORITHM MACRO ::= BEGIN TYPE NOTATION ::= "PARAMETER" type VALUE NOTATION ::= value(VALUE OBJECT IDENTIFIER) END -- of ALGORITHM IV8 ::= OCTET STRING (SIZE(8)) CBC8Parameter ::= IV8 CDMFCBCPad ALGORITHM PARAMETER CBC8Parameter ::= {iso(1) member-body(2) US(840) rsadsi(113549) encryptionAlgorithm(3) 10} -- In hex, the CDMFCBCPad algorithm ID is: -- { 0x2a, 0x86, 0x48, 0x86, 0xf7, 0x0d, 0x03, 0x0A } The PARAMETER is needed to specify the Initialization Vector, which need not be kept secret. It is 8 octets long. This mode should be used to encrypt multiple blocks, where the full message is available. The random IV prevents codebook analysis of the start of the chain. The IV may be public. This mode will propagate a single bit error in one plaintext block into all succeeding blocks, and will propagate a single bit error in the ciphertext into a garbled plaintext block on decryption as well as a single bit error in the next plaintext block. The following padding mechanism should be used if the data to be encrypted is octet aligned, unless the security policy dictates otherwise: The input to the CDMF CBC encryption process must be padded to a multiple of 8 octet, in the following manner. Let n be the length in octets of the input. Pad the input by appending 8-(n mod 8) octet to the end of the message, each having the value 8-(n mod 8), the number of octets being added. In hexadecimal, the possible paddings are: 01, 0202, 030303, 04040404, 0505050505, 060606060606, 07070707070707, and 0808080808080808. All input is padded with 1 to 8 octets to produce a multiple of 8 octets in length. The padding can be removed unambiguously after decryption. Editor's Note - If adding the padding rules would cause existing implementations to break, this should be registered as a separate algorithm identifier. Note, however, that [FIPS 81] specifies its own padding rules for padding binary data, in the absence of application-defined rules such as those above; those rules require an indication (which could be conveyed as an algorithm PARAMETER) of whether the data has been padded or not. --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) Philodox, e$, 44 Farquhar Street, Boston, MA 02131 USA "The cost of anything is the foregone alternative" -- Walter Johnson The e$ Home Page: http://www.vmeng.com/rah/ FC97: Anguilla, anyone? http://offshore.com.ai/fc97/

1 0

Re: encryption program
by dlv＠bwalk.dm.com 17 Dec '03

17 Dec '03

Path: perun!news2.panix.com!panix!news.mathworks.com!newsfeed.internetmci.com!hunter.premier.net!news-peer.gsl.net!news.gsl.net!news-dc.gsl.net!news.gsl.net!news.sprintlink.co.za!NEWS!not-for-mail From: Pierre van Rooyen <jvrooyen(a)liasec.infolink.co.za> Newsgroups: alt.security Subject: encryption program Message-ID: <32D39684.285B(a)liasec.infolink.co.za> Date: Wed, 08 Jan 1997 04:43:48 -0800 Organization: Secunda Lines: 22 MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: 7bit If you are familiar with encryption please help me with the following Firstly I want to know if there are a encryption program currently used that are completely succure from hackers. In other words, information encrypted that no person is able to decrypt. Well if there isn't such a program I really think I have one that I have written myself. It is simple text that I have encrypted and so far no one was able to decrypt it. You can go and have a look yourself at http://www.lia.net/pvrooyen/encrypt.txt (CLICK HERE to go there now) If you think this program can be used please reply to this letter and I will give you more information. **PLEASE reply via e-mail ---> <a href="mailto:jvrooyen@liasec.infolink.co.za">CLICK HERE</a> to reply now. Hope to hear from you soon. Regards Pierre van Rooyen

