- cypherpunks-legacy - lists.cpunks.org

One-Time Pad Available
by jpinson＠fcdarwin.org.ec 17 Dec '03

17 Dec '03

A Beta test version of OTP-PC is ready for release. OTP-PC is a MS DOS version of the Vernam One-time pad, an unbreakable but somewhat clumsy cipher. I have added several features to make the one-time pad easier to use. -OTP-PC can use a large pad (codebook) for multiple messages. This feature is more efficient than using multiple smaller pads. -Optional Precompression of the plain text reduces consumption of the pad, and masks the size of the original file. -The portions of the pad used each session are overwritten, both on encoding and decoding, to prevent reuse. -Encoded files have a 2-stage header. The first stage, an un- encrypted "bootstrap", automates the decode process. The second encrypted header contains more sensitive information. -A 32 bit CRC (stored in the encrypted header) verifies reconstruction of the original file. -Automatic wiping of intermediate compressed files. If anyone would like to volunteer to test OTP-PC, and give me any suggestions or bug reports, please send me a message. Please indicate your preference for UUencode, Mime Base64, BinHex, or PGP ASCII Armor. I will send you both the executable and ANSI C (Borland C++ V3.0) source code. Jim Pinson jpinson(a)fcdarwin.org.ec

1 0

automatic mail scanning software
by Matt Blaze 17 Dec '03

17 Dec '03

I was just cleaning up my office, throwing out a bunch of vendor literature from a recent unixexpo, when a flyer for a product called "MpScan" from an outfit called "CyberSoft" caught my eye. This product, as advertised, "automatically searches outgoing email for company classified material". Aside from being configurable to do stuff like block mail to certain addresses, it also " ...uses the powerful, user-tested CVDL scanning language..." and can generate "...reports which can be used to look for unusual changes in Email usage...". A "version 2" promises "many more feaures using an AI engine". All this can be yours for only $49,000 per mail server, or $200,000 per site license. You get free upgrades until the end of 1997. -matt

1 0

Non-techie Crypto book?
by fnerd＠smds.com 17 Dec '03

17 Dec '03

Is there a good not-very-technical, but up-to-date book on crypto? An acquaintance asks. -fnerd - - cryptocosmology- sufficiently advanced communication is indistinguishable from noise - god is in the least significant bits -----BEGIN PGP SIGNATURE----- Version: 2.3a aKxB8nktcBAeQHabQP/d7yhWgpGZBIoIqII8cY9nG55HYHgvt3niQCVAgUBLMs3K ui6XaCZmKH68fOWYYySKAzPkXyfYKnOlzsIjp2tPEot1Q5A3/n54PBKrUDN9tHVz 3Ch466q9EKUuDulTU6OLsilzmRvQJn0EJhzd4pht6hSnC1R3seYNhUYhoJViCcCG sRjLQs4iVVM= =9wqs -----END PGP SIGNATURE-----

2 1

Klinton's Gestapo
by an3747＠anon.penet.fi 17 Dec '03

17 Dec '03

>From an AP story Jan 4 President Clinton commended the nation's fallen spies and their colleagues of the Central Intelligence Agency on Tuesday, saying espionage helped win the Cold War and now is needed to guard against new evils. Addressing hundreds of CIA employees on his first visit to the top-secret agency, Clinton said ``the new world remains dangerous'' as threats of terrorism, ethnic conflict and militant nationalism challenge the intelligence community. About 400 workers crowded the marble lobby of the agency's headquarters; others lined hallways, watching the president's address on TV monitors. The employees applauded several times as Clinton paid tribute to their work at a time when some critics are questioning the agency's role in the post-Cold War era. ------------------------------------------------------------------------- To find out more about the anon service, send mail to help(a)anon.penet.fi. Due to the double-blind, any mail replies to this message will be anonymized, and an anonymous id will be allocated automatically. You have been warned. Please report any problems, inappropriate use etc. to admin(a)anon.penet.fi.

