- cypherpunks-legacy - lists.cpunks.org

Re: Is 1024-bit PGP key enough?
by Bill Stewart 17 Dec '03

17 Dec '03

At 10:16 PM 8/1/96 -0400, "Geoffrey C. Grabow" <gcg(a)pb.net> wrote: >Also, remember that although the PGP key is 1024 bits, it generates a much >smaller IDEA key with 56 bits (I think... anyone?). The 56 bit key is >vunerable to that $1 mil mystery machine that the NSA may or may not have. The PGP RSA keysize is user-selectable. The IDEA key is not 56 bits (that's DES) - it's 128 bits, and remember that you currently need to use brute force keysearch on it, unlike RSA keys which have to be much longer because they have special forms and can be cracked by prime-number searching, which is a much faster process that doesn't have to try anything near to every 1024-bit number. As somebody else pointed out, the 128-bit IDEA key is about as strong as a 3000-bit RSA key - though that was before the latest factoring algorithm was demonstrated to work so well, which means that it's probably about as strong as a 4-5000-bit RSA key. > | That which does not kill us, makes us stranger. - Trevor Goodchild | :-) # Thanks; Bill # Bill Stewart, +1-415-442-2215 stewarts(a)ix.netcom.com # <A HREF="http://idiom.com/~wcs"> # Dispel Authority!

1 0

Re: Internal Passports (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Thu, 1 Aug 1996 18:53:57 -0700 (MST) > From: drose(a)AZStarNet.com (David M. Rose) > Subject: Re: Internal Passports > > OK. But I sure would like to have an automatic weapon for > self/home/"national" defense w/o going through a tremendous amount of B.S. > (as Israelis are excused from). I believe that you Texans and we Arizonans > have the privilege; in "urban" states, where the need truly is, good luck. We have to go through the same BS that you do to get automatic weapons. > Also, I don't know what your experience in the Middle East is. Me, I worked > in Iran and exited just before the Jan. '79 "revolution". Menace & murder. > You *really* have no idea. Hint: I'm alive. > > If you still (I don't know your age) think that humans are all the same, but > we juss gots diffrunt colors 'n' cultures, I *strongly* recommend an > extended period of travel to the third world. I do and I have. Jim Choate

1 0

Re: fbi, crypto, and defcon
by Duncan Frissell 17 Dec '03

17 Dec '03

At 08:50 AM 8/2/96 EDT, Paul J. Bell wrote: >i, for one, and perhaps others on the list as well, would be interested in hearing >what you mean when you say, "At&t, Microsoft, etc) who are ripping people off on a >daily basis". I don't know about Microsoft but certainly AT&T long benefitted from local telephone monopolies that resulted in increased prices and slower innovation than would otherwise have been delivered. Even today, long distance carriers are licensed and there are substantial regulatory barriers to entry. International calls still are made under the control of an international cartel of governments that keep prices way above competitive levels. This benefits AT&T and the rest. Since it costs 2 cents a minute to *produce* a call to London from New York the 45 cents to $1 a minute charged represent an excessive price protected by the government regulated cartel status of telecoms even in the Age of Deregulation. AT&T should get honest work as should the others. Maybe when I get a 10 (25?) mbps cable connection to the nets, I'll start offering my neighbors net connections and LD phone service. I could make a pretty penny even savagely cutting the telco's markup. Lots of challenges ther but doable. DCF

1 0

Re: More evidence that democracy is bunk
by Deranged Mutant 17 Dec '03

17 Dec '03

On 1 Aug 96 at 15:34, E. ALLEN SMITH wrote: > And some people think democracies secure civil liberties... > -Allen And some people think polls are an accurate representation of anything. Chances are it's really a poll of people with telephones who just finished watching news reports about increased threats of terrorism. Depends on the exact questions that were asked of them, too... [..] > > As an antidote, 80 percent believe the federal government should have > > more power to investigate terrorists, but just 52 percent believe > > wiretaps should be expanded. Note that 'more power to investigate terrorists' is vague. Very vague, especially if the actual question was "should the federal government be given a greater ability to investigate terrorists?" (which is not the same as 'more power'... greater ability could be more funds or manpower, for instance.) Often time pollsters will introduce the question with a short paragraph or statistics explaining the situation... often these will cue someone in to be more likely to answer a certain way. If the pollster says "with the increase in terrorist activisties in the United States and new communications technologies, should the federal government..." a respondant will be more likely to agree that the gov't should have more power. > > Three out of five said they still favor giving the government more > > power even if that meant groups unrelated to terrorism were > > investigated, too. That's vague too. What was the question: "...even if it meant a charity that was exploited by a terrorist group was investigated" or a "political group which a suspected terrorist belonged too" etc.? > > Even if it cost more, nearly nine out of 10 people surveyed want > > more security checkpoints, guards and metal detectors -- and > > they'd be willing to wait longer in lines -- at public events. If they were asked if they minded random searches of their bags and belongings or required to carry photo-ID wherever they went, to be presented on demand, would they still be willing? Rob --- No-frills sig. Befriend my mail filter by sending a message with the subject "send help" Key-ID: 5D3F2E99 1996/04/22 wlkngowl(a)unix.asb.com (root@magneto) Send a message with the subject "send pgp-key" for a copy of my key.