4 4

NEW SERVICE
by imakumon＠ix.netcom.com 17 Dec '03

17 Dec '03

Hello,_Morons, Future Tech Invites You To Preview ITA International and A New Trillion Dollar Industry! Have you ever been to a smorgasboard? Wasn't it GREAT to have so many choices? How would YOU like to have a smorgasboard of choices in your communications? A Virtual Office!! Guess what! Now you can!! ESA is the busy persons Electronic Secretarial Adminstrator! She is amazing! She will place calls. answer calls, send and receive faxes, send voice messages, page you, find you, follow you and much, much more! ESA will do this and more from anywhere in the world! ESA can actually read you your faxes if you choose. How would you like to be reminded of special events, meetings, birthdays and even have calls placed for you when you are not around? It can now be done! Want to know who is on the line before you talk to them? Your Virtual Office can tell you. She will screen all your calls so you will have no wasted time on any of your phones or your cellular phone. If you choose not to talk to someone you send them to your voice mail. Unbelieveable!! No matter what business you are in ESA can make your life easier. An inbound 800 # at an unheard of 9.9 cents per minute is excellent. Also, you can have long distance at 9.9 cents on all your phone lines! ESA just keeps getting better and better! Coming soon you will be able to get your e-mail through ESA and have it read to you or printed out, or both. Your choice! Conference calling and voice notification are on the way. All these exciting features and so much more! And guess what! There is so much more coming in this new TRILLION dollar industry it will continue to be amazing! If you live in or near Atlanta Georgia join us for an informative meeting on Thursday Jan 9 at 7pm and discove how you can capitalize on this exciting opportunity! SEATING IS LIMITED!!! If you would like to know more about subscribing to this premier and exciting service, information on becoming a distributor or information on meetings please call our toll free 888 # below. WELCOME TO THE FUTURE!!! Future Tech 1-888-213-2139 --- #1 Stuart / #2 Eileen / #3 Voice on Demand / #7 Fax on Demand e-mail address - ft2100(a)discoveryonline.com Stuart & Eileen DISCLAIMER - We do relize that this e-mail will reach individuals who do not wish to receive this information. If you do not wish to receive any further e-mails from us please let us know. We are sorry for the intrusion.

1 0

Trade secret liabilty [Was Re: Sandy and I will]
by Michael Froomkin - U.Miami School of Law 17 Dec '03

17 Dec '03

a reliable friend wrote to me to say ... <quote> The Uniform Trade Secrets Act (which has been adopted by a majority of jurisdiction) provides for liability of a third party who knows or has reason to know that information he recieves or discloses was acquired by improper means or under circumstances giving rise to a fiduciary duty OR that he knows to be proprietary but which he recieved by accident or mistake. Depending on the facts, the language could encompass a moderator who knew about or turned a blind eye to distribution of trade secrets on his list. </quote> A. Michael Froomkin | +1 (305) 284-4285; +1 (305) 284-6506 (fax) Associate Professor of Law | U. Miami School of Law | froomkin(a)law.miami.edu P.O. Box 248087 | http://www.law.miami.edu/~froomkin Coral Gables, FL 33124 USA | It's warm here.

1 0

RE: [STATS] Cypherpunks subscriptions on and off
by Blanc Weber 17 Dec '03

17 Dec '03

In October 1993 the membership was around 500 (or less, I think). Three years later the membership is around 1500 (to account for the "cypherpunk-list@xxxxxx" type addresses, which are lists-within-lists containing numerous "hidden" subscribers). .. Blanc

1 0

FREE LIFE SAVING MESSAGE
by gemery＠earthlink.net 17 Dec '03

17 Dec '03

I_Love_SPAM, To get your free life saving audio cassette called " Dead Doctors Don't Lie " please go to this URL, http://home.earthlink.net/~grbon/index.html This tape has 2 minutes that most companies leave out!!! We have what the Doctor ordered. Doctor Joel Wallach-past nominee for the Nobel Prize-Medicine explains why the average age of an M.D. is only 58 yrs. Please call or e-mail us for our families personal testimonies.Reading this message was not a waste of your time as this advice - in all likelyhood saved two members of my family from losing thier lives. Thanks for your time and may God Bless You all. p.s. Please use e-mail on web page-thank you! Business opportunity also available. To be removed from our free offers mailing list please put remove in the subject box and return to author and of course we are sorry for any inconvenience. We also have a free 888# for your home offer, no monthly charge-one time set up $9.95

1 0

No Subject
by Bovine Remailer 17 Dec '03

17 Dec '03

Timmy May's aberrant sexual life has negatively impacted his mental integrity. /// (0 0) ____ooO_(_)_Ooo__ Timmy May

1 0

Re: [STATS] Cypherpunks subscriptions on and off
by Dave Hayes 17 Dec '03

17 Dec '03

Black Unicorn writes: > More fear from Mr. Thorn that his own time in the spotlight might be > drawing to a close. God forbid his captive audience might vanish. Tell me, how can an audience be captive when they control the "delete" key? ------ Dave Hayes - Altadena CA, USA - dave(a)jetcafe.org Freedom Knight of Usenet - http://www.jetcafe.org/~dave/usenet A voice whispered to me last night. It said: "There is no such thing as a voice whispering in the night!"

