- cypherpunks-legacy - lists.cpunks.org

Re: Anonymnity at teleport
by Rich Burroughs 17 Dec '03

17 Dec '03

At 05:29 PM 4/21/96 EDT, Allen wrote: > A bit of interesting information about teleport. Still not as good >as c2 (as I stated), but it's still good to have multiple anonymous account >providers around... whether or not they mean to be anonymous. This is from a >sysadmin type there (why I deleted the name) who I'll ask about the Majordomo >patch. [snip] And to think I gave them my real name... Do check about the majordomo patch. It's saved list owners here a lot of headaches. I'm not sure what it would take to implement, but the end result is very good, IMHO. Rich ______________________________________________________________________ Rich Burroughs richieb(a)teleport.com http://www.teleport.com/~richieb See my Blue Ribbon Page at http://www.teleport.com/~richieb/blueribbon New EF zine "cause for alarm" - http://www.teleport.com/~richieb/cause

1 0

Netscape Export + 128bits SSL (?)
by Jean-Paul Kroepfli 17 Dec '03

17 Dec '03

Hello, We are very curious about security + standard + on the shelf products, because so the market will use more naturally the cryptography. Do you know if it's possible to use Netscape client (export = 40bits RC4) on an external SSL layer (i.e., with full encryption, RC4 long keys or IDEA)? Use extra-US implantation (SSL-Leavy or AppacheSSL, etc.) the IDEA option? It seems that IDEA is no longer supported by SSL 3 (in the cipher suite we see IDEA with RSA but not with D-H). Are rumors on additional algorithms (e.g., Safer SK128, Blowfish, etc.)? On the S-HTTP side, are some non-US implantation (browser or server) available or some US-freeware that is smuggled out? Thanks for your answers. Jean-Paul ~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~-~- Jean-Paul et Micheline Kroepfli (our son: Nicolas and daughter: Celine) eMail: JeanPaul.Kroepfli(a)utopia.fnet.fr Also Compuserve and MSNetwork Phone: +33 81 55 52 59 (F) PostMail: F-25640 Breconchaux (France) or: +41 21 843 27 36 (CH) or: CP 138, CH-1337 Vallorbe Fax: +33 81 55 52 62 (Switzerland) Zephyr(r) : InterNet, Communication, Security and Cryptography consulting PGP Fingerprint : 19 FB 67 EA 20 70 53 89 AF B2 5C 7F 02 1F CA 8F "The InterNet is the most open standard since air for breathing"

2 1

Re: Smartcards are coming to the US
by Alan Olsen 17 Dec '03

17 Dec '03

At 03:15 PM 4/21/96 -0400, Brad Dolan wrote: >Saw a CNN story Friday about an interesting special debit card >application in Mexico. They're being issued to poor Mexicans, who can >use them to buy tortillas and a few other foodstuffs. The cards are tied to >a behavior-control database and failure to send kids to school, get >mandatory medical exams/treatments/vaccinations, etc. results in card >deactivation. Interesting method of social control. "Do anything we don't like and we revoke your ability to spend money through government approved outlets." What a Brave New World we live in... --- Alan Olsen -- alano(a)teleport.com -- Contract Web Design & Instruction `finger -l alano(a)teleport.com` for PGP 2.6.2 key http://www.teleport.com/~alano/ "We had to destroy the Internet in order to save it." - Sen. Exon

3 2

Re: Dictionary searching code
by Paul_Koning/US/3Com%3COM＠smtp1.isd.3com.com 17 Dec '03

