- cypherpunks-legacy - lists.cpunks.org

Re: airport security
by Peter Trei 17 Dec '03

17 Dec '03

Another data point: This week I flew TWA from Boston to St. Louis, then TW Express from St. Louis to Champaign, Ill, and back. I was asked for picture ID when boarding at Boston, but at no other time. I protested, and was told that my alternative was not to fly. Since I was travelling on business and my employer's dime, I did not want to risk missing the flight, so I complied. Peter Trei ptrei(a)acm.org

1 0

Re: More on Netscape
by koontz＠MasPar.COM 17 Dec '03

17 Dec '03

>It says that the commerce server supports (among others) DES and DES3 >(same as 3DES?). They list the key sizes as 64 and 192 bits >respectively. My question is, isn't DES 56 bits? (with an 8 bit salt >that would be 64 I guess), but isn't DES3 112 bits, not 192? DES keys are specified as 64 bits, of which 8 bits provide odd parity. The 192 bits would specify three independent keys (not triple DES)

2 1

I need an exportable crypto algorithm.
by Darrell Perko 17 Dec '03

17 Dec '03

Greetings; I realize that bad crypto is offensive to some here but I am in desperate need of an exportable, public-domain, general-purpose crypto algorithm. Or at least the rules for creating such. Sorry to bother y'all with this, but I am in dire straights. Thanks, Darrell Perko dperko(a)efn.org

2 1

Re: Silly technical question from a non-technical person
by droelke＠spirit.aud.alcatel.com 17 Dec '03

17 Dec '03

> > - For DES I think so, asked for others opinions, this might be the > next one to die, big project but possibly doable with lots of keys > at once > But, what is a good DES target to attack?? SSL was a great target because it is both visible and because it has a well defined open specification that made it easy to determine exactly what to attack (unlike Microsoft Access). I know someone who *used* to be in the ATM transaction business, but is no longer. Is the code from a credit card reader DES encrypted? We could be possible "tap" the serial port between the reader and the modem and get a byte stream in that manner.... but then again, my knowledge of those beasts is pretty limited. Dan ------------------------------------------------------------------ Dan Oelke Alcatel Network Systems droelke(a)aud.alcatel.com Richardson, TX http://spirit.aud.alcatel.com:8081/~droelke/

2 1

Re: I need exportable crypto revisited.
by patrick＠Verity.COM 17 Dec '03

17 Dec '03

But don't forget the International Cryptography Experiment, (ICE). You can read about it in a file available from TIS. They're trying to evolve something with pluggable authentication and encryption that will pass ITAR. Patrick _______________________________________________________________________ / These opinions are mine, and not Verity's (except by coincidence;). \ | (\ | | Patrick J. Horgan Verity Inc. \\ Have | | patrick(a)verity.com 1550 Plymouth Street \\ _ Sword | | Phone : (415)960-7600 Mountain View \\/ Will | | FAX : (415)960-7750 California 94303 _/\\ Travel | \___________________________________________________________\)__________/

1 0

Legality of the ITARs
by tcmay＠got.net 17 Dec '03

17 Dec '03

I'm not an expert on ITARs, but I'll pass along something I heard about a year or year and a half ago. At 4:58 AM 8/18/95, Lucky Green wrote: >In article <199508180030.RAA04988(a)mycroft.rand.org>, jim(a)acm.org (Jim >Gillogly) wrote: > >>> "Perry E. Metzger" <perry(a)piermont.com> writes: >>> If you have hooks for arbitrary encryption, you will find it to be >>> virtually impossible to export the product. >> >>That's my understanding also (as I told him in e-mail) but I haven't found >>any legal justification for it. > >You migh as well stop looking, because there isn't any. The brownshirts >have long ago decided that the law means what they say it does. Welcome to >reality. Lawyers within NSA are apparently of the same opinion, that the ITARs would not stand up to a court test. Carl Nicolai, the inventor of the "PhasorFone," whose case was described in Bamford's 1982 "The Puzzle Palace," once called me up to tell me that he and his lawyer were allowed to view, but not copy, files on the ITAR issue. Some memos they came across from Agency lawyers warned that any ITAR court case would likely see the ITARs overturned. (I passed this information on to Phil Karn a year or so ago, as he was starting his suit to get Schneier's stuff approved for export. I later saw a note from Lee Tien and/or John Gilmore saying they had gotten similar documents under an FOIA they did. Maybe these were the same documents Carl Nicolai saw, maybe not.) On the other hand, these comments came from an era of judicial liberalism, not the current era in which the Supremes uphold random searches of bus passengers, of high school students, etc., when "good reasons exist." It may be that the current Supremes would uphold the ITARs. Wait until furrin terrorists are found to be using exported crypto for some nefarious plot... --Tim May ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net (Got net?) | anonymous networks, digital pseudonyms, zero 408-728-0152 | knowledge, reputations, information markets, Corralitos, CA | black markets, collapse of governments. Higher Power: 2^756839 | Public Key: PGP and MailSafe available. "National borders are just speed bumps on the information superhighway."

