- cypherpunks-legacy - lists.cpunks.org

VMS Anonymous Remailer/LISTSERV Software
by cfrye＠mason1.gmu.edu 17 Dec '03

17 Dec '03

Thanks, this sounds like a start, the only question is do I have to have root capabilities to implement this? Do you know of a LISTSERV site I might contact? *** It sounds like you would need only your own account for email access, though the amount of traffic may attract your sysop's attention :-). Or, to leave the programming running "resident", you may require root priviledges after all. If there are hooks in the listserv source code allowing it to fire whenever a new message comes in, you wouldn't. I'm sorry, it's really late -- I'm trying to say that you probably won't need root priviledges to set up the remailer if you could have a daemon-like software agent waiting for the mail to come in. There, that wasn't so hard! <YAWN> I know that in the UNIX world, users have set up remailers in Netcom accounts and university accounts without root priviledges. For a complete list of publically accessible mailing lists, which includes LISTSERV's, look in the newsgroup news.answers and find the eight-part posting entitled something like "Guide to Publically Accessible Mailing Lists". I used the search term "Mailing List" and found it after a few tries. If you don't have access to Netnews, mail me and I'll get them for you. One LISTSERV location I know of is news-admin(a)auvm.american.edu. Yeah, it's an Internet address, but there should be a human on the other end. I wish I could help technically, but I hope this information gets you started on a successful project. Don't hesitate to ask if you think I could help out. g'night! Curt

1 0

PGP Question:
by Jim Sewell 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- I've looked in the docs for the answer but it is successful in evading me. My question: I have changed my ID string from my name to my name "-1024" and "-512" to differentiate between the different keys I have. Of course, using the -ke to do this has added a "Also known as" to my key. Since my name is the same in both and the mentioned keysizes are all that have changed I'd like to remove the AKA. Can I do this? If so how? Thanks, Jim -- Tantalus Inc. Jim Sewell Amateur Radio: KD4CKQ P.O. Box 2310 Programmer Internet: jims(a)mpgn.com Key West, FL 33045 C-Unix-PC Compu$erve: 71061,1027 (305)293-8100 PGP via email on request. 1K-bit Fingerprint: 8E 14 68 90 37 87 EF B3 C4 CF CD 9A 3E F9 4A 73 -----BEGIN PGP SIGNATURE----- Version: 2.3a iQCVAgUBLb19ClZo7sR6KUT1AQFQwwP8Cg1tHgG3vSOO07YtGOjrJcgKWe/9Pyr3 IKtIRV0msg8pp1RrTwp/rDiWi11DG3VxAYWbZZ8Fnf8Y5prPRCwL5vGs2WZqFoXi rMSQCxlacUBt4hbzeQQ9IzzYgA8+9YTP9RIVY9k+sd1iu9tsIcP8yjPDJ9jcBgpb BEyCWAPDpXQ= =XMdl -----END PGP SIGNATURE-----

4 7

VMS remailer?
by VACCINIA＠UNCVX1.OIT.UNC.EDU 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- For people wanting to get more remailers going there seems to be a serious apathy for helping people get them going. After posting that I had come into possesion of a VAX account from which I might run a remailer and then asking for some help, I got all of ZERO responses (except from people asking me to help them if I did manage to get any information). Since I had already checked out the available code which only seems to work on UNIX accounts, perhaps someone might inform me that one cannot run a remailer from a VMS account. I assume this is the case since no one deigned to answer. Pretty bogus. Scott G. Morham !The First, Vaccinia(a)uncvx1.oit.unc.edu ! Second PGP Public Keys by Request ! and Third Levels ! of Information Storage and Retrieval !DNA, ! Biological Neural Nets, ! Cyberspace -----BEGIN PGP SIGNATURE----- Version: 2.3a iQCVAgUBLbyNrD2paOMjHHAhAQGy5gP/X0OgIotYPnF9+MneK9g+JGqVlhwQCZel B/Dy7Unb+c25TIjo7C3IwLzGZkst+3Lnt3SlPKUoqmpYRESiPeONZs+G1Ra6gXeD Hl/7eQFAQp+4T5medwDmp69m7gn3dMKQcVmBmSN8uZ5MN4KiaKuzExWPHNTAxWDD KpZQr2Pfcx4= =sG2o -----END PGP SIGNATURE-----

1 0

prime numbers
by johnsonc＠chem.udallas.edu 17 Dec '03

17 Dec '03

I'm just wondering if anyone knows whether or not (1+4k) can be written as the sum of squares or not, and if so, what the proof of that is? Anyone care to share?? Thank you, Carrie Anne Johnson -- What? Because I kill indiscriminately? -Tom Servo

3 2

Re: DId you ever think...
by jpp＠markv.com 17 Dec '03

17 Dec '03

> From: uri(a)watson.ibm.com > Date: Tue, 26 Apr 1994 20:00:44 -0500 (EDT) > > jpp(a)markv.com says: > > Also, after reading Crypto '92 and '93 for a while, I am more and > > more impresed and suprised with the work that NSA put into creating > ^^^ > > DES from Lucifer. > > Surely you mean IBM? [Also a similar message which I unfortuenatly deleted so I can't credit the author :(] No, my writing ability is not in error here -- my mental model of the history of DES is what is in error. I will now update my personal model of DES development to include two steps at IBM. Lucifer -> proto-DES at IBM, and proto-DES -> DES at NSA. Learn something new every day... Since about 1977 I wondered what the 'rediscovered crypto techniques' were. Thanks! j'

