- cypherpunks-legacy - lists.cpunks.org

DES challenge news (fwd)
by 3umoelle＠informatik.uni-hamburg.de 17 Dec '03

17 Dec '03

Distributed key cracking efforts have been discussed in detail on cypherpunks and coderpunks for quite some time. A Swedish group trying to solve RSADSI's DES challenge chose to ignore the results. Here is what they got (from RISKS 19.14): >Date: Mon, 12 May 1997 17:56:54 +0200 (MET DST) >From: Thomas Koenig <ig25(a)mvmap66.ciw.uni-karlsruhe.de> >Subject: DES challenge news You may remember RISKS-19.09, in which I discussed the risks in a network-wide attack on the RSA DES challenge: The Swedish group at http://www.des.sollentuna.se/ didn't give out its source, so the client could, in fact, do anything, such as crack a master EC-card key. The reason given was client integrity. Well, a month after this, the promised source code release has not happened. Instead, it appears that somebody disassembled part of the client, made a version that reported fake "done" blocks, and then sent these to the servers. Moral? Don't ever think that nobody can read compiled code. Don't try to run a cooperative effort like this in a closed development model. Thomas Koenig, Thomas.Koenig(a)ciw.uni-karlsruhe.de, ig25(a)dkauni2.bitnet. ------------------------------

1 0

Re: The Inducement of Rapid Oxidation of Certain Materials....
by jimbell＠pacifier.com 17 Dec '03

17 Dec '03

At 14:27 5/14/97 -0700, Kent Crispin wrote: >On Wed, May 14, 1997 at 03:07:43PM -0400, Tom Allard wrote: >> How pedantic. Webster's New World Dictionary (also reputable, I might add), >> has THIS to say about "Anarchy": >> >> anarchy n. [Gr. an- without + archos, leader] 1. the absence of government >> 2. political disorder and violence 3. disorder; confusion >> >> Note the etymology. Taken to its roots, the word simply means "no leader". > >Note the second definition. A definition which it included because of years of misuse. It is said that language is a living thing, which it is, which means that if an error is made frequently enough it becomes the truth. Most of us understand this concept. Jim Bell jimbell(a)pacifier.com

1 0

mbanx - 128 bit SSL transactions
by Robert Hettinga 17 Dec '03

17 Dec '03

Can you say, "regulatory arbitrage"? I knew you could... Cheers, Bob Hettinga --- begin forwarded text Sender: e$(a)thumper.vmeng.com Reply-To: "networks(a)vir.com" <networks(a)vir.com> MIME-Version: 1.0 Precedence: Bulk Date: Fri, 1 Nov 1996 11:02:33 -0500 From: "networks(a)vir.com" <networks(a)vir.com> To: Multiple recipients of <e$(a)thumper.vmeng.com> Subject: mbanx - 128 bit SSL transactions I just finished reading about mbanx www.mbanx.com They're a new bank (owned by the Bank of Montreal) which offers services including bill payment and account transfers using the Internet. One of the most interesting things about their service is that they only permit transactions using Netscape with 128 bit SSL. When I heard that I immediately assumed that I had to go out and buy it, but apparently they will supply it to me for free if I don't already have it (so they said when I talked to them on the phone anyway). Unfortunately, they seem to have a $13.00 a month fee, so it's no wonder they aren't worried about giving you 128 bit Netscape. It's a shame that despite the fact that branchless banking is probably saving them a lot of money on infrastructure, they still feel it's necessary to charge a premium. However, I must add that, in the information I have, it is unclear whether the $13.00 fee is standard or whether it is an option to replace transaction charges. I've got more information coming in the mail so I'll try and keep everyone posted. Alan Majer networks(a)vir.com --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) e$, 44 Farquhar Street, Boston, MA 02131 USA "The cost of anything is the foregone alternative" -- Walter Johnson The e$ Home Page: http://www.vmeng.com/rah/

1 0

sorry I'm late...
by Perry E. Metzger 17 Dec '03

17 Dec '03

Sorry I'm about two weeks late getting the new cryptography mailing list in place. Sameer Parekh volunteered his machines at C2, and as soon as a couple of residual majordomo issues are resolved the list will be announced and go on line. I thank you all for your patience. Perry

1 0

microstock market
by Vladimir Z. Nuri 17 Dec '03

17 Dec '03

ultimately what cyberspace does in many ways is decrease the "granularity" of economic transactions. you can imagine that an economic transaction has an overhead cost associatd with it needed to manage the bureacracy of the cash transfer. the army of people that have to support check passing, such as the mailman, bankers, etc., the people in the company that have to open envelopes and punch keys, etc. ad infinitum. these vast teams/roles of people are going to vaporize to move into other aspects of the economy. increasingly, the overhead of an economic transaction will move toward the infinitesmal. this radically changes many business models. consider the stock market for example. you have a situation where it doesn' t make sense for a company to be traded on the stock market except after some threshhold has been reached. I suspect this threshhold is due directly to economics that could radically change in the near future (say a decade). what I suspect this might mean is not merely new kinds of stock markets, but a massive plethora of new forums in which business can be transacted in cyberspace. I think we are going to see many new stock exchanges as the capital moves towards the ones that most efficiently handle it. and increasingly, I think you will see very small companies have stocks. you will also see a much better means by which an investor can judge the value of a company. the assets will be more open and thoroughly revealed on public web sites of the company. increasingly the outsider will be able to "peer into" a company for investment or business purposes. the companies with the most open policies are going to be those most favored by their customers. what would be neat is if one could invest in very small companies or ideas. I suspect our economy is moving in exactly this direction. also in addition to this, I suspect that regulations governing stock transactions are going to be challenged and increasingly melt away in the long run. the open market will find its own ways of guaranteeing the safety of its transactions that will make government interference only draining or damaging. so you can imagine that our economy of today is like moving around big boulders-- you need a lot of people and organization to create economic transactions. in the future, transactions are going to decrease in granularity and you will have a system more like the flow of electricity throughout an entire system. the revolutionary implications of cyberspace have barely begun to be uncovered. ultimately it will radically change the nature of our economics and government systems just as the introduction of the printing press did in its time.

