- cypherpunks-legacy - lists.cpunks.org

How to explain crypto?
by declan＠well.com 17 Dec '03

17 Dec '03

Brock, the crypto-challenged, humbly apologizes for his gaffe. He was looking for a way to draw an understandable comparison of how much harder a 1024-bit implementation of RSA is to break than what current export controls allow. He's asking for suggestions on how in future articles he could word this so a layman could understand it... Preferably something that could be said in a few sentences. (Brock cops to the fact that it does an incredible disservice to a complex topic. Remember, tho, he writes for a broad audience with a way diverse range of understanding -- or misunderstanding, as the case may be!) For example, someone sent me this explanation: "The 1024 bit key is likely an RSA key, and is not comperable to a 40 bit symetric key. From memory, 1024 bit RSA is about as hard to crack as 90 bit symetric." Is this a reasonable comparison? -Declan

3 2

Re: Electronic Signature Act Of 1996
by Sandy Sandfort 17 Dec '03

17 Dec '03

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ SANDY SANDFORT ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ C'punks, At 11:11 AM 6/4/96 -0400, Perry E. Metzger wrote: >...I get the impression that under the common law, an ink >signature is merely a demonstration that a party assented >to a contract, and except for certain contracts (which >usually require witnesses etc.) there is no requirement in >the law that a contract even be on paper... The "Statute of Frauds" lists the exceptions and they cover most important contracts. I seem to recall that contracts over a given amount or for interests in real property for periods of a year or more are covered. I'm sure someone with current access to legal research resources will post a better explanation. S a n d y ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

3 3

Inventor of radio...
by Jim Choate 17 Dec '03

17 Dec '03

Hi all, I would like to correct a misconception about who is credited with the invention of radio. Nikola Tesla has held the credit for the creation since the resolution of the original lawsuit in the mid-80's. Tata. Jim Choate Forwarded message: > Subject: Re: Mail-order Ph.D.'s > From: dlv(a)bwalk.dm.com (Dr.Dimitri Vulis KOTM) > Date: Fri, 19 Jul 96 07:37:24 EDT > > He also invented the radio, but Marconi+Popov stole the credit from him.

