- cypherpunks-legacy - lists.cpunks.org

CFS 1.1.0 now available
by Matt Blaze 17 Dec '03

17 Dec '03

A new release of CFS, my encrypting file system for Unix-ish platforms, is now available, This version includes a number of bug fixes and ports to new platforms, reasonably friendly hooks for adding new ciphers, and an online 3-DES mode. Details in the announcement attached below. -matt ================================================================= Source code for version 1.1 of CFS, the Cryptographic File System, is now available upon request for research and experimental use in the US and Canada. CFS pushes encryption services into the Unix(tm) file system. It supports secure storage at the system level through a standard Unix file system interface to encrypted files. Users associate a cryptographic key with the directories they wish to protect. Files in these directories (as well as their pathname components) are transparently encrypted and decrypted with the specified key without further user intervention; cleartext is never stored on a disk or sent to a remote file server. CFS employs a novel combination of DES stream and codebook cipher modes to provide high security with good performance on a modern workstation. CFS can use any available file system for its underlying storage without modification, including remote file servers such as NFS. System management functions, such as file backup, work in a normal manner and without knowledge of the key. CFS runs under SunOS and several other BSD-derived systems with NFS. It is implemented entirely at user level, as a local NFS server running on the client machine's "loopback" interface. It consists of about 5000 lines of code and supporting documentation. You must have "root" access to install CFS. CFS was first mentioned at the work-in-progress session at the Winter '93 USENIX Conference and was more fully detailed in: Matt Blaze, "A Cryptographic File System for Unix", Proc. 1st ACM Conference on Computer and Communications Security, Fairfax, VA, November 1993. (PostScript available by anonymous ftp from research.att.com in the file dist/mab/cfs.ps.) The version being released differs from the version described in the paper in a few ways: * The encryption scheme has been strengthened, and now provides approximately the security of 3-DES with the online latency of only single-DES. * Support for the smartcard-based key management system is not included. * A few of the tools are not included (in particular, cname and ccat). * The performance has been improved. * The security of the system against certain non-cryptanalytic attacks has been improved somewhat. New features in CFS 1.1 include: * User-contributed ports to a number of additional platforms. * Better hooks for adding new ciphers. * 3-DES encryption option. CFS is being distributed as a research prototype; it is COMPLETELY UNSUPPORTED software. No warranty of any kind is provided. We will not be responsible if the system deletes all your files and emails the cleartext directly to the NSA or your mother. Also, we do not have the resources to port the software to other platforms, although you are welcome to do this yourself. The software was developed under SunOS and BSDI, and there are also unsupported user-contributed ports available for AIX, HP/UX, Irix, Linux, Solaris and Ultrix. We really can't promise to provide any technical support at all, beyond the source code itself. We also maintain a mailing list for CFS users and developers; subscription information is included with the source code. Because of export restrictions on cryptographic software, we are only able to make the software available within the US and Canada to US and Canadian citizens and permanent residents. Unfortunately, we cannot make it available for general anonymous ftp or other uncontrolled access, nor can we allow others to do so. Sorry. Legal stuff from the README file: * Copyright (c) 1992, 1993, 1994 by AT&T. * Permission to use, copy, and modify this software without fee * is hereby granted, provided that this entire notice is included in * all copies of any software which is or includes a copy or * modification of this software and in all copies of the supporting * documentation for such software. * * This software is subject to United States export controls. You may * not export it, in whole or in part, or cause or allow such export, * through act or omission, without prior authorization from the United * States government and written permission from AT&T. In particular, * you may not make any part of this software available for general or * unrestricted distribution to others, nor may you disclose this software * to persons other than citizens and permanent residents of the United * States and Canada. * * THIS SOFTWARE IS BEING PROVIDED "AS IS", WITHOUT ANY EXPRESS OR IMPLIED * WARRANTY. IN PARTICULAR, NEITHER THE AUTHORS NOR AT&T MAKE ANY * REPRESENTATION OR WARRANTY OF ANY KIND CONCERNING THE MERCHANTABILITY * OF THIS SOFTWARE OR ITS FITNESS FOR ANY PARTICULAR PURPOSE. If you would like a copy of the CFS source code, please send email to: cfs(a)research.att.com DO NOT REPLY DIRECTLY TO THIS MESSAGE. Be sure to include a statement that you are in the US or Canada, are a citizen or permanent resident of the US or Canada, and have read and understand the license conditions stated above. Also include an email address in a US or Canada-registered domain. The code will be sent to you via email in a uuencoded compressed tarfile.

