- cypherpunks-legacy - lists.cpunks.org

Key Length Correlation
by Jeff Davis 17 Dec '03

17 Dec '03

I've read Blaze and diffie's paper on Semetric Key Length. I'm currious how semetric key length correlates to public key cryptography length. Does public key length have to be much longer, (assuming the algorithms are strong), to provide the same level of security as a shorter semetric key? TIA -- According to John Perry Barlow: *What is EFF?* "Jeff Davis is a truly gifted trouble-maker." *email <info(a)eff.org>* *** O U T L A W S On The E L E C T R O N I C F R O N T I E R **** US Out Of Cyberspace!!! Join EFF Today! *email <membership(a)eff.org>*

2 1

lambda 2.10 (fwd) -- (ie -- French Consitution censors net)
by <pstira＠escape.com> 17 Dec '03

17 Dec '03

Just passing this on in case it strikes anyone's interest :) ---------- Forwarded message ---------- Date: Mon, 19 Aug 1996 20:10:02 +0100 From: Jerome Thorel <jt(a)freenix.fr> To: thorel(a)netpress.fr Subject: lambda 2.10 netizen's --> Lambda Bulletin 2.10 <-- contents flash bulletin + French Constitution censors Internet control + Singapore and the Censorship Proxy Server + G7 and the EC take strong steps for Key Escrow Encryption * * * * * French Constitution censors Internet control As we speculated in our last bulletin (2.09), the French Conseil Constitutionnel, watchdog of the 1958 Constitution, censored 2 articles in a new telecom act which were intended to establish a kind of administrative control over Internet speech and online services. The nine "Sages" said that the creation of the Conseil Superieur de la Telematique, which would have make guidelines on Internet content, breaches article 34 of the Constitution which states that the Parliament can act alone to dictate rules concerning "civic rights and fundamentals garanties given to citizens for a fair exercice of public liberties". The CST could have undermine these principles, because the law didn't specify clearly how it would have taken its decisions. So the Conseil recognized the particular state of the Internet, which is not a basic medium. Only one section remains in the censored law : it obliges ISPs to give their clients "technical means" to forbid or select access to online services, software that allows a so-called "parental control". * * * * * Singapore and the Censorship Proxy Server A communique from SingNet, Singapore's main Internet Service Provider, states that "ALL SingNet customers will be required to connect to SingNet's proxy server by the deadline September 14th 1996, failing which you would not be able to access the web without the proxy. This applies to all dial-up, ISDN, and leased line customers (STIX customers are exempted). " The proxy server will ease the ISP to "Deny access to blacklisted sites supplied by SBA". SingNet said that "Access to sites banned by the SBA will prompt the message : The site you requested is not accessible For more information on Singapore's Internet regulation, please check http://www.gov.sg/sba/netreg/regrel.htm". On July 11 the Singapore government passed the Singapore Broadcasting Authority Act (Chapter 297) in which it announced a "Class Licence Scheme" aimed "to encourage responsible use of the Internet while facilitating its healthy development in Singapore. It encourages minimum standards in cyberspace and seeks to protect Net users, particularly the young, against the broadcast of unlawful or objectionable materials. ... SBA will focus on content which may undermine public morals, political stability and religious harmony of Singapore. However, SBA recognises that it is impossible to regulate the Internet fully. ... Singaporeans can help SBA in the identification of objectionable sites in order to keep cyberspace clean. SBA welcomes public feedback on objectionable content found on the Internet. Members of the public can write to SBA, call its toll-free hotline ... or post their views on the SBA homepage at http://www.gov.sg/sba. " China, which has created its own Internet regulations aimed at controlic data traffic and urged netizens to declare themselves to the authorities, approved the Singapore Act and an official was quoted as saying, "China has a lot to learn from Singapore's experience" (source : Fight-censorship mailing list). * * * * * G7 and the EC take strong steps for Key Escrow Encryption The European Commission's DG-13 division on information security (Infosec) opened on July 30th a "call for tenders" for "preparatory works" towards regulating encryption procedures. The plan is aimed to test the introduction of the Europe-wide network of Trusted Third Party Services (ETS). Observers saw in this move the so-called "guidelines" the EC was to propose last year, when press reports (Nature, Sept. 28, 1995) argued the Commission and the Council of Europe in Strasbourg were willing to regulate encryption use through the creation of TTPs. The Infosec call for tenders, which will end by September 30, is to "identify, define and verify ... operationnal, technical, regulatory and legal aspects ... to assess the effectiveness, economics and acceptability of Trusted Third Party Services." Other voices in European talks, however, said these "preparatory works" are to push for EU countries to adopt TTPs and the principles of key-escrow encryption. Nordic countries such as Finland, Denmark and Sweden, are said to be opposed to change encryption legislation, as France and Britain took steps in June and July to enforce the creation of TTPs in their own country. On July 30 G7 countries agreed policies that would "accelerate consultations on encryption that allows, when necessary, lawful government access to data and communications in order to prevent or investigate acts of terrorism, while protecting the privacy of legitimate communications". The EPIC, in Washington, DC, said "stronger measures sought by the US to restrict information on the Internet and limit the availabilioty of encryption were apparently not adopted by the G7 countries". Among other industrialised nations, Japan and Australia are said, like Nordic countries in Europe, to oppose key escrow as a mean to regulate the free flow of information. Remember the OECD talks in June, were the US tried to impose key-escrow legislation to the 27-countries' club of the industrial world (see lambda 2.09) ***** Soon archived on www.freenix.fr/netizen ----- Jerome Thorel =-= Journaliste/Free-lance Reporter =-= Paris, France =+= the lambda bulletin --> http://www.freenix.fr/netizen =+=