2 1

biometric id
by Vladimir Z. Nuri 17 Dec '03

17 Dec '03

info on a biometric id utilizing crypto techniques. ------- Forwarded Message Date: Fri, 31 May 1996 16:34:40 -0700 (PDT) From: Phil Agre <pagre(a)weber.ucsd.edu> To: rre(a)weber.ucsd.edu Subject: biometric encryption [A Canadian company called Mytec is marketing a biometric encryption system that, as far as anybody can tell, is an important step forward for privacy protection. It is based on fingerprint recognition, but it does not produce a representation of the fingerprint or recover the identity of the fingerprint's owner. Instead, it uses an optically transformed version of the fingerprint to decrypt a text string that could be, for example, the private key for a public-key cryptographic system such as RSA. Provided that one trusts the Mytec box, this would be a way to overcome many of the pragmatic hassles that would otherwise accompany the privacy-enhancing technologies that David Chaum and others have described. For example, they have built their device into a computer mouse, so that the computer will only generate your digital signature, or permit your mail to be read, if you are holding the mouse (or, I suppose, if you have been holding it very recently). In this message, the president of Mytec responds to some common concerns about his company's technology that arose in response to a query that I sent to the Computer Privacy Digest. He provides the company's web URL for those who wish to know more.] =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= This message was forwarded through the Red Rock Eater News Service (RRE). Send any replies to the original author, listed in the From: field below. You are welcome to send the message along to others but please do not use the "redirect" command. For information on RRE, including instructions for (un)subscribing, send an empty message to rre-help(a)weber.ucsd.edu =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Date: Fri, 31 May 96 11:06:44 EST From: Computer Privacy Digest Moderator <comp-privacy(a)uwm.edu> To: Comp-privacy(a)uwm.edu Subject: Computer Privacy Digest V8#044 Computer Privacy Digest Fri, 31 May 96 Volume 8 : Issue: 044 - - ---------------------------------------------------------------------- Date: 29 May 1996 09:42:54 -0400 (EDT) From: gtomko(a)noc.tor.hookup.net (George Tomko) Subject: Re: Biometric Encryption Dear Mr. Levine: Subject: Biometric Encryption I have noticed a number of communications in your news group regarding Biometric Encryption, especially some concerns about its use. As one of the developers of this technology, I would appreciate if the attached response could be posted in the news group to provide people with some answers and also to obtain feedback and discussion. Kind regards. George J. Tomko, Ph.D. Several people commented on four concerns in using a finger pattern for biometric encryption, namely: 1. It's easy to get someone's fingerprints since they are left on a vast number of everyday objects, such as drink cans and door handles; 2. Muggers would start cutting off people's fingers when stealing their cards; 3. The crooks would forcibly hold down an individual's finger against the biometric encryption authentication device to extract the string coded by the individual's Bioscrypt; and 4. If the finger used to code the Bioscrypt is damaged or destroyed, then an individual will not have access to the files associated with the Bioscrypt. I will try to answer these concerns in order. But, first, let me define a Bioscrypt. A Bioscrypt is a two-dimensional image of a string or set of characters which can represent a PIN, encryption key or pointer and which has been coded (encrypted) by the two-dimensional information in a fingerprint pattern. It has the following properties: - - - it has no resemblance to the original fingerprint. - - - it cannot be reconverted to the original fingerprint. - - - if an optical image of the correct live fingerprint is transmitted through the Bioscrypt, then the output light beam uniquely represents the coded number. By successfully decoding their Bioscrypt, the person also confirms who they claim to be. For purposes of the discussion below, it is important to note that the optical authentication device is a coherent system and uses the phase information in a finger pattern (complex domain) as a discriminating parameter. 1. "Picking up latent prints from door handles, etc." To perpetrate a masquerade using a latent fingerprint of a legitimate user is very difficult for the following reasons: * The system requires a three-dimensional reconstruction of the legitimate user's fingerprint because the height of the various fingerprint ridges can modify the two-dimensional complex optical image which is the input to the authentication device. There is little information in a two-dimensional latent print about the depth and the height of grooves and ridges of the actual fingerprint. * The three-dimensional reconstruction of the legitimate user's fingerprint from a latent print would also need to duplicate the approximate oil and moisture content of the skin, since this is one of the factors which affects (modulates) the two-dimensional image read by the system. Quantifying this information from a latent print is very difficult. Even if it were, the three-dimensional reconstruction would have to be made from a synthetic material which had the same oil and moisture properties as the legitimate user's skin. To use an oil/water based solution to place on the input scanning window would be useless since this would frustrate all of the light bouncing off the window and would convey little or no useful information to the optical system. * The reconstructed fingerprint would also need to be made from a material with approximately the same elastic properties as the legitimate user's finger skin. During enrollment, and subsequently on authentication attempts, the user slides a finger over the input scanning window. This action warps the skin and the corresponding fingerprint pattern based on the elastic properties of the skin. Within the population, warping can vary significantly based on age, dryness of skin, etc. and is thus another unique aspect of the individual's finger pattern. 2. "Severing the finger to obtain access." As already mentioned in some of the previous communications in this newsgroup, measuring the temperature, humidity, pulse rate and even heart rate to verify a live finger can be accomplished. One of the key factors, though, is after the finger is severed the elastic properties of the skin change rapidly and thereby would not warp in the same manner as a live finger pattern. This would make a cadaverous finger useless after a period of time. (Can't find subjects to do a double blind study though). 3. "Crooks would forcibly hold down the finger." By forcibly sliding an individual's finger against the biometric encryption authentication device (reading device), the string coded by the Bioscrypt can be extracted. The string coded by the individual's finger pattern Bioscrypt could then be used for a one-time access for whatever purposes the string was intended. However, assuming that the individual is freed, he can then use his finger pattern to code a completely different string to prevent repetitive access. The system is robust in that it is very easy to change PINs, encryption keys or computer pointers. It was suggested in some of the messages that a pass phrase be used in conjunction but, again, if an individual is holding your finger down forcibly, to extend that to pointing a gun to your head to divulge the pass phrase is not an extreme assumption. There is no perfect security system out there and I doubt one will ever be designed since it has to work with real human beings. I suggest that the goal is to provide privacy-enhancing technology that handles the majority of the infringement cases and that, for exceptional circumstances where extreme privacy and security must be guaranteed, we combine the biometrics (something you are) with the pass phrase (something you know) and a token (something you have). If the combination of those three doesn't do it, then at this stage of technological evolution, nothing will cut it. 4. "Losing or damaging a finger with the result of not being able to access the Bioscrypt and related files." One of the properties of optical processing is that composite patterns can be made and thereby used to make the Bioscrypt. Accordingly, more than one finger could be used or a finger and a proprietary pattern (which one keeps hidden away somewhere). Of course, there is a penalty. The more patterns one uses, the smaller the signal to noise ratio of the system. The system is currently designed to give signal to noise ratios in the order of 10 to 12 dB and thereby significant degradation can still occur which would allow comfortably two to three patterns to be superimposed in the same Bioscrypt. If you are interested, more information can be gained by accessing Mytec's web page at http://www.mytec.com. - - -- George J Tomko Mytec Technologies Inc. Toronto, Ontario - - ------------------------------ End of Computer Privacy Digest V8 #044 ****************************** - ------- End of Forwarded Message ------- End of Forwarded Message