1 0

A Crypto Biblio
by Michael Edward Marotta 17 Dec '03

17 Dec '03

number 006 CLACKER'S DIGEST December 6, 1992. philosophy and applications for analytical engines ------------------------------------------------------------------ (46 lines) A Cryptography Bibliography by mercury(a)well.sf.ca.us (Technically, cryptography is MAKING codes while cryptanalysis is BREAKING them. Both are subsumed under cryptology. A CIPHER is a regular transposition such as A=Z, B=Y, etc., while a CODE is a table of arbitrary symbols.) Kahn, David, THE CODEBREAKERS, MacMillan, 1967. The MOST complete history with specific examples. Written before public keys, RSA, etc., but still THE place to start. Marotta, Michael, THE CODE BOOK, Loompanics, 1987, Overview of history and post-1967 developments. Sinkov, Abraham, ELEMENTARY CRYPTANALYSIS: A MATHEMATICAL APPROACH, Random House, 1968. Sinkov worked for Friedman on the breaking of Purple. First rate. Gaines, Helen Fouche, CRYPTANALYSIS, Dover, 1956. A classic work. The first step to breaking codes and ciphers. Lysing, Henry, SECRET WRITING, Dover, 1974. Another reprint of another classic. Smith, Laurence Dwight, CRYPTOGRAPHY, Dover, 1955. Ditto. Konheim, Alan G., CRYPTOGRAPHY: A PRIMER, John Wiley, 1981. Textbook for mathematicians from IBM's Watson Center. Includes public keys, digital signatures. Meyer, Carl H., and Matyas Stephen M., CRYPTOGRAPHY, John Wiley, 1982. From IBM Cryptography Competency Center. For computers, includes public keys, digital signatures. Weber, Ralph E., UNITED STATES DIPLOMATIC CODES AND CIPHERS 1775- 1938, Precedent, 1979. Not just a history! The appendix contains the all the keys!! Chadwick, THE DECIPHERMENT OF LINEAR B, Vintage, 1958. Worked with Michael Ventris on unraveling Minoan script. Yardley, Herbert O., THE AMERICAN BLACK CHAMBER, Ballantine 1981, Random House, 1931. Yardley broke German ciphers in WWI and then Japanese ciphers of 1920, and was fired in 1931 because "Gentlemen don't read each other's mail." (anonymous), THE DATA ENCRYPTION STANDARD, National Bureau of Standards, January 1977, NTIS NBS-FIPS PUB 46. (anonymous), DATA SECURITY AND THE DATA ENCRYPTION STANDARD, National Bureau of Standards, 1978, Pub 500-27; CODEN: XNBSAV. Rivest, Ronald L., Shamir, A., and Adleman, L., "A Method for Obtaining Digital Signatures and Public-key Cryptosystems," COMMUNICATIONS OF THE ACM, February, 1979. The last word. -------------------------- 30 ------------------------------------

1 0

Microsoft-Cryptography-Redmond, WA
by farber＠central.cis.upenn.edu 17 Dec '03

17 Dec '03

>Posted-Date: Thu, 6 Jan 1994 03:03:07 -0500 >Newsgroups: sci.crypt >Path: >netnews.upenn.edu!newsserver.jvnc.net!howland.reston.ans.net!europa.eng.gtefsd. >com!uunet!microsoft!wingnut!y-wait >From: y-wait(a)microsoft.com (Usenet Job Response Account) >Subject: Microsoft-Cryptography-Redmond, WA >Organization: Microsoft Corporation >Date: Thu, 6 Jan 1994 01:27:44 GMT >Distribution: na >Lines: 35 >Apparently-To: farber@linc > >MICROSOFT > * * ADVANCED CONSUMER TECHNOLOGY DIVISION * * > >Do you need a research challenge which results >in tangable product? Then the Advanced Consumer >Technology Division at Microsoft is the place >for you! Microsoft is looking to challenge the >brightest mathematical minds with the latest >advances in cryptography. The ideal candidate >will be responsible for the research, analysis, >verification, and recommendation of cryptographic >standards as well as the design of new standards. >Candidate should be familiar with authentication >techniques, blind signatures, digital signature >and time-stamping techniques, public key >encryption systems, hashing methods, and >encryption standards. Familiarity with RSA, DES, >minimum knowledge systems, and Digital Cash/Smart >Card technology a plus. A MS/Phd degree in >Mathematics, with a focus on cryptography desired. > >If you are interested in working in a small team >environment developing first version products, >mail your resume to: > > Microsoft Corporation > Attn: Recruiting > Dept. N5930-0105 > One Microsoft Way > Redmond, WA 98052-6399 > >or FAX your resume to 206-869-0947, Attn: N5930-0105 > >No phone calls please. We are an equal opportunity >employer and support workforce diversity. > >