1 0

Crypto scripting language
by peace＠BIX.com 17 Dec '03

17 Dec '03

>> > I was most >> > taken by the idea of a "Crypto Toolkit". I think it would be understand- >> > able to write the code in plain, vanilla C (as opposed to C++). One >> > good reason is the widespread availability of C compilers, especially >> > with UNIX. Additionally, C++ compilers do take up more space (although >> > this would be more of an issue with PCs. >> >> I think Tim had in mind something that was accessible more from a higher- >> level language than C or C++; ideally, something interpreted so you could >> sit down and type in a few commands to get something useful. Perl and >> TCL are two languages which Tim mentioned and which have been discussed >> here in the past. Smalltalk might do, although it is not as "freely" avail- >> able. >Yes, this is mostly what I meant. Lots of stuff here, and I really >should use my outline processor to do a better job of outlining >options, routes, and miscellaneous points. But I'll just make a few >notes here. (The theme of the next Cypherpunks meeting, date not yet >finalized, is "Protocols," so issues like this are presumably >relevant. Depending on the date, I may be in LEA., and would welcome >meeting with other Southland Cpunks to discuss ideas.) I wrote a cryptographic scripting language that has been implemented in a commercial product. I hesitate to post it here due to its length. If there is a place to send it where it can be archived for public down-load, I could do that. I am in the process of writing it up for a symposium, but have other things that I would rather do. If I could modify it to improve it's integration w/ telescript, I would like to do it, but I don't have telescript, does anyone here have it? Peace

1 0

Re: Clipper Key Exchange
by Mike Ingle 17 Dec '03

17 Dec '03

matsb(a)sos.sll.se (Mats Bergstrom) writes: Subj: Clipper Session Key >How do two Clipper/Capstone/Skipjack/Tessera units agree on a session key >without compromising it to the bad guys tapping the line? If not known >outside of the NSA, what possible solutions are there? In the case of the MYK-78, the simple Clipper chip to be used in phones and similar devices, that's your problem. You have to do a Diffie-Hellman exchange or RSA or something externally. Or hire a courier. This will cause compatibility problems between different manufacturers' Clipper devices, unless they agree on a standard up front. Probably everyone will clone AT&T Clipper devices, since they are going to be the first to market. If the government buys a large batch, that will set the standard. Without at least a de-facto protocol standard, the system would be almost useless. There is also the problem of adding encryption to the V.x standards for fax, LAPM for modems, etc. Each of these devices will need some kind of key exchange. The Capstone and Tessera (same thing, different package) have the ability to do a modexp operation. From this you can internally do DH exchange or RSA. As I remember, the Capstone does up to 1024 bit modexp, comparable to PGP in security. Skipjack is just a symmetric cipher like DES, except it has an 80-bit key and has (according to the review team) all of DES's problems fixed. --- Mike

1 0

Schneier's source code
by rishab＠dxm.ernet.in 17 Dec '03

17 Dec '03

Tim May said: > * we also have fragments of C code accumulated and laboriously > developed by Bruce Schneier. How many of us have bought the C code book > and used the code? ^^^^^^^^^^^^^^^ As far as I know, there's the book, Applied Crypto, and the source code on disk. Are you referring to the C code within the same book, the disk, or a book of source code with the stuff in the disk (which contains more than the main book)? It matters to me, because though I have the fat book, I have yet to find the energy to OCR the source code. As I'm in India, I can't get the disk. If the contents of the disk are printed in a separate book, I could get *that*. The disk contains code described, but not presented in the book, including DSA, Diffie-Hellman, etc. ------------------------------------------------------------------------------- Rishab Aiyer Ghosh "What is civilisation rishab(a)dxm.ernet.in but a ribonucleic Voicemail +91 11 3760335; Vox/Fax/Data 6853410 hangover?" H-34C Saket New Delhi 110017 INDIA -------------------------------------------------------------------------------

7 6

Final version of Clipper Protocol Failure paper
by Matt Blaze 17 Dec '03

17 Dec '03

The "final" pre-print version (dated August 20, 1994) of my paper, "Protocol Failure in the Escrowed Encryption Standard" is now available. You can get it in PostScript form via anonymous ftp from research.att.com in the file /dist/mab/eesproto.ps . This version replaces the preliminary draft (June 3) version that previously occupied the same file. Most of the substance is identical, although few sections are expanded and a few minor errors are now corrected. I'd appreciate it if anyone who's citing the paper use this version. Only PostScript format is available. Sorry. This paper will be presented at the 2nd ACM Conference on Computer and Communications Security in Fairfax in November. -matt

1 0

Re: anti-clipper t-shirt
by Eric Johnson 17 Dec '03

17 Dec '03

: I've already ordered my "1984" T-shirt, but saw the reference to another : anti-Clipper T-shirt, as well. What are the gory details on the non-1984 : shirt (price, where to order, size(s?), etc). I think that was probably my shirt you are referring to (the "original" 1984 shirt :-). Both John Blair and I were at CFP '94, and we both got the "We're behind schedule" line from a NSA employee who was representing only himself at the conference. The shirt idea I had was to take the Big Brother Inside logo that has been floating around, and use that for the front of a "anti-clipper" shirt, as you put it. On the back, I originally planned to use a !Key Escrow (the words Key Escrow inside a universal red circle/slash), but decided to use the "We're behind schedule" instead. Who knows, maybe there is another shirt in the making... My shirts are supposedly printed (I haven't seen them yet). I've received several orders, but I have been deliberately circumspect on the list; I made one "RFI" (request for interest) to cypherpunks. All the rest of my "advertising" has gone to those who initially expressed interest via email. To see John's .gifs: http://phoenix.aps.muohio.edu/users/jdblair/t-shirt.html (for those who don't have it, John is jdblair(a)nextsrv.cas.muohio.edu) To see my .gifs: ftp://pmip.maricopa.edu/pub/1984.gif ftp://pmip.maricopa.edu/pub/bbi.gif If you are interested in ordering a shirt from me, send email. --Eric

1 0