1 0

(NOISE) Re: Free Pronto Secure Offer
by geoff＠commtouch.co.il 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- To: unicorn(a)schloss.li, cypherpunks(a)toad.com Date: Fri Aug 16 02:41:34 1996 Unicorn, > No, I was merely pointing out that if the review revealed that it > had problems (one assumed that the intent of peer review is to reveal > such problems in the first place, but perhaps you just like giving > software away?) then the offered reward was valueless. Peer review seems to have voted that their risk paid off. > A lot of people use DES on this list too I'll wager. and... > I "tried out" your promotional scheme when I read your message, and > it was that scheme which my opinion targeted. You misinterpreted my reply to a list member's enquiry about whether our offer of Pronto Secure in exchange for feedback was still available. > This is a subjective question. Yes. > Cypherpunks is always getting the cash poor developer who thinks he > very clever because he has to pay testers no money if he offers his > new product free to the person who discovers a flaw, or writes a > review. Unicorn, you are again letting your fingers move faster than your brain. On what do you base your evaluation of our liquidity ? (not that it is relevant). Most Cypherpunks are technically savvy and crypto aware people, they provide a perfect community for evaluating and debugging a security enabling product. I would strongly recommend this route to any developer of serious security enhancing software. My sincere thanks to all c'punks who have and continue to provide incredibly valuable input into Pronto Secure. > From your home page, I would guess that you request that reviewers > allow you to make their comments public. That's called an > endorsement, and, by the way, people are usually paid for them. > Sometimes in the millions. Think Michael Jordan is getting a deal > when you use his name to promote your product and then give him a > $99.00 piece of software (which is effectively worth the amount of > time it takes to write a few kiss ass paragraphs on the software, not > $99.00)? Unicorn, you are again making groundless assumptions. I suggest that you do some fence painting before you enlighten us with your opinions about our "kiss ass paragraphs" of code. Unless Michael Jordon is reading Schneier on the sly, his endorsement of Pronto secure is not worth 99c. > Alturisim is a pipe dream. Depends what you are putting in your pipe :) I venture that most c'punks would agree that moving strong e-mail security into mainstream is a good thing. This is not going to happen without people making money from it. >> Unicorn, you are invited to whitewash my fence :) > Do I have to review pronto secure first? Yes. Geoff. - --------------------------------------------------------------- Geoff Klein, Pronto Secure Product Manager; www.commtouch.com My PGP public Key 1814AD45 can be obtained by sending a message to geoff(a)commtouch.co.il with "Get PGP Key" as the subject. - ---------------------------------------------------------------- -----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: noconv iQCVAwUBMhO1s0Lv5OMYFK1FAQG5WAP/XoLteaVpdhnLpj/pk/1aPiWX7Nx/h1cc 5Sf0mgOWv3Q9MASWHV2lKrgqF9jc15ZaymfJZDq1duGttrPj6SJqX/nwOTcYi006 Hh3qh+LnXWnBd7QA/mZL5Fn4SLAOBno/uspqwMbM+6DCw39MpCY2NG0jQ2Qi8vMH n1IG+PYYTAs= =5HnW -----END PGP SIGNATURE-----