17 Dec '03

At 08:02 PM 4/19/96 -0500, Adam wrote: > Does anyone have some code that will search a dictionary, and >tell me *quickly* if an arbitrary chunk of text is in the dictionary? >Pre-indexing steps are fine, as is using big chunks of disk for hash >tables. The point of course, is to check arbitrary possible plaintext >that a test decryption produces. If you want to do string matching (search for an exact match on a string -- as opposed to checking whether a set of words is in a database) a good choice would be the Boyer-Moore algorithm. It has the nice property that worst case it requires O(n) time (n = dictionary byte count) but on average it is quite a lot better -- and furthermore, the longer the string you're looking for, the faster it gets... paul !----------------------------------------------------------------------- ! Paul Koning, NI1D, C-24183 ! 3Com Corporation, 1-3A, 118 Turnpike Road, Southborough MA 01772 USA ! phone: +1 508 229 1695, fax: +1 508 490 5873 ! email: paul_koning(a)isd.3com.com or paul_koning(a)3mail.3com.com ! Pgp: 27 81 A9 73 A6 0B B3 BE 18 A3 BF DD 1A 59 51 75 !----------------------------------------------------------------------- ! "Be wary of strong drink. It can make you shoot at tax collectors ! -- and miss!" ! -- Robert A. Heinlein, "The Notebooks of Lazarus Long" ! in "Time Enough for Love"

1 0

Re: Nazis on the Net
by E. ALLEN SMITH 17 Dec '03

17 Dec '03

From: tallpaul(a)pipeline.com (tallpaul) >Since E.A. Smith wants completeness re the Zundelsite issue, I am curious >about his assertion about Weaver. >Might we know the source of his complete info on Weaver's political and >racial beliefs. >I see, in essence, three hypothesis: >1) Cover the ass of a potential neo-Nazi or racist (or both) without any >reference to what is really true; >2) Get information from outer space; >3) Base the conclusion on hard evidence. >If the answer is 3) I'd like to get a real pointer to the real evidence. By >real evidence I mean just that, not wishful thinking or advertising jingles >for points 1) or 2). Hmm... good question. I've seen various quotes from Randy Weaver in various publications, including Time and other non-right-wing ones. None of them indicated him as an actual neo-Nazi or racist, even in the stories (such as in Time) which appeared to assume that militia member = neo-Nazi (quite incorrect, from what I know of the subject. For instance, the most anti-government of the gun-rights organizations, which appears to have quite a few militia members, is Jews for Firearms Ownership. The founders of the organization in question believe that gun rights are necessary to prevent another Holocaust. Other gun-rights political organizations concentrate on self-defense from non-governmental criminals). I don't know when I'll have the time to check on the matter. >PS: Cypherpunks seems to be getting very wiggy these days. Most mailing lists do on a regular basis... my (passing) scans of the archives indicate that cypherpunks is prone to this. -Allen

2 1

Re: OS/2 encryption
by JonWienke＠aol.com 17 Dec '03

17 Dec '03

In a message dated 96-04-21 22:11:06 EDT, Lucky Green wrote: >Back up the HD to tape (encrypt the data on the tape). Move the tape out of >reach. And don't tell anyone, especially not this list, that you did that. Personally, I recommend the Syquest EZdrive over tape. The EZ is a fully functional (bootable, too) 130 MB hard drive ($200 for an IDE internal model, also available in SCSI and parallel port versions) that uses removable cartridges ($20 each) for storage. Most backup programs let you back up to a hard drive, which is much faster than tape, and more reliable as well. Ditto the bit about storing the backups (whatever media) somewhere the CO$ will never find them, and keeping your mouth shut about it.

1 0

[Laffs] Citizen in need of correction
by Robert Hettinga 17 Dec '03

17 Dec '03

--- begin forwarded text Date: 21 Apr 1996 03:25:13 +0200 From: anon-remailer(a)utopia.hacktic.nl (Anonymous) (by way of rah(a)shipwright.com (Robert A. Hettinga)) To: rah(a)shipwright.com Subject: Citizen in need of correction Organization: Hack-Tic International, Inc. Path: news-central.tiac.net!news-in.tiac.net!news.kei.com!newsfeed.internetmci.com!how land.reston.ans.net!EU.net!sun4nl!xs4all!utopia.hacktic.nl!not-for-mail Newsgroups: talk.politics.crypto,talk.politics.libertarian,alt.politics.libertarian,alt.soci ety.anarchy,alt.privacy,alt.security.pgp,alt.activism,alt.anarchism,alt.cyberpun k,alt.politics.datahighway Lines: 4 Sender: remailer(a)utopia.hacktic.nl NNTP-Posting-Host: utopia.hacktic.nl Comments: <postmaster(a)utopia.hacktic.nl> Xref: news-central.tiac.net talk.politics.crypto:205 talk.politics.libertarian:3955 alt.politics.libertarian:5165 alt.society.anarchy:606 alt.privacy:251 alt.security.pgp:802 alt.activism:3485 alt.anarchism:116 alt.cyberpunk:492 alt.politics.datahighway:297 X-Newsreader: Yet Another NewsWatcher 2.1.2 We seem to have a problem with an inconsiderate citizen. This is a call for bids on the case of jimbell(a)pacifier.com (jimbell) -- Please send your bids to getjim(a)blacknet.net by midnight GMT, April 25th, 1996. --- end forwarded text ----------------- Robert Hettinga (rah(a)shipwright.com) e$, 44 Farquhar Street, Boston, MA 02131 USA "If they could 'just pass a few more laws', we would all be criminals." --Vinnie Moscaritolo The e$ Home Page: http://thumper.vmeng.com/pub/rah/

