- cypherpunks-legacy - lists.cpunks.org

Re: Attacking Clipper with timing info?
by Herb Sutter 17 Dec '03

17 Dec '03

At 20:10 12.13.1995 CST, Loren James Rittle wrote: >If it could be shown that Clipper chips require a fixed amount >of time/current to encode/decode traffic, then we could conclude >one of the following: > >(B1) The NSA knew about the issue and compensated for it. >(B2) The NSA didn't know about the issue and got lucky. > >I discount B2 as a valid option. Actually, if the answer was B1, >my respect for the NSA would creep up a notch. :-) Remember those carefully-chosen S-box numbers for DES and how, years later, how they just happened to turn out to be optimal for defending against the newly-discovered (in non-military circles) technique of differential cryptanalysis... :-) ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Herb Sutter (herbs(a)connobj.com) Connected Object Solutions 2228 Urwin - Suite 102 voice 416-618-0184 http://www.connobj.com/ Oakville ON Canada L6L 2T2 fax 905-847-6019

1 0

Timing attack against RSA
by Hal 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Here is how I gather the timing attack against RSA decryption would work. This is the chosen-ciphertext attack of Paul Kocher's. You know n, the public modulus; suppose it is 512 bits. You want to know p and q, its prime factors. You know the details of the server's implementation of RSA. The server will do a decryption of the RSA message you send it, and give you some reply shortly after it is finished. You are going to send it bogus messages. Normally, most random messages will encrypt under RSA to numbers of about 512 bits, but you will send it ciphertext which is about 256 bits long. You are going to try to figure out the value of p. The server's algorithm is to take the ciphertext c, and first do: cp = c mod p cq = c mod q It will then do two modular exponentiations, mod p and mod q, and do a few more calculations, then return some result to you. The attack is to try to choose c to be about the same size as p, with the assumption being that if c is a bit less than p then c mod p will be fast since it doesn't have to do anything, while if c is somewhat larger than p then c mod p will be a little slower, since it will have to at least subtract p from c. Paul Kocher has measured this timing difference as 17 microseconds on one particular implementation. This is not going to be an easy time difference to measure. In addition to doing the c mod p step, the algorithm also does all those other things: the c mod q, the two RSA calculations, as well as whatever overhead is involved in the server's operation and the communication link. The variations due to the RSA calculations themselves will have a standard deviation of about 250 microseconds, based on Paul's numbers (higher than his reported value because two exponentiations are done, plus some other work). So this is a minimum amount of "noise" we must try to see through even if everything else is instantaneous. This might be the situation in the case of a hardwware token which is doing RSA decryptions with a secret key. The first step will be to try to determine the length of p. For this we will send in c values which are around 256 bits long. We might start with some 250 bit values and some 260 bit values, hoping that p is in that range. We do a whole lot of these, and we take the average time for them. If p is between 250 and 260 bits long, then the 260 bit values should take at least 17 microseconds more time to calculate on the average than the 250 bit values. One interesting question is how many samples we would have to take in order to detect this difference. One way to consider it is to ask, given that the samples have a standard deviation of about 250 microseconds, how many samples do we have to take to reliably estimate the mean within an accuracy of about 10 microseconds, or 1/25 of a standard deviation? According to my limited knowledge of statistics, if we want to be right about 90% or 95% of the time, we need to have sqrt(number-of-samples) * 1/25 be > 3, or number-of-samples should be about 5000. (Take this with a large grain of salt!) So we will have to do some thousands of samples in order to average out the noise and get our mean