1 0

Info on DES crypto program
by vinnie moscaritolo 17 Dec '03

17 Dec '03

Hey all; Does anyone have experience or comments about a product called Code Cryptor from New Mexico Software. I belive it is yet another DES based product. tey have a web page at: http://www.swcp.com/cryptor/ "Rah's Samoan Attorney" Vinnie Moscaritolo ------------------ "friends come and friends go..but enemies accumulate." http://www.vmeng.com/vinnie/ Fingerprint: 4FA3298150E404F2782501876EA2146A

2 1

FOR WHOM THE BELL TOLLS
by Sandy Sandfort 17 Dec '03

17 Dec '03

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ SANDY SANDFORT ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ C'punks, In a recent exchange, Carl Ellison wrote: >After the meeting ended it hit me what the problem is and I >mentioned it to PRZ. We're complaining that the Executive >has gone rogue -- is disobeying the will of the people. >PRZ likened it to Nixon's war in Cambodia. To which Jim Bell replied: >I have a solution to that problem. My question for member of this list is: When Bell finally goes too far and they arrest or shoot him, how can we best capitalize on his martyrdom? Or in a more negative light, what damage control will we need to do in that case? Now I know that barking dogs rarely bite, but Jim may just fool us and find his cajones. In any event, the sort of yapping he is doing could itself be considered a crime that could attract the sort of negative attention he apparently craves. Any suggestions? S a n d y ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

4 3

Re: Where are the cryptographers going to come from?
by jim bell 17 Dec '03

17 Dec '03

At 03:22 PM 6/4/96 -0000, nelson(a)crynwr.com wrote: > The NSA believes that they >can and should discard any amount of benefits of crypto in exchange >for avoiding any harm of crypto. They are wrong. I think the truth is even more revealing. We can hypothesize that allowing widespread use of good crypto has many advantages and just a few disadvantages. However, those disadvantages may almost all accrue to government and its employees, and very few to ordinary citizens. This means that talking up the disadvantages of good encryption is doubly fraudulent, because the audience they should be trying to convince (ordinary folks) doesn't realize that the disadvantages generally don't apply to them. And of those few crimes against ordinary citizens where crypto might play a role, that role will almost always be to PREVENT the crime rather than allow it. Jim Bell jimbell(a)pacifier.com