2 2

Stanford Patents
by Kent Briggs 17 Dec '03

17 Dec '03

Has anyone heard anything from the Schlafly vs PKP case? There were supposed to be patent validity hearings on Wednesday. I don't know if they are still going on, Roger hasn't updated his web page yet. Kent Briggs

1 0

NIST Crypto Notices
by John Young 17 Dec '03

17 Dec '03

Two May 13 Federal Register notices by NIST: NIST is planning to develop a FIPS for Public-Key Based Cryptographic Key Agreement and Exchange. This notice solicits comments regarding techniques for consideration specifically including RSA, Diffie-Hellman, and Elliptic Curve techniques. This standard will be for use in designing and implementing public-key based key agreement and exchange systems which Federal departments and agencies operate or which are operated for them under contract. More than one algorithm may be specified, consistent with sound security practices, to enable Federal departments and agencies enhanced flexibility in the design, implementation, and use of cryptographic systems. http://jya.com/nist051397.txt (6K) NIST is planning to develop a proposed revision to Federal Information Processing Standard 186, Digital Signature Standard. This revision would specify additional public-key based digital signature algorithms (in addition to the Digital Signature Algorithm [DSA]) for use in designing and implementing public-key based signature systems which Federal departments and agencies operate or which are operated for them under contract. The purpose of the revision will be to enable Federal departments and agencies greater flexibility, consistent with sound security practices, in the design, implementation, and use of public-key based digital signature systems. http://jya.com/dss-rev.txt (6K)

1 0

Re: Difference in terms
by Tim May 17 Dec '03

17 Dec '03

At 10:43 PM -0800 5/14/97, Bill Stewart wrote: >>Lutz Donnerhacke <lutz(a)as-node.jena.thur.de>writes: >>> key recovery is if I can get my key >>> key escrow is if you can get my key > >"Key Escrow" was "We want your keys". >"Software Key Escrow" was "OK, Clipper was a loser, but we want your keys" >"Public Key Infrastructure" was "Here, have some keys" >"Trusted Third Party" was "Hey, trust us, we want your keys" >"Key Recovery" is "OK, that didn't work, but we still want your keys" > SAFE is "All Americans deserve strong security and unlimited strength crypto, but we still want your keys." "Pro-CODE is about the right to have and export military-grade crypto, but we still want your keys." Or as Congressman J. Getalong put it, "SAFE is a step toward a future of security and prosperity. The legitimate needs of law enforcement are being met by this bill. We are good listeners of the NSA, and the NSA is a good listener to all of us. And I do mean all of us. All Americans will prosper from this new working relationship with Big Brother. War is Peace and SAFEty is liberty," --Emmanuel Goldstein There's something wrong when I'm a felon under an increasing number of laws. Only one response to the key grabbers is warranted: "Death to Tyrants!" ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^1398269 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

Express Letter
by internet＠netline.com 17 Dec '03

17 Dec '03

Hello, How are you? I have found a great way to make an honest and ethical living on the internet. I work from home using only a computer and a modem and I have very limited computer experience. If you would like a free report on this business simply read on. Entrepreneur Magazine voted "INTERNET CONSULTING" as the #1 business opportunity for 1997!! Now any business or entrepreneur can profit from advertising on the internet. So why are so few of them doing it? Because they don't know how, and there is no one to show them! This has created an incredible need for Internet Consultants! Within 4 hours of starting my Internet Consulting business, I had sold my first ad. Now the requests to place orders are flowing in. We've had to hire help to process the orders! What I do is simply show people who are currently advertising by conventional means, how we can put their message in front of over 60 million customers on the Internet. This is a low start up, easy maintenance, turn key , risk free , 100% guaranteed business. This business is WHITE HOT! The time to get in and profit from the INTERNET is NOW! Don't let the opportunity of a lifetime pass you by! For a FREE REPORT on this business (do not hit reply) simply send an e.mail to our auto responder at: hitme(a)answerme.com and you will have the packet in you e.mail box within 30 seconds or so. Best Regards Bob Thank You and Good Luck!

1 0

TEXTO - Text steganography
by nobody＠huge.cajones.com 17 Dec '03

17 Dec '03

------------------------------------ TEXTO - Text steganography ------------------------------------ Texto is a rudimentary text steganography program which transforms uuencoded or pgp ascii-armoured ascii data into English sentences. Texto text files look like something between mad libs and bad poetry, (although they do sometimes contain deep cosmic truths) and should be close enough to normal english to get past simple-minded mail scanners and to entertain readers of talk.bizarre. ------------- Perhaphs this explains why, when I tried it, it signed Paul Bradley's name to the output. _Mr._ Nobody to _you_, pal.

3 2