this accurate, with good confidence. Once we have done these tests, we have determined that p is between our two values. Now we can sub-divide the interval and poll with values which are, say, 255 bits long. Again, we would have to do enough polls to determine the true mean time to within about 10 microseconds. After we repeat this three or four times, we will know the bit length of p; in effect, we know its first bit. Now we can continue the divide and bracket procedure. Each time, we must poll many times with c values whose most significant bits are halfway between the two bracketing values which we know contain p. Each such sequence of about 5000 polls yields us one more bit of p. We repeat this about 250 times, and we will have p, from which we can derive q, and we have broken the RSA key. So, taking the estimate above of 5000 or so samples to get a bit of p, we will have to do about a million tests total to find p. (BTW, in Paul's implementation it took about 1/3 second to do a decryption, so you're looking at about 100 days of solid work to do the job.) This algorithm has some self-correcting features but it is not completely so. Suppose p's first bits are actually 1011. We have determined that it is between 1000 and 1100, and we want the 3rd bit. We poll with values which start with 1010, and (since with 90% accuracy we are wrong 10% of the time) we mistakenly conclude that the mean is the higher value, hence that p is less than 1010 and must start as 100X. We continue the procedure, and we will find that our new middle values are consistently less than p, so we gradually work out our estimate as 10011111... Eventually this train of 1's might persuade us that we may have made a mistake back there, so we would go back and poll again to try to verify our earlier results. (Of course, if another mistake happens during the 1's that will confuse us further...) Doing the attack across a network will be much more difficult because there will be a lot more variation in the turnaround time. This will have the effect of increasing the standard deviation far above a quarter millisecond, up by probably at least an order of magnitude if not two or more. Now we have to estimate a mean to within not 1/25, but maybe 1/1000 of a standard deviation, or worse. This would increase the total number of samples necessary from a million up to the level of billions or trillions. One final note: two cases to which we might want to apply this would be Netscape's SSL as implemented by its secure servers, and DigiCash's bank software. (I know Lucky said that DigiCash is immune to this attack, but maybe we would want to test it to see.) In either case, since we are sending a bogus 256 bit value, the data which decrypts will not be valid. In the case of SSL we will probably get an error packet or maybe a broken connection to tell us when it has finished the decryption. In the case of DigiCash, it does not need to do anything with the value it signs other than return it, so we will probably get a return packet. However, it is not valid cash. In order to convince DigiCash to send us this packet, it has to have deducted something from our account, at least a penny. If it takes a billion connections to do the attack (which I think is an underestimate, corresponding to about a 10 millisecond standard deviation on the timing values), that will cost 10 million dollars. So you better have pretty deep pockets to think about mounting this attack in that case. For SSL, misses don't cost you anything, so maybe it would be worth trying, if you have a good, low-latency connection and a server with a light load. The full attack would take too long but just determining the length of p would be quite a coup. Actually of course you would have to do some more research before mounting this attack; specifically, you'd want to know more about the timing of the software so you could estimate the costs of the mod p operation you are trying to catch. If the number ends up being much less than 17 microseconds the attack gets that much harder. Hal -----BEGIN PGP SIGNATURE----- Version: 2.6 iQBVAwUBMM961RnMLJtOy9MBAQFBgAH/WQTMSvRySqNXpfnI4kNXUKQPAleV4NUL ciaDg9VrY8OOJ0cYO8aZ+RnGn+BKp7WFbIkIKFDO3mSE/o9Be2uI7w== =ijGI -----END PGP SIGNATURE-----