1 0

Rant Generator
by Tom Gillman 17 Dec '03

17 Dec '03

Anybody have the URL of that rant generator that was mentioned here a couple of weeks ago. Due to unforeseen circumstances, all my annotations got lost :( Thanks, -- Tom Gillman, Unix/AIX Systems Weenie |"For a privacy advocate to determine Wells Computer Center-Ga. State Univ. |the best way to do key escrow is like (404) 651-4503 syshtg(a)gsusgi2.gsu.edu |a death penalty opponent choosing I'm not allowed to have an opinion. |between gas or electricity"-D.Banisar key to UNIX: echo '16i[q]sa[ln0=aln100%Pln100/snlbx]sbA0D4D465452snlbxq'|dc

1 0

Where is the key cracking farming software?
by shamrock＠netcom.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- With all the talk about cracking SSL, where is the cracking software? Sombody just offered me a six Pentium workstation, if I agree to give it a "real workout". I'd like to be able to say: "Sure, will do." - -- - -- Lucky Green <mailto:shamrock@netcom.com> PGP encrypted mail preferred. - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBMDQu2yoZzwIn1bdtAQF+iAF/WrvfsHBTRhh8fYfWENS0oxOUagl1GrBo PMeo+yJOa7/CN5/pl0xQTFUdusijXqxO =DiNO -----END PGP SIGNATURE-----

2 1

Key escrow agent
by fc＠all.net 17 Dec '03

17 Dec '03

Management Analytics is proud to announce it's key escrow agency. We will escrow keys for only US$1 per key. Please send your keys to us along with your $1 check or money order. -- -> See: Info-Sec Heaven at URL http://all.net Management Analytics - 216-686-0090 - PO Box 1480, Hudson, OH 44236

1 0

Re: Non-News Govt Announcement on Key Escrow
by liberty＠gate.net 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Tim May writes: <beginning snipped> >any mandatory key escrow system is not only a >massive infringement on the right of people to speak and communicate as >they wish, it is also handing the keys to the Surveillance State to the >likes of Bob Dole, Jesse Helms, Alonse D'Amato, Newt Gingrich, and William >Bennett. You left out Mr. Perot, who has a pench nt for investigation [and even "operations" ] with his own family, business & money, and has not ruled out another run for the presidency this time. Imagine this authoritarian statist in charge of the whole alphabet of U.S. intelligence agencies run by *tax* money... Chilling! [I would ordinarily make an "all ears" joke now.] <g> ... On another subject, NPR announcement confirmed at 6:38AM today. Key "escrow" with a private company [exact qualifications undefined, but amenable to service of search warrants] but export of stronger crypto now permitted. No U.S. key escrow for unexported cryptography [yet]. <sigh> JMR -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Freedom isn't Freeh iQCVAwUBMDRvYm1lp8bpvW01AQFotwP+LITpSdGjRuyBdTqP7n70HrkmsMAPqeK0 MQgOVqbmDT4N8KwLP80UIkCIRqSBXFq4aOTEld+ImCRhN4ivfmAd332DaPbhCXS6 nvEJXfXli6KumaSMLQjmFRfIvcgAHz5Y7NELpHDnI+gjKgixWPEZd7/8r7eL3uhh UUovA9OLiWk= =LOEF -----END PGP SIGNATURE----- Regards, Jim Ray "The important thing is not to stop questioning. Curiosity has its own reason for existing. One cannot help but be in awe when he contemplates the mysteries of eternity, of life, of the marvelous structures of reality. It is enough if one merely tries to comprehend a little of this mystery every day. Never lose a holy curiosity." -- Albert Einstein ------------------------------------------------------------------------ PGP key Fingerprint 51 5D A2 C3 92 2C 56 BE 53 2D 9C A1 B3 50 C9 C8 Key id. # E9BD6D35 ------------------------------------------------------------------------ Support the Phil Zimmermann (Author of PGP) Legal Defense Fund! email: zldf(a)clark.net or visit http://www.netresponse.com/zldf ________________________________________________________________________

1 0