- cypherpunks-legacy - lists.cpunks.org

Finally... a One-Time-Pad implementation that works!!!
by Geoffrey C. Grabow 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- TriStrata has announced that is has a product that provides OTP without the pad distribution problem. The product also has a unique key-recovery system. Check out: http://www.tristrata.com for details. **************************************************************************** ************* PGP 5.5.3 Fingerprint: 15B3 DDC1 93BB 4BDF 4DFD 1B27 12A1 E0C4 **************************************************************************** ************* -----BEGIN PGP SIGNATURE----- Version: PGPfreeware 5.5.3i for non-commercial use <http://www.pgpi.com> iQEVAwUBNZVo5dc2wHb8nZI1AQFqngf/bCJVbMQX/5sYb181CLONmqWjPzhQ66Ef HoyPqxRzEyq4FSWnIuQODH/YTeyyQROUqCZGhC19v8PCiZpI1ynSvn4i+Zcjv9I0 OZBThzKayNoMne7TkNr49Ah9BwDK6XuwS9bns1xM65zfKLpvKP2gboWkADD52K4w eUuJx/cTaR7PgdO/q6nrVRNq1jlaJsFBKGt2q5E1S12ZK1nA+mpKAS95XMgr2IMx 5/wJ+jsOIUTn2gWR64nhluOgmcACeIVsiRlsGqfUdL8gJHAl0gaQ7E1+HSOBx60K Ur5x5MzQKBKlWcoDaEXB1AsICW2enwdGVOxPBklq1CbcQxFXdBj1DQ== =vZmi -----END PGP SIGNATURE-----

4 3

Re: TIS--Building in Big Brother for a Better Tommorrow
by tallpaul＠pipeline.com 17 Dec '03

17 Dec '03

On Feb 23, 1996 00:19:15, '"P.J. Ponder" <ponder(a)wane-leon-mail.scri.fsu.edu>' wrote: > >Steve Walker wrote to John Young: > >(large piece snipped; good stuff though.) > >+ Suppose the U.S. government had never thought of placing >export controls on cryptography... > >We would now have widespread use of encryption, both >domestically and worldwide; we would be in a state of >"Utopia," with widespread availability of cryptography >with unlimited key lengths. But, once in this state, we >will face situations where we need a file that had been >encrypted by an associate who is unavailable (illness, >traffic jam, or change of jobs). We will then realize >that we must have some systematic way to recover our >encrypted information when the keys are unavailable. > The exchange of information among many trusted people all located in the same geographical location (or with regular reliable couriers travelling to different locations) is the ideal situation for *private* not public key crypto. In such circumstances one uses, e.g. IDEA, not PGP. End of corporate problem. End of "worry" about problems with PGP. --tallpaul

1 0

Re: REM_ote
by John Young 17 Dec '03

17 Dec '03

Oops, Jeff, for the fun mirror; gotta watch these pseudo-random walks, what with all the Net security deals favorably affecting more and more c'punks. BTW, the full REM_ote package includes articles by The Wash Post and Fin Times, each of which have slightly different descriptions of your clearly respected, and valuable!, company. And another BTW, I hope you got a respectable slice of the buyout pie. If so, keep in mind as you consider where to dispose of your new hard-earned wealth that I design extra virgin fancy houses to camouflage impenetrable, and not-at-all cheesy, Swiss vaults.

1 0

Re: url
by Mutant Rob 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Bill Frantz wrote: > > At 2:52 PM 2/22/96 -0500, Perry E. Metzger wrote: > >Mike McNally writes: > >> At <URL:http://www.osf.org/~loverso/javascript/track-me.html> find > >> some interesting "surveillance" applications of Javascript.[..] > >When is the patch to let you disable JavaScript inside Netscape going > >to go out? Its more than time. > > Why Perry, it's called Netscape 1.1N. :-) I think the Options menu in Netscape allows you to disable it already. I only have the 16-bit version running, which doesn't allow it to be enabled anyway. - --- [This message has been signed by an auto-signing service. A valid signature means only that it has been received at the address corresponding to the signature and forwarded.] -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: Gratis auto-signing service iQBFAwUBMS1dZioZzwIn1bdtAQEYcwGAvQEDB1b3YqAiiMFaKzDRzprnfLtTnkHp 7rlxQtd4VtToqDNb4aiDwgTKlgs0tP4+ =dUzI -----END PGP SIGNATURE-----