1 0

NON_ice
by John Young 17 Dec '03

17 Dec '03

Fueling Asia-phobia of techno-insurrection, The Wash Post today offers opposing views of Singapore: "City of the Future: What American Can Learn form Post- Liberal Singapore;" and, "Big Brother's Hometown: The Country is a Model, All Right -- of Dressed-Up Dictatorship." The first sets out the virtues of paternalism, and quotes eminently powerful Lee Kuan Yew, "The ideas of individual supremacy and the right to free expression, when carried to excess, have not worked. They have made it difficult to keep American society cohesive. Asia can see it is not working. ... The top 3 to 5 percent of a society can handle this free-for-all, this clash of ideas. If you do this with the whole mass, you'll have a mess. In this vein, I say, let them have the Internet." In the second, Lee's own OCAF Agincourt Project is detailed, "I would isolate the leaders, the trouble-makers, get them exposed, cut them down to size, ridicule them, so that everybody understands that it's not such a clever thing to do. Governing does not mean just being pleasant. If you want a pleasant result, just as with children, you cannot just be pleasant and nice." Then there is "Angry, White Rebels are Homeless by Choice," a Page One jaw-dropper about "gutter punks," scion Okies of all America's families: Their appearance and their life-style seem like a nightmare to many of their parents and much of society, as if all the promise of youth in America had been turned inside out, producing these nihilistic, angry, ironic spawn all dressed in black, the end result -- perhaps a bill coming due -- of decades of family disintegration, suburban boredom and national cynicism. Filth has stitched the anarchist patch into the palm of his hand. "Crusty punks" never bathe and say the police cannot make an arrest because of body odor. "I'm a paint head," said Riff Raff, inhaling spray paint. Becca said, "People are afraid of us, but we're not the ones who are scary." Only for the beyond-Singapore, truly loving parent. NON_ice (for all)

1 0

Re: Jim Quinn interview of James Norman (edited)
by Ed Carp (ecarp＠netcom.com) 17 Dec '03

17 Dec '03

> To: ecarp(a)netcom.com > Cc: cypherpunks(a)toad.com > Subject: Re: Jim Quinn interview of James Norman (edited) > Reply-to: perry(a)piermont.com > Date: Tue, 12 Dec 1995 14:53:14 -0500 > From: "Perry E. Metzger" <perry(a)piermont.com> > > According to the headers, you, Mr. Carp, forwarded this to > Cypherpunks, when it was obviously available to those that wanted to > read it on a variety of other mailing lists. > > Please don't continue doing this. > > Jon Roland writes: > > The following is a Radio Interview between James Norman, > > formerly Senior Editor of Forbes Magazine and now with Media > > Bypass Magazine and Jim Quinn, DJ of WRRK 96.9 FM in Pittsburgh. > > In this interview from December 7th, they discuss issues of > > national importance and STUNNING IMPACT. Essentially they give > > out the reason for Vincent Foster's Death, and the fact that > > the "resignations" of the Congresspersons are NOT for policy > > reasons but because they have been caught with millions in > > corrupt funds in Swiss Banks. Read this to learn what the > > "mainstream media" doesn't ever tell you... Unfortunately, even I sometimes hit the wrong button on my mailer.

1 0

PGP Interoperability?
by marina kats 17 Dec '03

17 Dec '03

Can anyone out there vouch for the interoperability of PGP 2.6 ui with versions of PGP available in USA from MIT & Viacrypt. What about the legal issue ? Is it legal for a US citizen to encrypt or check signatures with a 2.6ui public key ? Would sending a public key out of the US be reagarded as export by ITAR? Thanks Geoff Klein.

