- cypherpunks-legacy - lists.cpunks.org

Re: rc2 export limits..
by Bill Stewart 17 Dec '03

17 Dec '03

I'm afraid my source is "Read it on the net and was surprised to hear it". My assumption is that the limit is for software that implements both signature and verification, since ITAR doesn't ban export of pure-authentication software. Is the State Dept doc on the net? It would be nice to have something saying there are well-defined rules that they agree to follow, unreasonable and unconstitutional though they may be. At 12:06 PM 9/4/96 -0400, Kent Briggs <72124.3234(a)compuserve.com> wrote: >stewarts(a)ix.netcom.com wrote: >> However, the usual guidelines for systems like RC2 and RC4 is >> 40-bit keys, and RSA keys up to 512 bits for encrypting >> session keys and 1024 bits for signatures > >Can you list a source for the 1024-bit signature restriction? I know >about the 40-bit RC2/RC4 and 512-bit public encryption keys because they >are specifically addressed in the State Dept's "Procedure for Submitting >a Commodity Jurisdiction Request for a Mass Market Software Product that >Contains Encryption". However, digital signatures are not mentioned in >this procedure. I can't image what justificication could be used to >restrict the strength of digital signatures. # Thanks; Bill # Bill Stewart, +1-415-442-2215 stewarts(a)ix.netcom.com # <A HREF="http://idiom.com/~wcs"> # You can get PGP software outside the US at ftp.ox.ac.uk/pub/crypto

1 0

No Subject
by paul＠fatmans.demon.co.uk 17 Dec '03

17 Dec '03

> > The gubment has no right to fuck with any speech - (seditius) libel, child > > porn, bomb-making instructions... > > > Agreed. Otherwise, by a slipery slope argument, they can eventually > supress any form of speech whatsoever. true enough, most punks on here are a bit less radical but we need more of this sort of absolutism Datacomms Technologies web authoring and data security Paul Bradley, Paul(a)fatmans.demon.co.uk Http://www.fatmans.demon.co.uk/crypt/ "Don`t forget to mount a scratch monkey" -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6 mQCNAjH9j+cAAAEEAMBvREiQR0ot9dFCO0TiSCSunAYLv2g1Bc6I3bz8FzKXNH53 6mieJf/W4rD+CxJpT0q9RQaaoRtkHJLwbjfK2il3D7mEahMAyqvF/xRJNqkXfhM3 sRJM0Jh43l+W0M5vwokbEbk25/bxWWGspTsLD3YHbzKnG6pOcL5OPIRbv66xAAUR tCdQYXVsIEJyYWRsZXkgPHBhdWxAZmF0bWFucy5kZW1vbi5jby51az4= =riHc -----END PGP PUBLIC KEY BLOCK-----

1 0

Re: FWD: Another try to kill democracy
by SPG 17 Dec '03

17 Dec '03

James A. Donald wrote: > > A few more details please: What german agency is taking what action. Oke, taken from: http://www.anwalt.de/ictf/p960901e.htm ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Internet Content Task Force (ICTF), Press Release of Sep. 03, 1996 RA Michael Schneider, eco e.V. A telefax was received by us from the Public Prosecutor General on August 30 in which eco e.V. is informed of an on-going investigatory procedure. We have been requested in this context to inform all Internet service providers affiliated with ICTF (Internet Content Task Force) the following in writing: "Under the following addresses in Internet: http://www.serve.com/spg/154/ http://www.xs4all.nl/~tank/radikal//154/ and using the link on page http://ourworld.compuserve.com/homepages/angela1/radilink.htm one can call up the entire edition of the pamphlet entitled radikal Nr. 154". Parts of this pamphlet justify preliminary suspicion of promoting a terrorist organization under § 129a, Par.3 of the German Criminal Code, public condoning of criminal activities penalizable under § 140 no.2 of the German Criminal Code and preliminary suspicion of inciting to criminal activity under § 130a Par.1 of the German Criminal Code. The Public Prosecutor General at the Federal Court of Justice has therefore initiated a criminal investigatory procedure against the parties disseminating this pamphlet. You are herewith informed that you may possibly make yourself subject to criminal prosecution for aiding and abetting criminal activities if you continue to allow these pages to be called up via your access points and network crosspoints" +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ > > Please considder mirroring or linking to this site. As of today: http://burn.ucsd.edu/%7Eats/RADIKAL/ http://www.jca.or.jp/~taratta/mirror/radikal/ http://www.serve.com/~spg/ http://huizen.dds.nl/~radikal http://www.canucksoup.net/radikal/index.html http://www.ecn.org/radikal http://www.well.com/~declan/mirrors/ http://www.connix.com/~harry/radikal/index.htm http://www.connix.com/~harry > Linking is pointless if the site is cut off or access seriously threatened. > > Mirroring is appropriate only if access is seriously threatened. > > How serious is this threat? Serious enough i think. henk (SPG)

