- cypherpunks-legacy - lists.cpunks.org

Code review is requested.
by kafka＠desert.hacktic.nl 17 Dec '03

17 Dec '03

In article <199404110553.AA00997@xtropia>, you write the following: AN> Cypherpunks review code! AN> AN> I have written a hack to allow pgp's random.h and random.c to be used AN> with a hardware random number generator. I have mailed this to a AN> number of U.S. cypherpunks with the request that the hack be AN> distributed widely in the U.S. test --- "In a Time/CNN poll of 1,000 Americans conducted last week by Yankelovich Partners, two-thirds said it was more important to protect the privacy of phone calls than to preserve the ability of police to conduct wiretaps. When informed about the Clipper Chip, 80% said they opposed it." - Philip Elmer-Dewitt, "Who Should Keep the Keys", TIME, Mar. 4 1994 == To get PGP, FTP /pub/unix/security/crypt/pgp23A.zip from ftp.funet.fi ==

1 0

NBC's Kaul
by Jeff Davis 17 Dec '03

17 Dec '03

Well, NBC's Alan Kaul and I had a discussion a few moments ago. Apparantly a helicopter crashed and this is old news. He has been instructed by NBC superiors to move on. The downplaying by the NSA was key. It wasn't another "Pentagon Papers" leak. He's got my unlisted number and asked if he could call from time to time to use me as an informed source, and asked to be kept on my mailing list. I guess I'll scrounge up that abitrary finger data from the AmEmbMoscow.gov deal and send that to him as an item of interest. Perhaps a CIA hand was logged on when that stuff popped up on the screen... This is not a topic for discussion. I know some of you have grown to care about me, and some rip me routinely. I am responsible and accountable for my own actions. "Those who risk nothing, are nothing, do nothing, and become nothing." By the time you rebut, that finger information will be gone. -- PGP PUBLIC KEY via finger! JAFEFFM Speaking & Thinking For Myself! * eagle(a)deeptht.armory.com email info(a)eff.org * *** O U T L A W S On The E L E C T R O N I C F R O N T I E R **** ***** Committed to Free Public Internet Access for World Peace *****

1 0

Re: Soldier of Fortune
by Duncan Frissell 17 Dec '03

17 Dec '03

M > M >This seems counterproductive. PGP should not be portrayed as a tool M >for those that most Americans consider antisocial. M > M >M Carling M > A quote from pgpdoc1.doc: "If privacy is outlawed, only outlaws will have privacy. Intelligence agencies have access to good cryptographic technology. So do the big arms and drug traffickers. So do defense contractors, oil companies, and other corporate giants. But ordinary people and grassroots political organizations mostly have not had access to affordable "military grade" public-key cryptographic technology. Until now." Now Phil wrote PGP in part so that "grassroots" political organizations could have strong crypto. SOF is a "grassroots political organization." It happens that some people don't like SOF. It happens that some other people think that the organizations that Phil was thinking of when he wrote PGP are unamerican communist front organizations who should be on the Attorney General's List (if we still had an Attorney General's List)(if we still had an Attorney General). Tastes differ. The point of cypherpunks is that everyone (even FBI agents) should have strong crypto if they want it. I know that Phil feels a personal sense of embarrassment at being adopted by all sorts of nut groups (including ourselves) and he has pleaded for stories of "worthy PGP use." Standards of worthiness will vary. DCF Who, as it happens, *is* a member of an organization on the Attorney General's list. --- WinQwk 2.0b#1165

2 1

cypherpunks and politics (Re: USWA)
by jamiel＠sybase.com 17 Dec '03

17 Dec '03

At 2:21 AM 04/14/94 -0500, Adam Lake wrote: >Did anyone ever think of involving the USWA (no, not the United States >Wrestling Association) United We Stand America in the Clipper fight? >Sounds to me like this would be a mass appeal if it appeared in their >newsletter. This is something I have been meaning to write to the list for several weeks, and this post is the perfect lead in. When I joined this list, I saw thought it was going to be much different. I had assumed 1) that people on this list would have much different politics and 2) that that wouldn't really matter, 'cause everyone here is concerned with one issue, which we could all agree on. 2) seems to have partially true, sometimes. Without expounding at lengths, my reaction was to unsubscribe on short order when I saw some of the first posts flying around. I didn't, because I try to keep an open mind and do change opinions sometimes. But not everyone who is a potential crypto supporter is gonna bother, and by tying (seemingly or not- impressions count here) the issue to a particular set of other beliefs, there is a huge chance that others are going to be alienated. I know *I* don't want to be associated with libertarianism or (even worse) Perot... The point is that even if you think anyone with a viewpoint opposing yours is automatically stupid and not worth your time (and I don't think that too many of you are that bad off ;), aren't they at least worth using to further something you believe strongly in? It might do well to be careful in alienating potential allys by flip political jokes and comments. -j

