- cypherpunks-legacy - lists.cpunks.org

Re: Digsig in Germany for RX?
by elbert2＠darmstadt.gmd.de 17 Dec '03

17 Dec '03

(see Miburi-san«s posting for a good summary of Bruno Struif«s talk) <wex(a)media.mit.edu> asked: > >What kind(s) of encryption are being used to protect/sign this information? well, DES and RSA, of course. The smartcard's operating system provides this, plus encrypted communication to the smartcardreader and a filesystem, for keys and payload data.

1 0

Re: STEALTH OCEANS
by Matt Thomlinson 17 Dec '03

17 Dec '03

Sergey Goldgaber <sergey(a)delbruck.pharm.sunysb.edu> writes: >> might work, except for the fact that fragmentation _does_ go on, and when >> you were to write files to the drive (heck, I do every time I start up >> windows and write a huge temp swapfile) you're going to be playing >> roulette with your data. >This problem is solved by simply using a utility that writes directly to the >disk (exactly in the specified sectors, in the specified order), instead >of letting DOS fragment your disk. I've been talking to Sergey behind the scenes, and I think I understand what our miscommunication was: he is proposing this type of technique ONLY for removable-type media, e.g. floppies. To store this type of data on your harddrive would be to dedicate your harddrive to stego. This was my argument all along; what we failed to connect on was the fact that only floppies are involved. With floppies, every write *can* be controlled and the data would be relatively safe (and obscure, for that matter). This correction is being posted to the list because his original post said nothing about removable media. mt Matt Thomlinson Say no to the Wiretap Chip! University of Washington, Seattle, Washington. Internet: phantom(a)u.washington.edu phone: (206) 548-9804 PGP 2.2 key available via email or finger phantom(a)hardy.u.washington.edu

2 1

Stealth PGP and Stegonagraphy (Summary)
by Sergey Goldgaber 17 Dec '03

17 Dec '03

In order to hide a Stealth PGP (or equivalent) encrypted "noise" file effectively one may follow the steps outlined below: 1 Embed it in "structured garbage" such as is present normally on the deleted portions of the disk. This can be accomplished by using a stegonagraphy program or by splitting the file into small segments and scattering them among "structured garbage". 2 Write the resulting "structured garbage"/noise combination directly to disk. This can be accomplished by using a normal disk-sector editor utility. 3 Keep track of the exact location and size of the file if you want to retrieve it later. Keep this information secure. 4 Modify the FAT (or equivalent) to mark the sectors you've written to as "FREE", "BAD", or "DELETED" (if necessary). In order to retrieve and reconstruct one's file simply reverse steps 2 and 1. For a more detailed discussion of the above method, see the associated message, entitled "Stealth PGP and Stegonagraphy (LONG)". Sergey

1 0

[CODE] Pay-per-use WWW & Mosaic?
by paul＠poboy.b17c.ingr.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I want to make a crossbreed between NCSA's httpd 1.1- which already supports passing PGP signed/encrypted messages between client and server- and Magic Money. The result: a pay-to-view information service. It is uncertain about when I'll get around to it, since my free time is already being spent working on the Mac version of Nautilus. If anyone's interested, or if any of our protocolmeisters (yes, that's you, Eric & Hal!) have ideas, bring 'em on. - -Paul - -- Paul Robichaux, KD4JZG | "Let he who is without sin cast the first perobich(a)ingr.com | pointer." - Owen Harnett Intergraph Federal Systems | Be a cryptography user- ask me how. Of course I don't speak for Intergraph. -----BEGIN PGP SIGNATURE----- Version: 2.3a iQCVAgUBLWzp7yA78To+806NAQHj/QP9HttikpI7rwtk//J/azu4P+KB1BM9Fa/2 JrIAsUt7yY3fpuJSeuHHq9919zx8kBdApYDfmcs8rr1Q5BQM2ABWZprQktBDUKop LcMIPh/+Tv2vav15Nbb2I2OoCwmJLb8Qc9YG+HRvzNfX7Xn92ihjleh0h/TJZXaE GACHMCMHCLE= =iWcr -----END PGP SIGNATURE-----

1 0

Re: Infomercial, Clipper
by tomh＠bambi.ccs.fau.edu 17 Dec '03

17 Dec '03

>Tom Holroyd says: >> Most people couldn't care less. They don't encrypt data, and will >> never use a clipperphone. The FBI can *already* listen to all their >> phone calls and see all their medical records. Why should people >> do anything to protect something they don't have anyway? Perry says: >I disagree that secure phones don't have an extensive market. If they were >cheap enough, people would want the feature just for the hell of it. I'd >say that most people would pick up a cryptophone if it only costs a couple >bucks more and is transparent to use. And if the FBI could listen in, it would be *no different* from what they have today. The point is, Clipper does not take anything away from most people. They might get a Clipperphone if they thought the building superintendant was hiding in the phone closet listening in (thus getting some real value from the thing), but they aren't hiding from the FBI today, and they won't care if the FBI might listen in tomorrow, too. Note that I'm not saying that Clipper isn't the tip of an iceberg giving the spooks bigbrother-like powers. All I'm saying is, you won't be able to convince Joe Public that he's losing anything. If they start arresting people for using PGP, that's another problem, and Joe Public won't care about that, either.