1 0

Pipe bombs
by tcmay＠got.net 17 Dec '03

17 Dec '03

So now we are to spend the next six or eight months putting instructions on how to build pipe bombs in our .sigs, reading endless analyses of how the "Antiterrorism and Safety Act of 1996" is unconstitutional, following the CDA-type emergency challenge mounted by VTW/ACLU/NRA, and wondering who will be arrested first. Fuck them. Fuck Swinestein, Klinton, Gingrich, and all the rest. And fuck Dole. (On second thought, don't--it might not be a survivable experience.) I say they've all earned only our contempt. It's time to accelerate our efforts to undermine this foolish experiment in pandering to the masses. --Tim May Buy a section of metal water pipe 1/2 by 6 inches long, threaded on both ends. Buy two metal caps to fit. These are standard items in hardware stores. Drill a 1/16th hole in the center of the pipe. This is easy with a good drill bit. Hanson is a good brand to use. Screw a metal cap tightly on one end. Fill the pipe to within 1/2 inch of the top with black powder. Do not pack the powder. Don't even tap the bottom of the pipe to make it settle. You want the powder loose. For maximum explosive effect, you need dry, fine powder sitting loose in a very rigid container.

3 2

Re: A Libertine Question (fwd)
by Cerridwyn Llewyellyn 17 Dec '03

17 Dec '03

Jim Choate <ravage(a)EINSTEIN.ssz.com> argued: >As long as they have a license to operate a food dispencing facility (in >other words they are certifying they are aware of the correct processes for >such operations) then nobody should have the right to interfere with their >operation unless with probable cause (ie proof of danger such as bad weenies >in their hot dogs). This would not apply to individuals or families making >such food in the same place for their own and NOT public consumption. I believe the issue with Food Not Bombs is they didn't get the appropriate permits, etc, or were denied them, or something. However, I disagree with you on this point. I think they shouldn't be required to obtain a license, but everyone whom they serve food to should know that they don't have such a license. This would equal informed consent. Also, with Food Not Bombs, many of the people that the food is being served to is also involved in cooking, distributing food, and cleaning up. I've been told it's exactly like a big picnic, except for anyone is invited to help and/or eat.

1 0

Re: A Libertine Question (fwd)
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > Date: Fri, 2 Aug 1996 16:50:01 -0500 (CDT) > From: snow <snow(a)smoke.suba.com> > Subject: Re: A Libertine Question > > As long as you are enforcing it on everyone, I don't think you'd have a > problem, but to force some one from cooking food for homeless people, and > allow a family barbeque, is IMO wrong. Not at all. Businesses have no rights, individuals do. Businesses have a responsibility to protect their patrons (if you don't think so ask all the folks in Japan or the people here in Austin sick from Strawberries and Blueberries they bought at the local HEB). Individuals have a right to privacy, that includes cooking themselves food without harrassment. Business on the other hand are selling products of potentialy questionable quality. A reasonable person recognizes that such a business has two ways of fulfilling its responsiblities. They can either submit to regulation and quality control from the local municipality or else they can hang signs about their place of business declaring "Caveat Emptor: Our food may be tainted, eat at your own risk". Which do you think is the more reasonable? > If it is unsafe/unsanitary to cook > food in a certain way, it is unsafe/unsanitary. Selective enforcement is > wrong. Not at all. I have a right to kill myself with bad cooking if I choose. I do not have the right to kill another, especialy a stranger, without their prior consent. I guess it would be ok if a food vendor were to ask you if you minded being killed by their product, but I doubt many of them would be in business next week, let alone sell many hot dogs. People and businesses are not the same. Jim Choate