1 0

Re: MY DEPARTURE, MODERA
by DAVE HODGINS 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- AB> My main complaints about the `filtering' service forced upon the list AB> readership are that: AB> 1. It was done to the main list! If cypherpunks were left unchanged, AB> and a `cypherpunks-edited' were created I wouldn't have a problem, it AB> would be just another filtered list. However there are already As a lurker (I've only sent 4 messages to the list in the last 3 years), I agree completely with Adam Back's post. I'd also like to point out, that I rarely read all of the messages, and tend to select which messages to read, based on the subject. Because of this, I missed the message announcing that the moderation had started, and that there was a new, unedited list. I didn't realize the moderation had started, until I noticed the lack of autobot insults, and then looked at some of the messages from the moderation thread. I get the list via email, through a pcboard bbs, mixed in with all of my personal email. I wrote a program, to separate everything from the list into separate folder. Switching over to the unedited list, will require a bit more for me, then just unsubscribe/subscribe. I'll wait and see if the moderation continues on the main list. If it does, I'll go through the bother of switching to the unedited list. Regards, Dave Hodgins. -----BEGIN PGP SIGNATURE----- Version: 2.6.3i Charset: cp850 iQEVAwUBMveOxYs+asmeZwNpAQEDxwf+O0NjHdHdD3zdu6JHtF+ESmQHkmknmZos INN9YQQPmFEsn5Dd3CEsr9YAcqgJUUVGoStcJqM9RQ2SeN0ASa/aRoXICGWMxjuO crV18nSNL6ZJ92/V/Q4/LDe7O8zMIS3w86WRTH5JEhnrN+EabH5QnlpF9CNPRwAD TsS9I/IiXKNtVUxMUvTDB93DHEDGkkFcqiNUfGPvDq8cHeSDVqrZ1EQNOOhDkglY rk2/+E7IleUIv+b7PgoDk5Z8T5n3eNJBqAnOC9qWJsJPE7eZHXX9xZO7sod9c8IK p/SthYca2tI2/7yt3wW4oQP/FT5mIXmWECy84l9+Mlb78P1eq7ZyCQ== =Mv14 -----END PGP SIGNATURE----- --- ~ RM 1.31 0820 ~ Internet:Dave.Hodgins@Westonia.com Rime->1347 Fido 1:250/636

1 0

Re: Netscape announces position against GAK
by amp 17 Dec '03

17 Dec '03

-- [ From: amp * EMC.Ver #2.3 ] -- -----BEGIN PGP SIGNED MESSAGE----- TM> I for one am satisfied--and even pleased--with the Netscape TM> position on GAK. TM> It remains to be seen how steadfast Netscape, as the major player in TM> the Web browser business, remains in the face of (likely) pressure TM> from the government. i'm not entirely satisfied with netscape's response, but then, i didn't expect to be. i _expect_ weasling from corporations that have made the 'big time'. this is the way life is i suppose. what i'd like to see would be more companies that have an interest in the security of net-based transations in their best interest, (which would be any company that intends to do any business on the net) come out _forcefully_ for strong crypto. the ability of hackers to penetrate the computers of the net would be greatly curtailed by universal crypto. is there not a strong national interest in the integrity of the net in general and financial interactions in particular? looking forward, which politicians and bureaucrats are loathe to do, commerce and corporate dealings across the net will only increase. what we need to do is get large corporations to recognise that privacy is important to _them_. of course, many already know that privacy is important to them. why else would we have a body of law concerning "trade secrets"? i work for a fairly large corporation. this makes finding who to talk to about this difficult. i'm working on it though. perhaps some of you out there can consider ways to convince those in positions of authority in your company to realize that crypto technology works toward their own best interest. they _must_ speak to this because it is business that runs this world of ours. TM> It seems to me that we have have been quick to criticize TM> Netscape--which is good, the quickness part--and thus we should be TM> equally quick to praise them. To be sure, various of us might've TM> written the Netscape position statement slightly differently, but TM> this does not change the basic point: that Netscape has come out TM> against the Administration's position on GAK. TM> For this they deserve our praise. indeed. netscape deserves praise for including 128-bit encryption in their products in the first place. while i'd like to see them stand up and tell big brother to fuck off and die, i am appreciative of what they've done so far. i'd like to see a representative of netscape on nightline or the noghtly news hold up a floppy and say "this floppy contains an encryption program that the u.s. government will not let us export. it was downloaded from the internet for free by an executive of a multinational corporation based in germany who wanted to know why i couldn't sell him a program that was as cryptologically secure as it is. my answer was that the u.s. government will not let me." similar demonstrations of the lunacy of itar are left to your imagination. ============================ these views are my own. no one else in their right mind would hold them. amp <0003701548(a)mcimail.com> (since 10/31/88) <alan.pugh(a)internetmci.com> Current PGP Key = 57957C9D December 13, 1995 18:51 -----BEGIN PGP SIGNATURE----- Version: 2.6.2 iQEVAwUBMM9nH4dTfgZXlXydAQGeKgf/XV2sAD7aklD+QfmcSUWReaH5jviADbMV /wIv6JW4iSOytOa36K5VEXCuep6AUQTIiEflZ4OPU4IXAOKkF3UAxJWoSFY/zT9w Kgb16I7tjDHohbc3tFikZ3z1Do3vLScxG7ll3CQOfTIr2KIxyN2/XOYkP1fsdvHr TyBAO4S/ERq1v3BKZJQ1+LskBvPhjtivWs3xU+TBxT9Fc8Op6GmvFyRgjmwMoRfQ orloUJuLbWWolnFvJMqyAK6pT5+QXZ3eH9ZguGmaLSHS8549Ts+LCirnBxI3HqZ4 sfD9jNRb3HiIG0gowXKU4lWTD4hiV+Se63NKfQYtj+qRfZ1wK+vd5A== =6FyB -----END PGP SIGNATURE-----