1 0

An Australian Clipper!
by Peter Murphy 17 Dec '03

17 Dec '03

Does anyone know if there is any proposals (whether tentative or as a bill) to introduce some equivalent of Clipper into Australia. I have only heard about it when my cryptology lecturer alluded to it. When I pressed him further, he said that he didn't have any hard information, but noted that the Australian government were looking at the American Clipper proposal with some interest. I find this very disquieting. Any comments or information would be appreciated. Thank you. Peter Murphy. (pkm(a)axiom.uq.oz.au)

1 0

Euro Key Escrow
by Ben Laurie 17 Dec '03

17 Dec '03

Someone, somewhere, posted a rumour that Europe was about to go for a key escrow scheme known as "Royal Holloway". I have done a little research and gleaned the following: It is, apparently, true that the EC is considering schemes for key escrow, by "trusted third parties" (trusted by who, I'd like to know?). "Royal Holloway" is one of these schemes. It is named after the college of origin, if anyone cares. It essentially revolves around each pair of TTPs sharing two out of three parts of a key, and generating the third part for each of their users. The idea is that either of the TTPs who generated keys for an encrypted message exchange can decode it (by using the private key of their "client" and the public key of the other TTP's "client"). Full details can be found at: ftp://ftp.dcs.rhbnc.ac.uk/pub/Chris.Mitchell/istr_a2.ps This is in PostScript. I'm not aware of any plain text versions. I'm informed that this is likely to be introduced into EC legislation, though my understanding is that members are not required to actually incorporate the legislation. No doubt France will embrace it with happy shouts. Of course, it is our duty as netizens to resist this kind of rubbish, and I encourage you to write to your MP/EuroMP (or local equivalent). Cheers, Ben. -- Ben Laurie Phone: +44 (181) 994 6435 Email: ben(a)algroup.co.uk Freelance Consultant and Fax: +44 (181) 994 6472 Technical Director URL: http://www.algroup.co.uk/Apache-SSL A.L. Digital Ltd, Apache Group member (http://www.apache.org) London, England. Apache-SSL author

2 1

Clinton Uses E-Mail to Respond to Swedish Prime Minister Feb 18 (fwd)
by geoffw＠internex.net 17 Dec '03

17 Dec '03

Subject: 2532 Clinton Uses E-Mail to Respond to Swedish Prime Minister Feb 18 Clinton Uses E-Mail to Respond to Swedish Prime Minister Feb 18 SUPERHIGHWAY REPORT HPCwire ============================================================================= Washington, D.C. -- President Clinton exchanged the first-ever electronic message with another head of government on February 4. According to reports from the Associated Press, the White House said the computer messages, commonly called E-mail, started with a "Dear Bill" electronic letter from Swedish Prime Minister Carl Bildt. Clinton responded the next day with a "Dear Carl" E-Mail. In his message, AP reports, Bildt said he was testing the global Internet system. He congratulated Clinton on ending the trade embargo on Vietnam and said he will take up the issue of Americans taken prisoner or missing in action in that country when he visits Hanoi in April. "Sweden is -- as you know -- one of the leading countries in the world in the field of telecommunications, and it is only appropriate that we should be among the first to use the Internet also for political contacts and communications around the globe, Yours, Carl." Bildt concluded. Clinton's reply -- "Dear Carl: "I appreciate your support for my decision to end the trade embargo on Vietnam and thank you for all that Sweden has done on the question of the POW-MIAS. I share your enthusiasm for the potential of emerging communications technologies. This demonstration of electronic communications is an important step toward building a global information superhighway. Sincerely, Bill." ***************************************************************************** H P C W I R E S P O N S O R S Product specifications and company information in this section are available to both subscribers and non-subscribers. 901) ANS 902) IBM Corp. 904) Intel SSD 905) Maximum Strategy 906) nCUBE 907) Digital Equipment 909) Fujitsu America 912) Avalon Computer 914) Applied Parallel Res. 915) Genias Software 916) MasPar Computer 919) Transtech Parallel 921) Cray Research Inc. ***************************************************************************** Copyright 1993 HPCwire. To receive the weekly HPC Select News Bulletin at no charge, send e-mail to "trial(a)hpcwire.ans.net". ----- End Included Message -----

1 0

Re: Censorship in Western Australia
by linefeed＠juno.com 17 Dec '03

17 Dec '03

please!!!!!!!

1 0

Rising dishonesty level
by Brad Dolan 17 Dec '03

17 Dec '03

jimn8(a)netcom.com remarks about the rising level of dishonesty in (presumably) media/political circles: *It's bad* I once had a faint hope that a change in administrations would reverse the tide. I'm over that now. People from eastern Europe recognize a lot of what they see developing here, as a recent poster noted. jimn8 further wonders if anybody knows a better country to live in: I know of several that are less intrusive in your private affairs. Unfortunately, it's hard for an American to find work in most of them. I've made up a list of decision rules about when it's time to flee to the first place I can find "three hots and a cot" (Places like Belize, for instance). Try compiling your own list, it's an interesting exercise. My rules: It's time to leave when... ... I can't say what I want. ... I can't own a gun. ... I can't use good crypto. ... I can't leave and enter the U.S. freely. Brad bdolan(a)well.sf.ca.us Somewhat related: Does anybody find it interesting that no one noted for over a decade that Ames had (1) a lavish lifestyle and (2) a foreign-born (Colombian!) wife. Normally, spooks aren't allowed either. A cynic might say that the lavish lifestyle was overlooked because it was attributed to the Colombian connection, and not to the other extracurricular activities. -bd

4 3