- cypherpunks-legacy - lists.cpunks.org

Re: New US regs ban downloadable data-security software
by Lucky Green 17 Dec '03

17 Dec '03

At 05:45 PM 1/13/97 -0800, Ian Goldberg wrote: >After _very_ careful reading of the Export Administration Regulations (EAR) >(though IANAL), it would seem that the above is slightly inaccurate. [...] >Therefore, it would seem that, as long as the security software on your ftp >or WWW site is free of cost, it is OK to keep it there. Commercial >security software, however, remains export-restricted. I concur with Ian Goldberg's careful analysis (thanks, Ian!) that *freeware* data security software that does not use cryptography is indeed not covered under the new regs. Commercial data security software of any kind, regardless if it uses crypto or not, is however prohibited from being distributed via the Internet or being exported by any other means. Note that such software was explicitly exempt from export regulations under the old ITAR. Now it is explicitly included in the EAR. I fail to see a rationale behind this change. But then, I fail to see the rationale behind the entire ITAR/EAR scheme. As always, IANAL, -- Lucky Green <mailto:shamrock@netcom.com> PGP encrypted mail preferred Make your mark in the history of mathematics. Use the spare cycles of your PC/PPC/UNIX box to help find a new prime. http://www.mersenne.org/prime.htm

5 5

You can now subscr. to the moderated/unmoderated/flames lists
by John Gilmore 17 Dec '03

17 Dec '03

It's taking a bit longer than we had hoped, but I'm finally getting the toad majordomo configuration set up for the moderation experiment. I have set up majordomo so that you should be able to sub-scribe to the three new cypherpunks mailing lists: cypherpunks the new moderated list cypherpunks-unedited same as it ever was - flames and all cypherpunks-flames the flames that the moderator rejected MODERATION HAS NOT YET BEGUN. At the moment, a subscription to either of the first two lists will get you everything, while a subscription to cypherpunks-flames will get you no postings. ALL CURRENT SUBSCRIBERS ARE STILL SUBSCRIBED TO THE CYPHERPUNKS LIST, which will become the moderated list. I hope most people will stay on it, so we can get some real results from the experiment of having a volunteer moderator for a month. If you want to change your subscription, send mail to <majordomo(a)toad.com>. You can tell it things like: subscribe cypherpunks-unedited (to subscribe to the new unedited list) unsubscribe cypherpunks (to get off the cypherpunks list) which (if confused about which lists(s) you are on) help (if truly confused about majordomo) The software doesn't care if you subscribe to multiple lists, but you will probably only want to subscribe to one of them at once. This means that to CHANGE your subscription you will need to unsubscribe from one list and subscribe to another. I've only briefly looked at the list traffic on the subject of moderation, but there seems to be a misunderstanding. I'm planning to keep the cypherpunks-unedited list around. This will preserve fast turnaround (though it frequently takes many hours to send each posting to each list member -- it isn't *that* fast), and will permit other people to run their own different brands of moderation if they want to put in the effortw. The list I have no use for, and might terminate after trying things for a month, is the flames list. Each message will be processed by immediately sending it to cypherpunks-unedited. The experimental moderator (Sandy) will be on the -unedited list, and will therefore receive all the traffic. He will forward each posting to either the moderated list, or to the -flames list. Note: * The unedited list gets fast turnaround and doesn't require any human action in order to forward a message. * The integrity of the flames list depends on the human moderators; if they drop a message (accidentally or on purpose) then it won't appear on either the moderated or the -flames list. John Gilmore PS: If you're wondering why I said "subscr." and "sub-scribe" it's because majordomo doesn't like messages containing those words in the subject or first five lines. It keeps down the unintended noise from newbies who send subscription requests to the entire list.

3 4

Re: RSA challenge: is it legal to try?
by nobody＠replay.com 17 Dec '03

17 Dec '03

Greg Broiles says, Ian Goldberg wrote: > > >According to http://www.rsa.com/rsalabs/newfaq/q76.html, RSA is in the > >process of patent application for RC5. Does that mean it's illegal to > >write a keysearch program for the RC5 challenges (unless you use BSAFE > >or something like that)? Patents only apply to commercial use. I don't think participating in the contest can be considered commerical use. Me, a lawyer? No way.

1 0

a cool place to crash
by spiderman＠emirates.net.ae 17 Dec '03

17 Dec '03

If any of u guys wanna crash a site on the net try this one : www.emirates.net.ae enjoy ....................................