2 1

Re: Is 1024-bit PGP key enough?
by pjb＠ny.ubs.com 17 Dec '03

17 Dec '03

actually, the IDEA key is 128 bits. -paul > From cypherpunks-errors(a)toad.com Fri Aug 2 03:06:24 1996 > X-Sender: gcg(a)mail.pb.net > X-Mailer: Windows Eudora Pro Version 2.2 (32) > Mime-Version: 1.0 > Content-Type> : > text/plain> ; > charset="us-ascii"> > Date: Thu, 01 Aug 1996 22:16:06 -0400 > To: jim(a)ACM.ORG > From: "Geoffrey C. Grabow" <gcg(a)pb.net> > Subject: Re: Is 1024-bit PGP key enough? > Cc: cypherpunks(a)toad.com > Sender: owner-cypherpunks(a)toad.com > Content-Length: 1454 > > At 15:38 08/01/96 PDT, Jim Gillogly wrote: > > > >Somebody says: > >>> Is security provided by 1024-bit PGP key sufficient against most powerful > >>> computers that are available today? Say if smoe organization spent 10 > >>> billions of dollars on a cracking machine, would it be possible to crack > >>> the keys in reasonable time? > > > >Derek Atkins <warlord(a)MIT.EDU> responds with some useful and authoritative > >information -- thanks. > > > Also, remember that although the PGP key is 1024 bits, it generates a much > smaller IDEA key with 56 bits (I think... anyone?). The 56 bit key is > vunerable to that $1 mil mystery machine that the NSA may or may not have. > > G.C.G. > > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ > | Geoffrey C. Grabow | Great people talk about ideas. | > | Oyster Bay, New York | Average people talk about things. | > | gcg(a)pb.net | Small people talk about people. | > |----------------------------------------------------------------------| > | PGP 2.6.2 public key available at http://www.pb.net/~wizard | > | and on a plethora of key servers around the world. | > |----------------------------------------------------------------------| > | That which does not kill us, makes us stranger. - Trevor Goodchild | > ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ > >

1 0

Tao Renji Public Key system
by Jean-Paul Kroepfli 17 Dec '03

17 Dec '03

Dear Bruce, I was testing the Raike's Public Key software, when I remembered a section of your excellent book. In Applied Cryptography, second edition, section 19.10 (page 482) you present the Renji's work about a public key algorithme based on finite automata. Where could we found the FAPKC1 and FAPKC2 algorithms, their implementations, and executable versions (you mention an Intel486 test). Many thanks, With kindest regards Jean-Paul ~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~- Jean-Paul et Micheline Kroepfli (our son: Nicolas and daughter: Celine) eMail: JeanPaul.Kroepfli(a)utopia.fnet.fr Also Compuserve and MSNetwork Phone: +33 81 55 52 59 (F) PostMail: F-25640 Breconchaux (France) or: +41 21 843 27 36 (CH) or: CP 138, CH-1337 Vallorbe Fax: +33 81 55 52 62 (Switzerland) Zephyr(r) : InterNet Communication and Commerce, Security and Cryptography consulting PGP Fingerprint : 19 FB 67 EA 20 70 53 89 AF B2 5C 7F 02 1F CA 8F "The InterNet is the most open standard since air for breathing"

1 0

URGENT: Surveillance Bill Gets New Life - House Vote lLikely TODAY!
by jseiger＠cdt.org 17 Dec '03

17 Dec '03

(please forward where appropriate) It's not over yet.... The House has scheduled a vote on "suspension" for a 'counter-terrorism' bill TODAY (Friday). Despite media reports that the negotiations had stalled out, house Republicans have apparently worked out their differences and are set to vote on the bill today. The Senate may or may not vote on the measure on Saturday. No one I've talked to knows for sure what's in the bill, though I have heard that there are no encryption provisions and that some of the wiretap proposals have been scaled back. I will post details as I get them. In the mean time, keep those calls coming into Congress. Jonah ** THE FIGHT FOR FREE SPEECH ONLINE CONTINUES TO THE SUPREME COURT ** It's not too late to be a part of history -- Join the Lawsuit <http://www.cdt.org/ciec> -- <ciec-info(a)cdt.org> -- Jonah Seiger, Policy Analyst Center for Democracy and Technology <jseiger(a)cdt.org> 1634 Eye Street NW, Suite 1100 Washington, DC 20006 PGP Key via finger (v) +1.202.637.9800 http://www.cdt.org/ (f) +1.202.637.0968 http://www.cdt.org/homes/jseiger/

1 0