1 0

Authenication and CIRC
by ljanke＠direct.ca 17 Dec '03

17 Dec '03

Does anyone know of versions of CIRC which support authenication? The version I pulled off csua does not even for the initial 3DES key exchange.

1 0

Question about the Timing Attack
by James Black 17 Dec '03

17 Dec '03

Hello, I have looked over the paper, but I will look more closely this weekend (finals going on right now). The main question I have, since my programs run over a network with dumb terminals is this: If someone can get the timing information why would they need it, since they can read the message. So how can this attacker get the timing info without being able to read the message (unencrypted)? Thanx. ========================================================================== James Black (Comp Sci/Comp Eng sophomore) e-mail: black(a)eng.usf.edu http://www.eng.usf.edu/~black/index.html **************************************************************************

1 0

RE: The Doors: Strange Days #3
by doorlist＠doors.com 17 Dec '03

17 Dec '03

WELCOME to The Doors Collectors Magazines Strange Days News Emailer Vol. 3 The Celebration Has Just Begun! STRANGE DAYS MEMORABILIA NEWS ITEMS: Congratulations to the five Doors Autographed Box Set winners! These Doors box sets were signed by Ray, John, and Robby on the front cover of the inside book and were given away to random people from our Strange Days Email List. The winners were: Jim Kearns (Camillus, NY), Ainslee Rogers (Hamilton, Canada), Suzie Williams (Harrogate, TN), and Barry Abbott (Ermington, Austrailia), and Laura Pritchett (Missoula, MT). This contest added over 1,000 people to our email list, so watch out for promotions similar to this in the future! The Doors Tour Equipment from our last emailer is still available. One envious person on the net is saying that these items aren't authentic... Vince Treanor (The Doors Road Manager) wanted me to pass along the message that he would be happy to talk to any prospective buyers who believe this bullshit. Call me to set up a three way call to Vince. Prospective buyers only please! Recently lots of new memorabilia items have turned up due to the release of the box set. The rest of this issue of the Strange Days News Emailer is dedicated solely to new items that are both "Wanted" and are "For Sale". If you arent into collecting Doors memorabilia, you still might want to read on; Ive tried to put a little news into each entry. Enjoy! For more info about how to order, please go to: http://www.doors.com/door_mem/ STRANGE DAYS MEMORABILIA ITEMS FOR SALE: *** The Doors Albums on Postage Stamps! Late last month the island of St. Vincent issued a set of six stamps which commemorated the 30th anniversary of The Doors first LP. Never before has any country issued such a complete set of stamps to honor an artists complete catalogue of studio material before! Each stamp for each Doors album! The Doors Collectors Magazine has a number of these stamp sets available right now for $10 per sheet (eight stamps per sheet.) While supplies last we will also give you a FREE collector portfolio ($20 value) to keep your stamps in if you buy the complete set of six stamps at the same time ($60 + $4.50 s&h). For more information, please see: http://www.doors.com/door_mem/other/sv_stamp.html *** Autographed Box Sets (w/ Ray, John, and Robbys sigs) We have a few of them available for sale at $175 plus postage. Please email first because our supply wont last long! *** "A New Epitaph For Pere-Lachaise" Poster with poem by Jan Eloise Morris. This 24x36 poster is in its fourth year of world-wide distribution. The photograph was taken in 1968 by Doors photographer, Paul Ferrara. Jim was captured in a rare moment with sunlight falling on his shoulders in front of the Observatory in