1 0

RE: encryption program
by Mullen Patrick 17 Dec '03

17 Dec '03

What is a Kappa test? Is there software I can run to perform such a test? Where can I get it? Thanks! Patrick _______________________________________________________________________________ From: Ed Falk on Mon, Jan 13, 1997 20:33 I ran a quick Kappa test on it. There was a nice fat spike at key length 25, as somebody else suggested, but an almost perfect correlation at 100. The message is almost certainly a simple polyalphabetic cipher with keylength 100. I've been playing with it, and have maybe 5% of it decoded. It's full of really blatent clues. Kind of fun.

1 0

Re: Pentium optimizations for DES (BIG)
by Peter Trei 17 Dec '03

17 Dec '03

I hope you'll look at Svend Olaf Mikkleson's latest DES round replacement for libdes. He seems to have gotten the round down to 18 clock cycles. I have not yet had a chance to try it myself. see: http://inet.uni-c.dk/~svolaf/des.htm Peter Trei trei(a)process.com Peter Trei Senior Software Engineer Purveyor Development Team Process Software Corporation http://www.process.com trei(a)process.com

1 0

smart cards & Chinese Remainder Theorem (CRT)
by szymacz＠efp.poznan.pl 17 Dec '03

17 Dec '03

Could anybody explain me what do smart cards producers mean giving following parameters: - RSA signature time without CRT, - RSA signature time with CRT? I know what CRT is but I don't understand what are the implications of generating signature with and without CRT (differences in security).

2 1

ALA/ACLU file lawsuit challenging NY "CDA" law, from NNN
by Declan McCullagh 17 Dec '03

17 Dec '03

---------- Forwarded message ---------- Date: Tue, 14 Jan 1997 08:43:52 -0800 (PST) From: Declan McCullagh <declan(a)well.com> To: fight-censorship(a)vorlon.mit.edu Subject: ALA/ACLU file lawsuit challenging New York "CDA" law [Visit netlynews.com for the rest of the story. Another reason to follow the New York case is that a successful challenge to its "harmful to minors" ban could create a useful precedent in fighting a CDA 2.0, which likely will have such language. --Declan] *********** The Netly News Network http://netlynews.com A Civil (Libertarian) War by Declan McCullagh (declan(a)well.com) January 14, 1997 On a frosty winter morning last February, Shabbir Safdar and a gaggle of VTW loyalists trekked to Albany, New York, to protest a state bill that would muzzle the Net. "This was our first time doing any state-level lobbying," Safdar says. "We managed to convince them to take some stuff out of the law." But his efforts didn't stop the measure from wending its way through the legislature: In September, Governor George Pataki signed it into law. Today the ACLU sued New York State in federal court, charging that the law is unconstitutional. New York now takes its place among two dozen states battling similar local legislation that would criminalize certain forms of Net speech. In Georgia, for instance, merely having an anonymous user name could be illegal. Virginia restricts state employees' rights to view sexually explicit material -- college professors who might want to use the Net in, say, an English lit class have to exercise extreme caution. Forget the Communications Decency Act: A kind of civil war is being waged across half the U.S. The ALA v. Pataki lawsuit, filed in the Southern District of New York, involves 14 plaintiffs including the American Library Association, the American Booksellers Association Foundation for Free Expression, Panix, Echo and the ACLU. The coalition, which is asking for a permanent injunction, maintains that the law unconstitutionally stifles online speech and unduly interferes with interstate commerce. The law amends the penal code by making it a criminal offense punishable by seven years in prison to distribute pictures or text "which (are) harmful to minors." We here at The Netly News are ardent advocates of free speech, of course -- we held a joint teach-in on the New York law in the fall. So I spoke to Ann Beeson, a staff attorney at the ACLU, who's spent the last year attacking other state laws and the CDA in court. Why should netizens care about this law if they don't live in New York? I asked her. "Because New York can extradite you," she replied. But what if it's not a crime where I live? "It doesn't make a difference," Beeson said. "There's no question that New York could try to extradite you if you put up a web site that has material harmful to minors on it." [...]

1 0

TEST- don't read
by nobody＠replay.com 17 Dec '03

17 Dec '03

test -dont read

1 0

Re: OTA papers
by azur＠netcom.com 17 Dec '03

17 Dec '03

>William H. Geiger said: > > >In <v02140b00af00318b1fef(a)[10.0.2.15]>, on 01/13/97 at 02:50 PM, > azur(a)netcom.com (Steve Schear) said: > > >>Its too bad OTA got the budgetary ax. I met several of the staff and I >>regarded them highly. > >Actually this is a GOOD thing. Now they will be using their talents & skills >in the real world providing a contribution to society rather than in another >unnecessary government bureaucracy. > >- -- I've read several of their papers and find, in those areas of which I feel competent, there are few commercial equivalents with corresponding quality and even-handedness in treatment. I agree with you its best that much or most of these government activities should occur in the market. I hope they do. Only time will tell. -- Steve

1 0