1 0

Re: NSA agent arrested
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 6:51 PM 2/23/96, Mike Tighe wrote: >Yeah, I got his name but was not sure of the spelling. Robert Steven >something. Lives in Millersville, PA. I think he is retired. Looks like a >victim of the cozying relationship between the FBI and the KGB-whatever >they call themselves nowadays. Lipka. Details are in the usual news sources, such as Reuters (http://www.excite.com/Bulletin/) under Net Directory in Netscape. No CP relevance that I can see, except that Lipka didn't use remailers to protect his identity when he tried to reestablish contact with the Soviets ()who were actually FBI). Lipka was a low-level 20-year-old when he worked for the Army, probably assigned to the Army Security Agency (considered part of the NSA). --Tim May Boycott "Big Brother Inside" software! We got computers, we're tapping phone lines, we know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^756839 - 1 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

1 0

New GAK Bill
by John Young 17 Dec '03

17 Dec '03

5 September 1997, MSNBC: FBI Director Louis Freeh floats a new proposal at a congressional hearing to outlaw non-breakable crypto products. A radical shift in crypto debate Proposed bill outlaws non-crackable crypto products, restrict imports By Brock N. Meeks, MSNBC WASHINGTON -- The White House would likely be very sympathetic to a controversial new bill that would outlaw all encryption software that doesn't allow law enforcement agencies to immediately decode scrambled messages, an administration official told MSNBC. The new bill, still in draft form, is quietly circulating among members of the House and Senate. Although the administration hasn't formally endorsed any provisions of the bill, MSNBC has learned that the White House has been providing what is called technical drafting assistance to members of Congress writing the bill. William Reinsch, the Commerce Department undersecretary for export administration, confirmed the White House involvement for MSNBC on Thursday night. The draft bill was already in the hands of some members of the Senate's Subcommittee on Technology, Terrorism and Government Regulation when FBI Director Louis Freeh outlined its basic provisions while testifying before the panel Wednesday. Freeh said "we would recommend" that legislation be written requiring all encryption software or services made in or imported to the United States to have a feature "which would allow for the immediate, lawful decryption" of any scrambled messages used for illegal purposes or in a national security matter. NATION AT RISK? The White House, FBI and intelligence agencies claim that the proliferation of unbreakable encryption products puts the nation at risk. Criminals and terrorists are increasingly using unbreakable encryption products, Freeh testified Wednesday. U.S. makers of encryption software claim that any government-mandated decoding features would make their products unacceptable to clients in the global marketplace. The new proposals outlined by Freeh also drew the ire of civil liberties groups, which fear that any government controls on encryption products raise serious First Amendment and privacy concerns. Placing such government-mandated controls on the domestic use and manufacture of encryption software, as well as on the import of encryption products, stands in marked contrast to current White House crypto policies. Currently, the United States places strict regulations on the export of any encryption products that do make decoding keys available to law enforcement agencies. However, the administration has steadfastly maintained throughout the often contentious public debate over encryption policies that it would not place any restrictions on the domestic use of encryption software, nor would it restrict the import of encryption products. Despite Freeh's testimony and the draft legislation written with White House assistance, Reinsch said the administration's policy on encryption hasn't changed. "I want to emphasize that [in providing drafting assistance] we are responding to committee requests," he said. "And those requests have been fairly directive, such as: 'Give us some examples of how we can better accommodate law enforcement needs.' " Currently, the White House is backing an encryption bill in the Senate called the Secure Public Networks Act, also known as S. 909. This bill would encourage the use of and set up guidelines for encryption software products with decoding keys. Under this plan, all coded messages would spin off a decoding key that would be stored with a government-approved third party. Law enforcement agencies, foreign or domestic, would be allowed access to those keys if they obtained a court-ordered warrant. The bill would not restrict or require any encryption software used in the United States, or restrict the import of any foreign crypto products. However, MSNBC has learned that the draft bill now circulating among members of the House and Senate specifically outlaws the "manufacture, distribution or import" of any encryption software product or communication device that does not "allow the immediate decryption" of all scrambled messages or communications "if used for illegal purposes." The bill also targets "network services," such as Internet Service Providers, that provide encryption capabilities to their clients. BAN WOULD GO INTO EFFECT IN 1999 Under this proposed bill, if such encryption services are offered by a company like ISP, the service provider must build in a provision to allow for immediate decryption of any scrambled messages, according to several sources that have seen the draft language. The software ban would go into effect in January 1999. Reinsch told MSNBC he wasn't sure that Freeh's testimony "accurately reflected" the language the White House offered in its technica drafting for congressional committees. However, he indicated the administration was interested in Freeh's proposal. "I'll be blunt about it," Reinsch said. If such a bill were approved by a congressional committee, the administration "would look very seriously at it and I imagine we would be very sympathetic to it," he said. Opponents of proposals to require key for all encryption software blanched at Freeh's statements. "This proposal crosses a line that hasn't been crossed before in the area of domestic controls on crypto," said Alan Davidson, policy analyst for the Center for Democracy and Technology. Davidson said a government mandate to provide immediate decryption capabilities would be like "forcing everyone to live in a glass house." It also "trashes the Fourth Amendment," which guarantees a right to be protected from unlawful search and seizure, Davidson said. Freeh told the Senate panel Wednesday that he isn't looking to expand law enforcement's investigative powers. Rather, he said, he is only looking for a "Fourth Amendment that works in the Information Age." ------