1 0

who cypherpunks
by Justin Lister 17 Dec '03

17 Dec '03

who cypherpunks lists info cypherpunks end -- +---------------------+--------------------------------------------------+ | ____ ___ | Justin Lister ruf(a)cs.uow.edu.au | | | \\ /\ __\ | Center for Computer Security Research | | | |) / \_/ / |_ | Dept. Computer Science voice: 61-42-214-330 | | | _ \\ /| _/ | University of Wollongong fax: 61-42-214-329 | | |_/ \/ \_/ |_| (tm) | Computer Security a utopian dream... | | | LiNuX - the only justification for using iNTeL | +---------------------+--------------------------------------------------+

1 0

YOUR TAX DOLLARS AT WORK
by Sandy Sandfort 17 Dec '03

17 Dec '03

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ SANDY SANDFORT . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . C'punks, I just heard on the news that 1300 IRS employees have been disciplined for unauthorized accesses to electronically filed income tax returns. An IRS spokesperson said that under the current electronic filing system, there is no way to prevent unauthorized access, change, disclosure or loss of returns. As you may recall, last month the GSA told us the IRS could hand its paper based accounts either. I'm sure they will do much better, though, when the FBI runs the phone system, the Post Office controls digital identity and Hillary takes care of our health. May you live in interesting times, S a n d y ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

1 0

FW: Federal Control of Financial Transactions
by Blanc Weber 17 Dec '03

17 Dec '03

Some comments on Duncan's post: All of the arguments which he proposes against reasons why the government can't succeed are true and accurate; however, it is one of those things where "you know and I know, but *they* don't know"...... The examples which you relate of government failures from inefficiency, etc. have been proven time and again in history, but in that case why does history keep repeating itself, in slightly different variations. "......why doesn't Clinton impose wage and price controls, exchange controls, tariffs, and a full-blown industrial policy?" If he can succeed in implementing the Health Plan, and if the National ID were accepted, that would probably next on his agenda (if he were to be re-elected [2 more years]). One saving grace from all the discussions which are going on of the above projects is that they presently are just discussions, and if they could just be kept discussing these things, none of them will ever be accomplished. By the time the discussions are finished, everyone will have version 10.x of every computer app and all companies will be "virtual". Blanc

1 0

RE: Come On
by Blanc Weber 17 Dec '03

17 Dec '03

I think that because there are proportionately so very few females on the list who post, that the gentlemen sometimes forget themselves and include some "men talk". But I haven't noticed anyone follow up on it; they never carry on and on as they do about LD (a much more interesting topic), and it isn't long before they get back to random numbers, Clipper, PGP, the intricacies of money laundering, etc. Blanc

1 0

RE: the Cypherpunk and the Shadow
by Blanc Weber 17 Dec '03

17 Dec '03

It's nice to see an intelligent & honest post from you, LD, even if I do disagree with you in your attitude and your methods of dealing with what you perceive as hypocrisy from the c'punks. I would like to address the issues which you brought up, but I don't want to bother the list with my comments, as I know that many have already gone through these too often and you are not satisfied with their rebuttals. Won't you reply to me personally, so that I may present a superior argument (mine). Blanc

1 0

Schneier
by tim werner 17 Dec '03

17 Dec '03

>Date: Mon, 18 Jul 1994 23:18:40 -0400 >From: kentborg(a)world.std.com (Kent Borg) > >>No. Schneier is a start, but the source papers... Speaking of Schneier, I have an upbeat note. I ordered his book, when it first came out, from the local Borders book store. When I went to pick it up, they told me that if I decided to buy it I could not return it, since it was not a book that they would otherwise stock. Today I was there checking out the computer books, and they had a copy on the shelf, so I guess it was in enough demand that they decided to stock it. tw

1 0

No Subject
by owner-cypherpunks 17 Dec '03

17 Dec '03

1 0

Kragen == LD?
by nobody＠shell.portal.com 17 Dec '03

17 Dec '03

"Kragen J. Sittler", xentrac(a)cybele.unm.edu, writes: >I think that the evidence is pretty strong that Sue isn't Larry. >She's another person completely, with a different posting style, a >moderate feminist and extreme leftist political stance, a willingness >(possibly, probably IMHO) to forward unsubstantiated libels (Ollie >North smuggling drugs? How likely is that?), a great deal of >sensitivity to the feelings of others, and a beautiful capacity to find >symbolism. I could be wrong about any or all of these, but they are >my impression on reading her posts, both here and from the new-age >religion group. Isn't a "Kragen" a fictional sea beast, something like a giant squid or octopus? Something with tentacles? And isn't Kragen's user name, xentrac, close to an anagram for tentacle? And isn't unm the University of New Mexico, adjacent to Detweiler's home state of Colorado? And here Kragen is praising Sue D. Nym for having a "beautiful capacity to find symbolism", when "her" posts seem to be random garbage? And didn't all of Kragen, Sue, and the various anonymous Detweiler posts all appear at about the same time? And hasn't Detweiler frequently discussed the use of multiple pseudonyms to mutually support and praise each other in order to build up an illusionary reputation? Makes you wonder...

4 3

No Subject
by owner-cypherpunks 17 Dec '03

17 Dec '03

1 0