1 0

Re: rc2 export limits..
by frantz＠netcom.com 17 Dec '03

17 Dec '03

At 9:23 AM 9/5/96 -0400, P. J. Ponder wrote: >The FIPS Pub (?180? ?181?) for the Secure Hash Algorithm (SHA) states in >the fine print at the beginning that SHA is export controlled. I don't >have the document to refer to right now, but it plainly states that SHA >falls under ITAR. As a cryptographic hash function, why would it be >controlled in this way? > >How can I use SHA to encrypt something for someone else to decrypt? I >know how to use it for authentication; am I missing something here? Any secure hash can be used as a stream cypher. Concatenate your key and a block serial number (never to be reused) to get a number to exclusive or with the plain text. When you need a new block, use the next sequential serial number. (See Applied Cryptography) Raw SHA probably isn't exportable because people can use it for crypto. If your use of SHA was bundled into a OS password scheme, you could probably get a CJ on it and export it. ------------------------------------------------------------------------- Bill Frantz | "Lone Star" - My personal | Periwinkle -- Consulting (408)356-8506 | choice for best movie of | 16345 Englewood Ave. frantz(a)netcom.com | 1996 | Los Gatos, CA 95032, USA

1 0

Re: Voting Monarchist?
by paul＠fatmans.demon.co.uk 17 Dec '03

17 Dec '03

> ! Harry Brone is a fucking statist. If he weren't, he wouldn't be running > ! for president. Anyone who doesn't advocate killing all kings, presidents, > ! and prime ministers is a fucking statist and should be beaten to a pulp > ! with a rattan stick. Yeah, and anyone who dosen`t advocate random street searches, public floggings and legislation to make the eating of asparagus for breakfast law is a raving leftist militant cyberterrorist neon lighting, macdonalds working, fudge packing, bad ass dude with an attitude... have a nice day motherfucker Datacomms Technologies web authoring and data security Paul Bradley, Paul(a)fatmans.demon.co.uk Http://www.fatmans.demon.co.uk/crypt/ "Don`t forget to mount a scratch monkey" -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.6 mQCNAjH9j+cAAAEEAMBvREiQR0ot9dFCO0TiSCSunAYLv2g1Bc6I3bz8FzKXNH53 6mieJf/W4rD+CxJpT0q9RQaaoRtkHJLwbjfK2il3D7mEahMAyqvF/xRJNqkXfhM3 sRJM0Jh43l+W0M5vwokbEbk25/bxWWGspTsLD3YHbzKnG6pOcL5OPIRbv66xAAUR tCdQYXVsIEJyYWRsZXkgPHBhdWxAZmF0bWFucy5kZW1vbi5jby51az4= =riHc -----END PGP PUBLIC KEY BLOCK-----

1 0

Herr Schmidt
by tcmay＠got.net 17 Dec '03

17 Dec '03

At 3:20 PM 9/5/96, Stephan Schmidt wrote: >Definetly not. >There is an advisory from the Generalbundesanwaltschaft and >the ICTF that ISPs should ('have to') restrict the access to >those urls. > >But so far nothing happend. I asked some people >to try the urls and there where no restrictions. >(I encounterd no restrictions myself.) By the way, I used the name "Schmidt" in my satire post, sent out earlier this morning. I picked that name randomly, being a common German name (cognate to Smith, I believe), and meant nothing with regard to Stephan. (I also don't dislike Germans in general. I studied some German in high school--don't ask me to use it, though!--and have visited Germany. They just have a certain well-known tendency to take the authoritarian path at times.) --Tim We got computers, we're tapping phone lines, I know that that ain't allowed. ---------:---------:---------:---------:---------:---------:---------:---- Timothy C. May | Crypto Anarchy: encryption, digital money, tcmay(a)got.net 408-728-0152 | anonymous networks, digital pseudonyms, zero W.A.S.T.E.: Corralitos, CA | knowledge, reputations, information markets, Higher Power: 2^1,257,787-1 | black markets, collapse of governments. "National borders aren't even speed bumps on the information superhighway."