4 5

Re: Internet Privacy Guaranteed ad (POTP Jr.)
by Bill Stewart 17 Dec '03

17 Dec '03

At 11:08 AM 2/22/96 -0500, SINCLAIR DOUGLAS N <sinclai(a)ecf.toronto.edu> wrote: >What they have gained is the knowledge that their random number source >isn't broken. If your RNG started spewing 0 bits by the thousand would >you say "This stream is just as likely as any other stream that I can >imagine so there is no problem", or "My RNG is broken". Of course, >in nice mathematical abstractions your RNG never breaks, but we live in >a nasty world of thermal failiures and cold solder joints. They _haven't_ gained that knowledge, only the knowledge that it isn't _totally_ broken and spewing zeros. For example, the output of while(1) printf("%8c", des(i++, key)); // Pretend syntax is correct would probably pass the randomness tests just fine, in spite of being entirely predictable and having only 56 bits of key plus log(i) bits of state, and is vulnerable to most cryptanalysis attacks on DES systems as well. But it's not a One Time Pad, it's just counter-mode DES. #-- # Thanks; Bill # Bill Stewart, stewarts(a)ix.netcom.com / billstewart(a)attmail.com +1-415-442-2215 # http://www.idiom.com/~wcs Pager +1-408-787-1281

1 0

Re: House National Security committee guts SAFE, worse than no b
by Lizard 17 Dec '03

17 Dec '03

At 11:00 PM 9/9/97 -0400, Declan McCullagh wrote: >Michael, you once again fail to note the important political issues here. >Sometimes civil liberties, freedom, and constitutional rights must be >ignored in favor of pragmatism. It is important at all costs to remain a >player in the game. > No, it isn't. You end up being more concerned with being in the game than with achieving your goals. Sometimes, you have to kick the board over. I think it is more important to make the laws unenforceable (and make such workarounds useful to the average netizen), than it is to try to keep the government from passing laws. The work of people like Jim Ray and Phillip Baker is crucial here. The government is unlikely to pass laws to limit its own authority, on any issue -- even those who might not want to use a particular power would still want to keep it around 'just in case'. We cannot count on government to protect our freedoms. Therefore, we must make it irrelevant to the exercise of those freedoms. >Instead of opposing bad crypto legislation, we should instead work inside >the process, to gain a seat at the table. That is why it is highly >significant that both Commerce and FBI want to rid us of our freedom but >would do it in subtly different ways. Not really, know. It's unlikely that a "Let's you and him fight" strategy would prove effective, since this isn't just an interdepartmental turf squabble. They will strip our freedoms first, and argue over who gets the thumbscrews second.

2 1

New WWW Page
by Computer Virus Help Desk 17 Dec '03

17 Dec '03

I'm pleased to announce the opening of a new Anti-Virus oriented Web Page. http://www.a1.com/cvhd This page allows the download of the latest versions of ALL the popular DOS, WINDOWS and WIN95 Anti-Virus Software as well as links to EVERY major Anti-Virus software developer or distributor in the world. On Line Virus Encylopedia, Anti-Virus Tutorials and other utilities are available as well. The page also contains VERY extensive links to Encryption, Privacy, Military, Intelligence, Government and Law Enforcement Web Pages. Look for the addition of a new "On Line" real-time Anonymous Pre-mailer with remailer chaining capabilities to be added in the very near future. Allen Taylor, Moderator, VIRUS_INFO SysOp, CVRC BBS, (317) 887-9568, Indianapolis, Indiana, USA http://www.a1.com/cvhd

1 0

Re: Internet Protest!
by Bill Stewart 17 Dec '03

17 Dec '03

At 08:13 AM 2/23/96 -0600, m5(a)dev.tivoli.com (Mike McNally) wrote: > Is anybody so seriously delusional >that they imagine poor Bill Clinton having to work his way through all >the mail with elm? It's really not that tough - g/Bill Of Rights/d They're already about half done ..... #-- # Thanks; Bill # Bill Stewart, stewarts(a)ix.netcom.com / billstewart(a)attmail.com +1-415-442-2215 # http://www.idiom.com/~wcs Pager +1-408-787-1281

1 0