1 0

Re: cycle market
by droelke＠rdxsunhost.aud.alcatel.com 17 Dec '03

17 Dec '03

> > I was trying to think what I would use a cycle market for. The > only thing that I wait for more than a minute on currently is > compiling. Just try doing some large graphical operations - especially raytracing/rendering type stuff, or heavy graphical analysis of a set of image data. Fractal drawing falls in this realm as well. Then try doing some ASIC simulation, or finite element analysis. In this group it also goes without saying that there are also things like factoring large numbers that a cycle market would be ideal for. Dan ------------------------------------------------------------------ Dan Oelke Alcatel Network Systems droelke(a)aud.alcatel.com Richardson, TX

1 0

whitehouse web incident, viva la web revolution
by Vladimir Z. Nuri 17 Dec '03

17 Dec '03

here's an interesting message about a white house aide pressuring HotWired to change their link pointing to a rant page about Clinton. it reminds me of a recent court decision in which a school tried to shut down a student's web page that he had done on his own time and referred to his school and other teachers. it used to be, "freedom of the presses only belongs to those who own a press". actually this still is, except now it only costs $20/mo to own a worldwide "cyberspace press" via web pages. hence what we get are interesting new social situations reminiscent of the tension that surrounded Martin Luther's posting of the 99 theses in the middle ages. you have people who had controlled the situation suddenly put off balance by a new medium. the power of information dissemination is rather significant, and the web is the most sophisticated information dissemination technology ever invented by man. I expect it to have very far-reaching social ramifications. we have barely scratched the surface.. cpunks are very interested in things like anonymity to save oneself from the government. another approach is to simply crow-bar the government in any way you can, whenever possible, to make it better serve your interests. web pages have this intrinsic power-- they're like a subtle, invisible crow bar that can influence the world via public opinion. could there be a day when nobody sees a need to hide from a government, because it is so uninvasive? ------- Forwarded Message From: "Steve Wingate" <steve(a)linex2.linex.com> Date: Sat, 1 Jun 1996 20:27:28 -0700 Subject: (Fwd) WH Censorship of Web Sites (Attempted) - - -> SearchNet's snetnews Mailing List - - ------- Forwarded Message Follows ------- Date: Sat, 1 Jun 1996 20:38:12 -0500 (CDT) To: cs(a)oak.oakland.edu From: ed(a)athenet.net (Edward Immler) Subject: WH Censorship of Web Sites (Attempted) The Skeleton Closet (at http://www.realchange.org) provides a site for those things presidential candidates would rather not discuss. They cover all candidates and include a link to our current Prez. I've included the link below. Looks like this was quietly reversed, the offender sent on (to a nice job), and nothing in the national media. Clipper, V-chip, and now plain-old intimidation. The WH is working hard to control your info. Ed ********************************************************************* [Mr. Tall Skeleton2] Bill Clinton's Skeleton Closet [Mr. Tall Skeleton] [Picture of Clinton] News Flash: White House Suppresses Skeleton Closet In a shocking blunder, the White House successfully put pressure on Hotwired Magazine to stop linking President Clinton's name to this very web page. This was all done behind the scenes -- we had no idea until we read Brock Meek's Netizen column of April 30th. The White House official involved, David Lytel, was in charge of creating the popular Clinton White House web site. He recently left the White House, and is working for a private web page consultant. At a conference, he attacked Netizen for being cynical and unfair, citing the Skeleton Closet link. Meeks, in response, noted that Hotwired had removed the link after receiving official pressure from the White House. In Hotwired's "Threads" discussion, another Hotwired employee admitted that they had been "intimidated" by receiving email from the "whitehouse.gov" domain early in Netizen's infancy, and said she regretted that they caved in. Lytel's argument -- that it was "dishonest" to link Clinton's name to a page criticizing him -- is silly of course. Apparently, he thinks the only "honest" link is one that goes to a person's own web page, no matter how self- serving it is. More to the point, this is a terrible precedent. As far as we know, it is the first attempt by any American government to squelch part of the Internet for nakedly political reasons. (The attack on adult material online, while obviously political, has legitimate issues -- or at least a reasonable excuse -- behind it.) And doing it privately, behind closed doors, makes it even worse. If we were simply seeking publicity, we'd run to Republican politicians (who desperately need an issue) and hope they try to use it. But that would be hypocritical. It's exactly that kind of partisan misuse of legitimate scandals that we are trying to make obsolete here - - -- because it muddles legitimate issues (like White House censorship of critics) in stupid, partisan manipulation. We're trying to contact the White House directly, to get them to disavow Lytel's actions. We'll let you know what happens. Update: White House Backs Down, Sort Of. We challenged the White House to confirm or deny that Lytel pressured Hotwired, to disavow his actions if true, and commit to a policy of avoiding this type of censorship. Within two days, they replied as follows: "Date: Fri, 03 May 1996 17:06:49 -0400 (EDT) From: WEBMASTER (WEBMASTER(a)a1.eop.gov) Subject: RE: White House WWW Comments To: webmaster (webmaster(a)realchange.org) Posting-Date: Fri, 03 May 1996 17:09:00 -0400 (EDT) It is our policy not to interfere with the content of other WEB sites." We'll take that as an admission that Lytel was out of line, and a solid commitment to doing the right thing in the future. Of course, they didn't live up to that policy before, and words are