3 2

Re: Steganography -- Tell-tale signs?
by makof＠alias.cyberpass.net 17 Dec '03

17 Dec '03

Hi there! I'd appreciate some help from you experts in steganography. 1) If I hide some PGP encrypted data in a gif, jpg or wav file will there be any tell tale signs to the naked eye of an expert? If yes, what are they? 2) Would it better to hide the data in a jpg with black and white image rather than a color one? 3) Are there any tools at the moment to expose (not crack) the hidden encrypted data? If none. are there tools in development? If this appears twice please accept my apologies. I didn't see the first posting and so I assumed it was lost in transit. Please email replies to me directly if this is off-topic. Thank you. Makofi

1 0

Re: Using Compromised Remailers to Get the Goods
by Wayne Clerke 17 Dec '03

17 Dec '03

> From: Timothy C. May <tcmay(a)got.net> > To: cypherpunks(a)toad.com > Subject: Using Compromised Remailers to Get the Goods > Date: Thursday, 5 September 1996 8:28 < ... > > (For example, full sender untraceablility means that sources within police > departments can go home, log on with the own PCs, and sell information > about pending investigations, modulo their concerns about pointing to > themselves with information provided (see "canary traps"). Heh ... is this a 'whistle-SUCKER'? :-) > > --Tim May > EMail: wclerke(a)emirates.net.ae PGP key ID: AEB2546D FP: D663D11E DA19D74F 5032DC7E E001B702 PGP mail welcome. Voice: +971 506 43 48 53 <a href=mailto:wclerke@emirates.net.ae>Wayne Clerke</a> If you're not living on the edge, you're taking up too much space.

1 0

Re: Metcalf and Other Net.Fogies
by jya＠pipeline.com 17 Dec '03

17 Dec '03

On Sep 05, 1996 10:27:34, 'tcmay(a)got.net (Timothy C. May)' wrote: Tim's right on the "old fogies." Providing you make the cut off at about 50-55. After that you get retro-infantiles like me (at 61) who have fallen head over heels for the Internet, and are absolutely fed up with being "mature-and-responsible" -- that truly sucks, sucks, sucks. Elsewhere in my field (architecture) I get accused by 40-55 year-olds of trying to brainwash the under-30s. You bet I am, to warn them off the "mature" assholes who think their warped experience is the best teacher, when in fact all it teaches is how to be bent out of shape, and how to project and promote that distortion as the definition of reality. That crippling narrow vision passes at about 50-55 when you realize that you don't know shit, never did and never will. Every fails, in the end, well before The End. So what. Laugh, don't go hurt somebody. Yep, self-deception is the certain sign of maturity, get used to it, it's as unavoidable as the wars mature folks, fearing mortality, wage to kill the helplessness in themselves. Still, I admire the ingenuity of under-30s and over 55s who can trick the middling-matures into serving us, keeping us clothed and sheltered -- and entertained at their pompous fatuities. Don't trust anyone between 30 and 55, especially those nuts with a Solution for The Problem They've Dreamed Up.

1 0

FW: Anonymous phone calls (was: What is the EFF doing exa...
by jbugden＠smtplink.alis.ca 17 Dec '03

17 Dec '03

Subject: FW: Anonymous phone calls (was: What is the EFF doing exactly?) There is another spin possible on the reasons for replacement of pay phones with credit card phones. In Canada all new credit card phones are also able to take phone cards (which are anonymous). Using a prepaid phone card permits full anonymity. But what it also permits is metered local calls. This infrastructure would be more familiar to someone from Europe where metered local calls are the norm. Paris made the change to phones that *only* take prepaid phone cards (thus fully anonymous) obstensibly because people were breaking into phones for the money. Prepaid phone cards avoid this as well as collection costs. James Why should my long distance calling subsidize your local internet access? ;-) ---------- From: "<pstira(a)escape.com>" <pstira(a)escape.com> Sent: Friday, September 06, 1996 9:54 AM To: unicorn(a)schloss.li Cc: vznuri(a)netcom.com; cypherpunks(a)toad.com Subject: Re: What is the EFF doing exactly? Not just DC and Chicago, I'm afraid. If anyone around NYC noticed, there are less and less payphones, and all new ones installed, just about, are those yellow credit card phones. Not all of them, but it's now one for one, at least.

1 0