2 1

RAD_ius
by jya＠pipeline.com 17 Dec '03

17 Dec '03

8-14-96. NW: "Proposed IETF standard to ease a variety of remote access concerns ." The scheme, called Remote Authentication Dial-In User Service (RADIUS), provides a centralized and secure method for authenticating remote dial-in users, authorizing appropriate enterprise resources and gathering accounting details. RADIUS also provides a way to integrate the security administration of dial-in users with that of the resident enterprise population. ----- http://jya.com/radius.txt (5 kb) RAD_ius

1 0

re: National Socio-Economic Security Need for Encryption Technology
by Bart Croughs 17 Dec '03

17 Dec '03

Perry Metzger wrote: >Bart Croughs writes: >>When economists say that wages are determined by the amount of >>capital >> invested, they mean on a regional/national level, not on the level of >> individuals. >So, you are saying that if everyone in the country spent their life >savings on building giant green pylons, the capital investment would >drive up everyone's wages? Wow! In fact, we could borrow money >from >other countries to build more green pylons and drive up wages so >fast >we could pay off the resultant debt! >Perry >(PS Please stop posting these things -- you may kill everyone >watching >with laughter.) No, I am not saying that if everyone in the country spent their life savings on building giant green pylons, the capital investment would drive up everyone's wages. You are suggesting that I'm saying this, but it's simply not true. This is called 'setting up a straw man'. I am saying that the fact that American workers are better paid than workers in Third World countries, can be explained for a large part by the fact that there is much more capital invested in the US than in Third World countries. If you still don't understand this, I suggest you study my other posts on this subject, or better still, you study the works of the Austrian economists I've quoted before. Bart Croughs

3 2

PGP...
by sasa.roskar＠uni-lj.si 17 Dec '03

17 Dec '03

I'm confused.... if you don't want people to be able to read your email, you code it with PGP or other encoders... but why give away your key on your website to everyone? That makes your email readable to everyone... doesn't it? Oh well... I hope someone can explain this to me... Roki

4 3

Re: Read; NOW
by pjn＠nworks.com 17 Dec '03

17 Dec '03

>> >> Hi I'm Unix Code and have a few things to ask...(it may not go >> with Cryptography but go ahead and read) > Sad. You read my mind. P.J. pjn(a)nworks.com ... Smell The Roses And Eventually You'll Inhale A Bee. ___ Blue Wave/QWK v2.20 [NR]

1 0

thank god and phil...
by anonymous-remailer＠shell.portal.com 17 Dec '03

17 Dec '03

All I can say is thank God and Phil for PGP... My next X was using the 'puter last night and opened my email folders and was rooting around... I had to "fumble" my pass phrase and finally "give up" saying that the damn PGP was broke again... we all know it don't break !! This could have cost me a fortune in divorce court !!

1 0

Re: National Socio-Economic Security Need for Encryption Technology
by Duncan Frissell 17 Dec '03

17 Dec '03

At 08:02 PM 8/11/96 -0400, Perry E. Metzger wrote: > >I failed to note obvious counterexamples. Well known authors get giant >advances for books written with manual typewriters. Minimum wage >workers routinely operate expensive equipment. Workers doing the same >job in different places using identical equipment that cost identical >sums earn different salaries. > >Clearly, wages are defined by supply and demand -- not by "capital >investment". In the long run, employers will bid wages up to the level of discounted value of marginal product of the labor -- the present value of the future "price" of the increase in output ascribable to the added worker. It never ceases to amaze me that there are people in this country who actually believe that the average American in poorer now than in 1970. I can only be those who were unconscious in 1970. DCF

1 0

Re: "X-Ray Gun" for imperceptible searches
by Charley Sparks 17 Dec '03

17 Dec '03

I thought metal collanders on the cranium were to prevent space aliens from reading our thoughts and controlling our minds.... Guess I'll have to come up with a better solution... mine seems to have worked thus far, though Charley > >"Erik E. Fair" (Time Keeper) <fair(a)cesium.clock.org> writes: > >> I wonder how well the imager works through mylar or gold lame' clothing (or >> other high-metal content clothing)? > >Have you ever wondered why Tim May wears a protective layer of aluminum >foil on his head? (And lead foil wrapped around his balls.) > >--- > >Dr.Dimitri Vulis KOTM >Brighton Beach Boardwalk BBS, Forest Hills, N.Y.: +1-718-261-2013, 14.4Kbps >

1 0