Griffith Park in Los Angeles, California. The poster's publication in 1994 marked the only time another artist's poetry has been authorized to appear with Morrison's image. Jans association with The Doors Collectors Magazine affords us the exclusive opportunity to offer signed, dated copies only through this web site. Price: $20 includes shipping U.S. (please add $5 for delivery outside of the U.S.) For more information, please see: http://www.doors.com/door_mem/posters/epitaph.html *** "My Eyes Have Seen You" The most visually important book on The Doors that was ever published is now available through The Doors Collectors Magazine! This limited edition book (of 1,500 copies) was put together by Jerry Prochnicky (author, Break On Through) and Joe Russo (lead singer, The Soft Parade). 150 pages of both color and B&W photos. Highly recommended! Price: $20 (plus $4.50 s&h) For more information, please see: http://www.doors.com/door_mem/books/myeyes.html *** Autographed 5" x 7" B&W Promotional Photo of The Doors signed by all four Doors: Given away to members of The Doors official fan club back in 1968. Very rare! Framed. Excellent condition. While some of these photos have been suspect to not being all theyre cracked up to be, this one comes with Doors Collectors Magazine Guarantee & Certificate of Authenticity. Price: $2,500 (plus $4.50 s&h) *** Original "Jim Morrison Film Festival" / HWY Poster Even if you dont want (or cant afford) this poster, you have to check it out! It is the most incredible original Jim Morrison poster ever made and one of the rarest! This poster was folded as it was stored so it does have damage, but looks great framed even still. Price: $2,200 (plus $4.50 s&h) For more information, please see: http://www.doors.com/door_mem/posters/hwyposter.html *** An American Prayer Acetate. We have a private collection that we are offering for sale which includes test pressings of An American Prayer LP. These copies came from someone who was directly responsible for many production decisions on the An American Prayer LP release. Acetates are temporary albums good for playing only a few times that are necessary to check how the sound will be when the tape gets pressed onto the actual vinyl. There are probably only these copies for the entire An American Prayer release in existence! Both have their original Capital Records Mastering Jackets and are individually are described below: Copy #1: dated 9-20-78 Exc. Condition. One double sided album that contains all songs. Price $500 (plus $4.50 s&h) Copy #2: dated 10-13-78 Exc. Condition. A pair of two single sided albums that are missing two songs on each side. Price: $650 (plus $4.50 s&h) For a complete listing of ALL OTHER items from this same private collection, check out: http://www.doors.com/door_mem/museum/private_collection.html *** The Church of The Doors Deadly Doorknell If youre a hard core Doors fan youll remember former Church of The Doors High Mojomuck, Anthony Spurlock when he made headlines in 1992 inside Newsweek magazine. He also made news again when he single handedly thwarted off a public attack from radio station evangelist, Bob Larson. Sadly after this the church closed its doors forever. For years Ive been trying to get permission to reprint these. Finally Ive done it! You can now obtain quality reprints direct from the masters of their best (and last) two issues (Spring 1992 & Winter 1992-93) for the same $5 each (plus postage) that they originally cost. For more information on The Church, check out the new article on our websites On-Line Magazine written back in 1993 for our first printed magazine by their High Mojomuck, Anthony Spurlock located at: http://www.doors.com/magazine/ To read more about the actual Church of the Doors fanzines (The Deadly Doorknell) go