1 0

Re: java security
by Bill Stewart 17 Dec '03

17 Dec '03

At 10:24 PM 4/21/96 -0700, Lucky Green wrote: >>A couple of glitches I've gotten from Javascripts are poorly >>(purposely?) written applets that crash. One kept printing a modal >>dialog box continuously, the result being a need to reboot the >>computer because there was no way to exit Netscape or Windows. > >I can confirm this. Under Win95, I have seen applets that keep running >after the browswer instance that loaded has been closed. Even run over >other applications windows, leaving aninmated artifacts on the screen. >Sometimes only the power switch will do. I thought that the applets weren't >supposed to be able to wander out of their memory space... Were they Java, or JavaScript? Much different. Among other things, JavaScript runs on Win3.1, and Netscape doesn't let you turn it off. I've had at least one event of JavaScript crashing Netscape; the part of the script I noticed was scrolling lots of stuff along the bottom (Hail Eris! All Hail Discordia! Etc. Etc.) but maybe there was more. # Thanks; Bill # Bill Stewart, stewarts(a)ix.netcom.com, +1-415-442-2215

2 1

Re: DES as a stream cipher
by Tim Dierks 17 Dec '03

17 Dec '03

At 2:45 PM 4/22/96, Karl A. Siil wrote: >Folks, > >As this sounds like a previously solved problem, I wanted to find out about >using DES (or any block cipher) as a stream cipher, i.e., in a manner that >keeps input and output data length equal. I don't want to use a true stream >cipher, as I want to use the same key for multiple messages and stream >ciphers tend to place the bulk of their overhead in the re-key. Since stream >ciphers have "memory," I would have to "re-key" to the same key for each of >my messages. I would rather key something like DES once and run it in CBC >mode or use some other form of IV. > >Help or pointers to help are greatly appreciated. Just generate a stream of octets by running DES (or some other block cipher) in the following mode: C_-1 = IV C_n = E_K(C_n-1) i.e., start by encrypting the IV with your key, and thereafter generate a block by encrypting the previous block with your key. Here the IV is essentially part of the key. XOR the resulting bits (or octets) with your plaintext to generate an encrypted stream. Remember within your cipher's state the current output block and how much of it you've used. Note that if you reuse a key, you'll enable attacks that rely on the fact that similar messages will produce similar ciphertext. - Tim Dierks Tim Dierks -- timd(a)consensus.com -- www.consensus.com Head of Thing-u-ma-jig Engineering, Consensus Development

1 0

Re: Entropy
by jamesd＠echeque.com 17 Dec '03

17 Dec '03

At 10:16 AM 4/22/96 EST, Jed Liu wrote: > I've heard a lot of discussion here about "entropy tests" and "tests > for randomness". Could somebody please explain to me one of these > tests (or would that take too long?) ? Thanks. You cannot test for entropy, not can you test for randomness. You can however test for particular kinds of non randomness and particular kinds of lack of entropy. Such tests are only useful if you have an adequately understood source of entropy. Each such test is only appropriate for particular sources of entropy. --------------------------------------------------------------------- | We have the right to defend ourselves | http://www.jim.com/jamesd/ and our property, because of the kind | of animals that we are. True law | James A. Donald derives from this right, not from the | arbitrary power of the state. | jamesd(a)echeque.com

1 0