1 0

info
by freeman＠oxygen.aps1.anl.gov 17 Dec '03

17 Dec '03

Howdy, Any info that you can send regarding premise, scope of project, effects, etc. would be greatly apreciated. I'm really curious as to how this all works. thanks David Freeman freeman(a)anlaps.aps.anl.gov

1 0

Re: Non-techie Crypto book?
by fnerd＠smds.com 17 Dec '03

17 Dec '03

Maybe there's a book on "Privacy" out there that gives reasonably up-to-date coverage of crypto. I would love a book that covered all the sociopolitical cypherpunk issues like reputations and anonymity; agorics and pay-per-use; copyright, left and not; Chaum's distinction between Identification and Authentication; traceable vs. non-traceable emoney; smart cards and wallets; history of privacy invasion; history of public-key crypto and non-government cryptology; accelleration of technology that can be used for spying; the sorry present state of cellular phone privacy, Qualcomm's initiative; "digital license plates" as likely implied in various government proposals; etc. Has anyone read the Michael Marotta book? -fnerd quote me - - cryptocosmology- sufficiently advanced communication is indistinguishable from noise - god is in the least significant bits -----BEGIN PGP SIGNATURE----- Version: 2.3a aKxB8nktcBAeQHabQP/d7yhWgpGZBIoIqII8cY9nG55HYHgvt3niQCVAgUBLMs3K ui6XaCZmKH68fOWYYySKAzPkXyfYKnOlzsIjp2tPEot1Q5A3/n54PBKrUDN9tHVz 3Ch466q9EKUuDulTU6OLsilzmRvQJn0EJhzd4pht6hSnC1R3seYNhUYhoJViCcCG sRjLQs4iVVM= =9wqs -----END PGP SIGNATURE-----

1 0

Beware of forged messages
by greg＠ideath.goldenbear.com 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Someone recently posted a forged message with my name on it to the Cypherwonks list. In the future, all of my messages will be sent PGP-clearsigned. Please ignore (or mail to me) any messages which aren't - particularly if they appear to support Detweiler and his totalitarian schemes, which this particular forgery did. The header of the message in question was a byte-for-byte duplicate of an authentic header from a message I did write; apparently our favorite cyberspatial lunatic has moved beyond just signature blocks. -----BEGIN PGP SIGNATURE----- Version: 2.4 iQCVAgUBLTDdcH3YhjZY3fMNAQGwigQAtPhZpZoC8SXR0tstHQgabIVLq04jzTNz kWOibwRd4Zvvs+tnxkKhkMQU2qR13e4Go0N/RV19cVpqA2Yr3DEnCkCbqKnVz54V qK6Pyu+fw3wNROobzCAsTZw25H4zRgqmxjkSW7hbIQVU35mZt+pLn23BKV+ck3L4 cdZeOer6Q7w= =MXpV -----END PGP SIGNATURE----- -- Greg Broiles "Sometimes you're the windshield, greg(a)goldenbear.com sometimes you're the bug." -- Mark Knopfler

1 0

Re: Crypto not being used where needed
by smb＠research.att.com 17 Dec '03

17 Dec '03

Although I sincerely agree that the data should be encrypted, is it really that easy to intercept cellular phone calls? I thought you had to go to considerably more effort than programming a scanner to pick up these transmissions - I don't know much about cellular phones, but I thought they hopped frequencies and so forth such that it was a real pain to listen in. Yes, it's really easy to monitor cellular calls. They only hop frequencies when you move between cells -- and most cop calls will be within a single cell, simply because most of the queries happen *after* they've pulled someone over. Things will change somewhat with the so-called personal communicators, since they'll use much smaller cells -- but the basic problem is still the same.

1 0