to: http://www.doors.com/door_mem/fanzines *** Oakley Krieger Band performing LIVE w/ Robby Krieger at the Whisky-A-Go-Go in Los Angeles (3-15-97) It's their complete performance on videoand what a great performance! The OK Band features Robby Kriegers son Waylon on guitars and Berry Oakleys son, Berry Oakley Jr. on vocals. Videotaped and produced by the OK Band, this electrifying performance is now available on video tapes that are autographed on their label by both Waylon and Berry! Price: $25 (plus $4.50 s&h) Autographed copies available at no extra charge only while supplies last! For more information, please go to: http://www.doors.com/door_mem/videos/OKBand.html *** FREE LIVE SHOW TAPE*** During the months of February & March if you mention this ad, we will give one FREE 90 minute cassette volume from our trade list with every $100 spent on Doors MEMORABILIA from our list at: http://www.doors.com/door_mem/ Or you can check out our list of LIVESHOW audio cassette tapes for trade at: http://www.doors.com/liveshow/ *** ATTENTION EUROPEAN DOORS FANS*** We now have capabilities to dub our trade videos directly in PAL at no additional trade value. *** Original hard cover copies of Wild Child by Linda Ashcroft were pulled from the shelves in the UK when its controversial writings were challenged in court. Linda informed The Doors Collectors Magazine that her publisher will be re-issuing an edited book in paperback form sometime in mid-June. If any of you have *hardcover copies* for sale, please email me! *** MEMORABILIA ITEMS WANTED: If you have any of these items and are interested in selling them at a reasonable price or if you have an item that youre looking for and would like to have it included on our next "Want List", please call or email me your price or price range! I have tentative buyers for all of the following items. BOOKS WANTED "Riders On The Storm" Audio Book "Jim Morrison & The Doors" book by Mike Jahn "The American Night" Hard Cover (only) book by Jim Morrison "Wild Child" hard cover book by Linda Ashcroft All privately published editions of all three of Morrisons poetry books LPS WANTED (Exc condition or better only) Doors: "13" LP Doors: "Absolutely Live" LP Doors: "Full Circle" LP Doors: "Other Voices" LP Doors: "Strange Days" LP (mono issue only) Doors: "The Doors" LP (mono issue only) Doors: "Waiting For The Sun" LP (mono issue only) Doors: "Weird Scenes Inside The Goldmine" LP Doors: "LA Woman" LP (original issue only) Doors: "The Doors movie soundtrack" LP Ray Manzareks "Carmina Burana" LP Ray Manzareks "Nite City Golden Days Diamond Nights" LP Ray Manzareks "Nite City" LP "Comfortable Chair" LP "Phantoms Divine Comedy" LP "Phantoms Lost Album" LP Any PROMO issued LPs for The Doors or the solo members OTHER DOORS ITEMS WANTED: 1968 Doors Tour Book All Doors Bootleg LPs and CDs Doors RIAA Gold & Platinum Awards "Tribute to Jim Morrison" Video "Dance On Fire" Video Doors Tickets or Ticket Stubs (esp. Miami 69) All Doors 45s that have Picture Sleeves (both foreign & domestic) Any Doors 8-Track Tapes (exc cond. only) OTHER NON-DOORS ITEMS WANTED: Milkwood: "Hows The Weather" LP 3-D Stereo Cameras or Projectors 3-D Stereo Cards or Slides Collectable Cameras THIS IS THE END MY FRIEND... TILL NEXT TIME! Kerry (kerry(a)doors.com) The Doors Collectors Magazine c/o TDM Inc PO Box 1441 Orem, UT 84059 *********** Thanks you for reading The Doors Collectors Magazine's Strange Days Email Newsletter. It is sent ONLY to subscribers. If you were subscribed by someone other than yourself and wish to be removed from our list please 1) accept our apologies and 2) return this message back to doorlist(a)doors.com with "REMOVE" in the subject line or go to http://www.doors.com/cgi-bin/email_list.cgi and unsubscribe. ***********

1 0