2 1

re:My public key
by SGT=DARREN=S.=HARLOW%ISB%MCTSSA＠nwsfallbrook3.nwac.sea06.navy.mil 17 Dec '03

17 Dec '03

Enclosed is my public key. I am new to the list and have a lot of catching up to do. Please excuse my ignorance. Sgt Darren Harlow - Computer Security MCTSSA, Camp Pendleton, USMC Internet: harlow%isb%mctssa(a)nwsfallbrook3.nwac.sea06.navy.mil Voice: Comm: (619) 725-2970 DSN (Autovon): 365-2970 Fax: Comm: (619) 725-9512 DSN (Autovon): 365-9512 "The views expressed are my own, and always will be..." -----BEGIN PGP PUBLIC KEY BLOCK----- Version: 2.3a mQCNAi2pYOoAAAEEAJ0Fdc1HDwlww3Wz8JPeQDZT2Gk/q1gh0J+4njtUC66HXngN DNyxzoGnZVcA0bbkirsCdjvvZlsP84QVgxdijzgW4pNOJKowJgrQWFftGEqJKH5b I2NxJrk0kmKt/jli5kV/wDs9Rr4PxXQjGN4B+uJOCSlyWX+fnWNyHMOkIY2tAAUR tENEYXJyZW4gSGFybG93IDxoYXJsb3claXNiJW1jdHNzYUBud3NmYWxsYnJvb2sz Lm53YWMuc2VhMDYubmF2eS5taWw+ =v34V -----END PGP PUBLIC KEY BLOCK-----

1 0

Re: Soldier of Fortune
by m＠BlueRose.com 17 Dec '03

17 Dec '03

I happen to like SOF, and I don't think most Americans have a bad opinion of it (certainly some do, but that is true of any publication). But SOF's appeal is much broader than just "mercs and wannabees" [Sandy's words], and that "mercs and wannabees" is probably the subfocus of SOF that most Americans find the least tasteful of what SOF is about. Most Americans don't think highly of mercenaries. If anyone is going write something for SOF about PGP, I hope that the article focuses on anything but "mercs and wannabees". M Carling Begin forwarded message: Date: Thu, 14 Apr 1994 12:33:04 -0400 From: Duncan Frissell <frissell(a)panix.com> To: CYPHERPUNKS(a)toad.com Subject: Re: Soldier of Fortune Sender: owner-cypherpunks(a)toad.com Precedence: bulk M > M >This seems counterproductive. PGP should not be portrayed as a tool M >for those that most Americans consider antisocial. M > M >M Carling M > A quote from pgpdoc1.doc: "If privacy is outlawed, only outlaws will have privacy. Intelligence agencies have access to good cryptographic technology. So do the big arms and drug traffickers. So do defense contractors, oil companies, and other corporate giants. But ordinary people and grassroots political organizations mostly have not had access to affordable "military grade" public-key cryptographic technology. Until now." Now Phil wrote PGP in part so that "grassroots" political organizations could have strong crypto. SOF is a "grassroots political organization." It happens that some people don't like SOF. It happens that some other people think that the organizations that Phil was thinking of when he wrote PGP are unamerican communist front organizations who should be on the Attorney General's List (if we still had an Attorney General's List)(if we still had an Attorney General). Tastes differ. The point of cypherpunks is that everyone (even FBI agents) should have strong crypto if they want it. I know that Phil feels a personal sense of embarrassment at being adopted by all sorts of nut groups (including ourselves) and he has pleaded for stories of "worthy PGP use." Standards of worthiness will vary. DCF Who, as it happens, *is* a member of an organization on the Attorney General's list. --- WinQwk 2.0b#1165

2 1

Re: Good PRNG (here's where)
by collins＠newton.apple.com 17 Dec '03

17 Dec '03

>i'm doing some stuff on this remailer which requires a good rng. >perl's rng just calls c's rng, which totally sucks. does >anyone know of a cryptographically sound rng i can use? i could >just call it from perl or something. Mark Riordan's ftp site has the source for the Blum-Blum-Shub PRNG. This should meet your needs. You will have to contact him for access if you don't already have it. Hope this helps, Scott Collins | "That's not fair!" -- Sarah | "You say that so often. I wonder what your basis 408.862.0540 | for comparison is." -- Goblin King ................|.................................................... BUSINESS. fax:974.6094 R254(IL5-2N) collins(a)newton.apple.com Apple Computer, Inc. 5 Infinite Loop, MS 305-2D Cupertino, CA 95014 ..................................................................... PERSONAL. 408.257.1746 1024:669687 catalyst(a)netcom.com