5 4

RE: The FAGGOT list
by Robert Barnes 17 Dec '03

17 Dec '03

Dr.Dimitri Vulis KOTM wrote: >Brett Carswell <brettc(a)tritro.com.au> writes: >> Could someone please forward me the URL of the FAGGOT (are the caps >> manditory?) detecting software for mailing lists. I feel pretty left out >> as almost everyone else know who the FAGGOTS are. Is this the same >> software that detects Cocksuckers or does Dr Dimitri have something of >> his own. Maybe we could all band together and come up with something >> that detects Nazi moderators as well. > >Everyone who spoke up in favor of moderation is a faggot tentacle. So does this mean that when you say "faggot" you mean "a person with views different to your own" rather than "a male homosexual" or "a bundle of wood, used for fuel"? > >I hope this helps. I think not, a code sample from a "faggbot" would be more helpful than a rule of thumb. >Rob Barnes

1 0

URGENT: Fri 10Jan 9:30AM Wash,DC: Karn appeals, come to the hearing!
by John Gilmore 17 Dec '03

17 Dec '03

[Friends of crypto freedom should definitely attend. The courtroom holds approximately 50 people, and we'd like to fill it. Show Judges Williams, Ginsburg and Rogers the importance of the case. This is the first time that a crypto export case has hit a Court of Appeals, and your rights are very much at stake here. If you're in the DC metropolitan area, come on out on Friday morning! Show Phil Karn you support him as he challenges the export controls. --John] RESEARCHER KARN APPEALS, SEEKING TO OVERTURN IRRATIONAL ENCRYPTION RULES "Books are OK to publish, floppies are not" policy Washington, January 8 - Laywers for researcher Philip R. Karn, Jr. will argue in court this Friday that Government restrictions on distribution of encryption software violate the First and Fifth Amendments of the Constitution, and are "arbitrary, capricious and invalid" regulations. This week's hearing, on January 10, 1997 at 9:30AM in the US Court of Appeals for the District of Columbia Circuit, is open to the public at 333 Constitution Avenue, Washington DC. The Government will argue that its rules are its own business, which courts should not oversee, and that it is legitimate to regulate free speech and publication when the government is uninterested in suppressing the content thereof. (The government actually has a strong interest in suppressing the public's ability to understand and deploy strong cryptography, but has managed to convince the district court of the opposite.) The lawsuit is complicated by the Government's introduction last month of new encryption regulations. President Clinton ordered on November 15 that the regulations be moved from the State Department to the Commerce Department. Over Christmas, the Clinton Administration published its new Commerce Department regulations, which are effectively identical to the State Department regulations, and put them into immediate effect. Mr. Karn's case only named the State Department. In an unusual switch, the Government is arguing that it should be able to replace the State Department with the Commerce Department as a defendant, in the hope of keeping the case alive. (Most defendants would be happy to have the case disappear. The State Department appears to be hoping they will get a better decision in this case than in related cases.) The State Department regulations at issue were struck down in December by Judge Marilyn Hall Patel in a similar case brought by Professor Daniel Bernstein in San Francisco. Judge Patel called the regulations a "paradigm of standardless discretion" which required Americans to get licenses from the government to publish information and software about encryption. No court has yet ruled on the new Commerce Department regulations, which include the same provisions that were declared unconstitutional. "This case clearly raises an issue of fundamental importance to cryptographers and computer programmers generally," said Kenneth Bass, lead attorney in the case. "The fundamental issue is how the courts will treat computer programs. Books are entitled to the full protection of the First Amendment, but the trial judge in this case decided that source code on a diskette does not enjoy that same protection. Programmers immediately recognize the utter irrationality of this distinction. We now will see whether the appeals courts will also see it that way." "Phil Karn's case illustrates both the irrationality of the encryption rules and the depths of the bureaucratic mazes which protect them," said John Gilmore, co-founder of the Electronic Frontier Foundation, which backed the suit. "The idea that the First Amendment protects the author of a book, but not the author of an identical floppy disk, is ridiculous. All books, magazines, and newspapers are written on computers today before print publication, and many are also published online. Yet here we have Government lawyers not only defending their right to regulate machine-readable publication, but also arguing that the courts are not permitted to re-examine the issue. Their argument amounts to `Trust us with your fundamental