cheap. - - ---------------------------------------------------------------------- - - ---- And now, on with the Clinton's Skeleton Closet page. What can we say about Bill and Hillary that hasn't been said before? Clinton's scandals are covered in such loving detail by his enemies that we are providing you with links to various Clinton scandal pages. Eventually, we will boil it all down and sort out the really good dirt from the crazy stuff, but there's JUST SO MUCH to wade through! The frustrating thing about Clinton's scandals is that the press focuses on two-bit scandals of little importance, such as Whitewater and this ridiculous travel office "scandal", while ignoring much more significant dirt, such as the Mena, Arkansas contra supply and drug operation (see link below), Hillary's $100,000 commodity profit from a $1,000 investment, and a new charge -- that a federally funded educational operation in New York paid her $100,000, for who knows what. And no one (save a few voices on the left) are protesting Clinton's hugely successful fundraising and favors for people who have provided it, including the Tyson Chicken empire. Running against Gramm, Dole and Alexander, this isn't likely to be an issue, but it is a major fault of the President. Political Favors for Campaign Contributors Though his administration floundered at first, Clinton has quickly learned one aspect of Washington -- how to raise money from business interests. He has set records in fund-raising, eclipsing even Dole's huge haul (though not by much.) Of course, if Dole was President he would no doubt regain the lead. And some contributors seem to think their money is well spent. For example, Clinton raised over a quarter million dollars from ADM, Bob Dole's major benefactor, and pushed through a regulation benefiting them mightily. On the other hand, 2 Arkansas firms that formerly bankrolled Clinton (and received help from his administration) have switched their support to Dole -- both Tyson Chicken and Stephens investment brokers apparently figure Dole gives a better return per contribution dollar, or is more likely to win. Money and Favors: Archer Daniels Midland For example, he has received at least $270,000 from Archer Daniels Midland corporation, the agricultural giant famous for spreading money among various influential people, from Bob Dole to National Public Radio. Just days after Clinton received a $100,000 check in June 1994, his administration ordered that 30% of gasoline sold in American's 9 most polluted cities contain ethanol based additives by 1996 (as opposed to cheaper methanol.) Archer Daniels makes 60% of US ethanol for gas, and none of the methanol. Bob Dole, who receives even more money from Archer Daniels and its president, actually supported the Clinton Administration's mandate, even while arguing against Clinton's health care proposal for nearly identical federal mandates. (Courts have block Clinton's 30% rule, saying he lacked power to favor ethanol over methanol.) $100,000 for Hillary from an Educational Foundation This allegation just came out January 10, so bear with us on it's sketchiness. New York state's new Attorney General Dennis Vacco (a Republican) is investigating a $100,000 in payments to Hillary or the Rose Law Firm from the National Center on Education and the Economy, a charity that was in Rochester New York and has since moved to Washington, DC Hillary was on their board, as were Mario Cuomo and Ira Magaziner, but no other board members were paid. The justification is that Hillary was paid to carry out some programs. When this story came out a month ago, Vacco announced he was asking for contracts with Hillary or the Rose Law Firm and a description of any work she actually did. Nothing more has come of it, which -- in an election year - indicates that nothing substantial has turned up. - - ---------------------------------------------------------------------- - - ---- Try these links, but use a grain of salt; some of the sources are pretty marginal. Disgraced Clinton Administration Officials Yahoo's Whitewater Scandal Page Mena, Arkansas: Contra & Drug Smuggling Center? Nick Chase's Mena, Arkansas and Whitewater pages. Quotes "I'm someone who has a deep emotional attachment to 'Starsky and Hutch.' " -- Bill Clinton, 1996 "I don't think [Bill Clinton] is fooling around anymore. Nor do I think he will. I read that Hillary threw a lamp at him. ... You know something? I think she did." -- Ann Landers Sources "Primary Colors", by 'Anonymous', 1996 Wall Street Journal, in general, and in particular: ....January 12, 1996 pA14 ....January 8, 1996 pA1 ....December 18, 1995 pA16 ....December 29, 1995 pA1 ....March 23, 1995 p A1 ....February 22, 1995 p A1 ....January 13, 1995 p A12 "The Mena Coverup", Micah Morrison, Wall Street Journal, October 18, 1994 p A18 "The Real Cost of Ethanol" and "Dwayne's World", Dan Carney, Mother Jones, January, 1995 "Aides Saw Political Threat In Clinton Loans From '90", Jeff Gerth, New York Times, May 6, 1995 p7 "Ann Landers Repents For Slurring The Pope", Associated Press, December 1, 1995 "Blocking the Box", Rick Marin, Newsweek, March 11, 1996 "NY Official Probes Payment to Mrs. Clinton", Associated Press, January 12, 1996 BACK TO SKELETON CLOSET Paid for by Real People For Real Change PAC and not authorized by any candidate or candidate's committee. Real People For Real Change is registered with the Federal Election Commission as a non-affiliated, independent political action committee. Copyright 1996 Real People For Real Change PAC ******************************************************************* *Edward F. Immler Lawrence Chemists * *ed(a)athenet.net are Free Radicals * * * *Lawrence University '95 * *Interests: HAZMAT, EPA/OSHA Compliance, SARA III, Wastewater * *DISCLAIMER: Opinions are mine...unless someone else agrees * ******************************************************************* Anomalous Images and UFO Files http://www.linex.com/ufo/ - - -> Send "subscribe snetnews " to majordomo(a)alterzone.com - - -> Posted by: "Steve Wingate" <steve(a)linex2.linex.com> - ------- End of Forwarded Message ------- End of Forwarded Message