1 0

(fwd) If Crippler is a Done Deal, What Next?
by Blanc Weber 17 Dec '03

17 Dec '03

From: Timothy C. May .............since the Digital Telephony Bill and the initial appearance of the key escrow idea, I have targeted my efforts not at short-term things like Clipper, but instead at doing things to make sure that our ability to communicate freely with whomever and in whatever form we choose is not restricted. My favored approach is technological, not political. .............................................................. Short-term things like Clipper, long-term things like the loss of personal control (as in self-determination). In the degradation of the concept of personal control, making up one's life as though it were one's own project becomes a foreign idea, with communication being but one aspect of the total sacrifice. It creates the situation of individuals seeing the relationship between themselves and external regulation as a natural constant, rather than as an exceptional & artificial invention; your initiative is always subject to the review of self-appointed superiors, and you can never think of managing your own affairs independently (or express yourself freely) using your own judgement, because there always exists the potential that you might affect others in some way. There is always a clash between restrictive attempts against, and the ability of technological progress to "empower", the individual. PGP (Pretty Good Presentation) of your ideas. Blanc

1 0

Re: New anon mailer idea?
by wcs＠anchor.ho.att.com 17 Dec '03

17 Dec '03

Hal writes: > - You'd want this feature to be optional. Some people might not want > their anonymity limited by having their return address recorded, even > in encrypted form. The obvious implementation is to add a Generate-Return-Address: header so you can use it if you want it, but won't get one otherwise. The encryption definitely needs some sort of random padding, though CBC with a random IV plus length-padding at the end should probably suffice. > - The use of a symmetric cypher is a very nice way of getting the use-once > capability, along with the "burn after reading" effect of a remailer > chain which destroys itself as it goes. But it could be a considerable > burden on the remailer operator to maintain the database. One possibility > would be to fix a maximum time limit on how long the return addresses are > kept "alive" and require some real money to keep them longer. Public key has the advantage that the operator doesn't *need* a database. If you want to implement use-once addresses (or use-N-times), you could include a tag with the address (such as the IV), and reject future messages using that tag (e.g. save a hash of the tag). You could also implement time-limits by including an expiration date. Perhaps something S-Key like might be applicable, if you want to stick to private-key methods? > - What we would really like is for the recipient to hit the "reply" button > and be able to send his mail back. Matt Ghio's remailer+62647629379278(a)wherever.com syntax does this fine. If desired, you could implement anonymous bit-bucket addresses this way as well, though they're somewhat more useful if your remailer generates encrypted outgoing messages. Alternatively, you can *always* generate either a real or a bit-bucket return address, and leave it up to the sender to inform the recipient that there's a probably-working return path. Bill

1 0

Any cypherpunks building encrypted phone?
by lcottrell＠popmail.ucsd.edu 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- >Subject: Any cypherpunks building encrypted phone? > > Hello everyone! I'd like to know if anyone on the list has made >any attempt to construct a true encrypted phone, something at the >level of the AT&T DES phone. I think that it ought not to be too >difficult to build a couple, using existing modems and basic hardware >design. If all the commercial phones are going to be Clipper-based, >we'll have to build the real ones ourselves. > > Lady Ada, Queen of Engines I am working on that exact problem. It is not really that trivial. The encryption has to handle a lot of data real time. I have a license agreement for IDEA and am working on RSA. I am thinking of using tripple DES rather than IDEA because of the cost of the IDEA license. Two questions. One: Does anyone know of a good source of DES chips? Two: How much would you pay for a good encrypted phone? -----BEGIN PGP SIGNATURE----- Version: 2.3a iQCVAgUBLa4m2FVkk3dax7hlAQF4vwP+KppgEM/05FsVJoonnDQrLKcaRJxqvt8y CgJ5OgaFNwAdsJJyQ25SfxaaubP/Q/Ncz3os2ECdxFDGiVOk97tg6DvTfXA5QoSw hFYuKb+7W/KK455I8WdZkeX6O6T/cLDqe94pcJSLSKo2mqwuGUaZ3jdKLAthPtOE DjqkjZettOM= =34Dg -----END PGP SIGNATURE----- -------------------------------------------------- Lance Cottrell who does not speak for CASS/UCSD loki(a)nately.ucsd.edu PGP 2.3 key available by finger or server. "Love is a snowmobile racing across the tundra. Suddenly it flips over, pinning you underneath. At night the ice weasels come." --Nietzsche

1 0