liberties'. Unfortunately, a decade of NSA actions have amply demonstrated that they are happy to sacrifice fundamental liberties when it gives them an edge in some classified spy program. Unless there's a clear and present danger to our nation's physical security (which we have seen no evidence of), our citizens' right to speak and publish freely is much more important to American national security than any top-secret program." Civil libertarians have long argued that encryption should be widely deployed on the Internet and throughout society to protect privacy, prove the authenticity of transactions, and improve computer security. Industry has argued that the restrictions hobble them in building secure products, both for U.S. and worldwide use, risking America's current dominant position in computer and communications technology. Government officials in the FBI and NSA argue that the technology is too dangerous to permit citizens to use it, because it provides privacy to criminals as well as ordinary citizens. Background on the case Mr. Philip Karn is an engineer with a wide and varied background in radio and wire communications. He has given many years of volunteer work in the amateur radio service, amateur satellite service, and in the Internet community. He is the author of the freely available "KA9Q" internet software for DOS machines, which forms the basis of many amateur radio experiments as well as several successful commercial products. He has written and given away various cryptographic software, including one of the world's fastest versions of the Data Encryption Standard (DES). Phil also did the initial research into encrypting Internet traffic at the packet level. Mr. Karn's home page is at http://www.qualcomm.com/people/pkarn/ . In 1994, author Bruce Schneier published _Applied Cryptography_, a best-selling encryption textbook which included some fifty pages of encryption source code listings, including very strong algorithms such as "Triple-DES". As an civil libertarian, Mr. Karn asked the State Department whether the book could be exported; they replied that it was in the public domain and could therefore be exported. Mr. Karn then created a floppy disk containing the source code from the book, and asked if the floppy could be exported. The State Department determined in May 1994 that the floppy was a munition. Mr. Karn would need to register as an arms dealer to be able to export the disk. After several administrative appeals, Mr. Karn filed suit in September 1995. The suit asks a court to declare that the decision was invalid because the distinction between publication on paper and publication on floppies has no rational basis, and because the decision violates Mr. Karn's right to publish the floppy. Judge Charles R. Richey dismissed the case in a strongly-worded 36-page opinion. "The plaintiff, in an effort to export a computer diskette for profit, raises administrative law and meritless constitutional claims because he and others have not been able to persuade the Congress and the Executive Branch that the technology at issue does not endanger the national security. This is a "political question" for the two elected branches under Articles I and II of the Constitution." Mr. Karn, whose effort was motivated by concern for civil rights rather than profit, appealed. This week's hearing is the first public hearing in his appeal case. The regulations at issue in the case, which prevent American researchers and companies from exporting cryptographic software and hardware, are a relic of the Cold War. The secretive National Security Agency has built up an arcane web of complex and confusing laws, regulations, standards, and secret interpretations for years. These are used to force, persuade, or confuse individuals, companies, and government departments into making it easy for NSA to wiretap and decode all kinds of communications. Their tendrils reach deep into the White House, into numerous Federal agencies, and into the Congressional Intelligence Committees. In recent years this web is unraveling in the face of increasing visibility, vocal public disagreement with the spy agency's goals, commercial and political pressure, and judicial scrutiny. ABOUT THE ATTORNEYS Lead counsel on the case are Kenneth C. Bass III and Thomas J. Cooper of the Washington law firm of Venable, Baetjer, Howard & Civiletti, who are offering their services pro bono. ABOUT THE ELECTRONIC FRONTIER FOUNDATION The Electronic Frontier Foundation (EFF) is a nonprofit civil liberties organization working in the public interest to protect privacy, free expression, and access to online resources and information. EFF is funding the expenses in Mr. Karn's case. The full text of the lawsuit and other paperwork filed in the case is available from Phil Karn's web site at: http://www.qualcomm.com/people/pkarn/export/index.html SOURCE: Electronic Frontier Foundation CONTACT: Ken Bass, lead attorney, +1 202 962 4890, kbass(a)venable.com; or Shari Steele, EFF Staff Attorney, +1 301 375 8856, ssteele(a)eff.org; or John Gilmore, EFF Board Member, +1 415 221 6524, gnu(a)toad.com

2 1