1 0

Re: Markoff in NYT on NTT/RSA chip
by frantz＠netcom.com 17 Dec '03

17 Dec '03

At 12:08 PM 6/4/96 -0500, Paul Robichaux wrote: >2. Markoff's story says that NTT doesn't have licenses to use RSA >technology (the quote from Junichi Kishigami), but the bit about safely >swapping private-key info makes me wonder if instead they're using DH-- the >patent for which expires next year. A telecom chipset could make productive >use of DH for key exchange at call setup. They could use RSA for key exchange outside the USA because RSA is only patented in the USA. With a license for RSA they could also sell them in the USA. My reading of the New York Times article is compatible with the view that Jim Bidzos is driving a hard bargin for such a license. (However, the article does say that NTT has already sold chips to IBM in the US. I guess you can sell, but not deliver, until you get the license.) Obviously if you are outside the USA, you will buy your equipment from Japan Inc. US manfactures will be frozen out. (However the US can still compete for the Chinese market since such privacy will be illegal there :-). ) ------------------------------------------------------------------------ Bill Frantz | The CDA means | Periwinkle -- Computer Consulting (408)356-8506 | lost jobs and | 16345 Englewood Ave. frantz(a)netcom.com | dead teenagers | Los Gatos, CA 95032, USA

2 1