- cypherpunks-legacy - lists.cpunks.org

fwd: The Swedes discover Lotus Notes has key escrow! (Win Treese)
by Ray Arachelian 17 Dec '03

17 Dec '03

(From the SpyKing Security Mailing list) 2)From: Mike G <mgevaert(a)bfree.on.ca> Subject: Lotus Privacy Problems This was taken from the Computer Privacy Digest 1/4/98 V12#00 Very interesting. The Swedes discover Lotus Notes has key escrow! (Win Treese) The article describes the reaction when various people in the Swedish government learned that the Lotus Notes system they were using includes key escrow. They were apparently unaware of this until Notes was in use by thousands of people in government and industry. Besides being an interesting reaction to key escrow systems, this incident reminds us that one should understand the real security of a system.... Secret Swedish E-Mail Can Be Read by the U.S.A. Fredrik Laurin, Calle Froste, *Svenska Dagbladet*, 18 Nov 1997 One of the world's most widely used e-mail programs, the American Lotus Notes, is not so secure as most of its 400,000 to 500,000 Swedish users believe. To be sure, it includes advanced cryptography in its e-mail function, but the codes that protect the encryption have been surrendered to American authorities. With them, the U.S. government can decode encrypted information. Among Swedish users are 349 parliament members, 15,000 tax agency employees, as well as employees in large businesses and the defense department. ``I didn't know that our Notes keys were deposited (with the U.S.). It was interesting to learn this,'' says Data Security Chief Jan Karlsson at the [Swedish] our Notes keys were deposited (with the U.S.). It was interesting to learn this,'' says Data Security Chief Jan Karlsson at the [Swedish] defense department. Gunnar Grenfors, Parliament director and daily e-mail user, says, ``I didn't know about this--here we handle sensitive information concerning Sweden's interests, and we should not leave the keys to this information to the U.S. government or anyone else. This must be a basic requirement.'' Sending information over the Internet is like sending a postcard--it's that simple to read these communications. When e-mail is encrypted, it becomes unintelligible for anyone who captures it during transport. Only those who have the right codes or raw computer power to break the encryption can read it. For crime prevention and national security reasons, the United States has tough regulations concerning the level of crytography that may be exported. Both large companies and intelligence agencies can already--in a fractions of a second--break the simpler cryptographic protections. For the world-leading American computer industry, cryptographic export controls are therefore an ever greater obstacle. This slows down utilization of the Internet by businesses because companies outside the U.S.A. do not dare to send important information over the Internet. On the other hand, the encryption that may be used freely within the U.S.A. is substantially more secure. Lotus, a subsidiary of the American computer giant IBM, has negotiated a special solution to the problem. Lotus gets to export strong cryptography with the requirement that vital parts of the secret keys are deposited with the U.S. government. ``The difference between the American Notes version and the export version lies in degrees of encryption. We deliver 64 bit keys to all customers, but 24 bits of those in the version that we deliver outside of the United States are deposited with the American government. That's how it works today,'' says Eileen Rudden, vice president at Lotus. Those 24 bits are critical for security in the system. 40-bit encryption is broken by a fast computer in several seconds, while 64 bits is much more time-consuming to break if one does not have the 24 bits [table omitted]. Lotus cannot answer as to which authorities have received the keys and what rules apply for giving them out. The company has confidence that the American authorities responsible for this have full control over the keys and can ensure that they will not be misused. On the other hand, this (assurance) does not matter to Swedish companies. On the contrary, there is a growing understanding that it would be an unacceptable security risk to place the corporation's own ``master key'' in the hands of foreign authorities. Secret information can leak or be spread through, for example, court decisions in other countries. These concerns are demonstrated clearly in a survey by the SAF Trade and Industry security delegation. Some 60 companies answered the survey. They absolutely do not want keys deposited in the U.S.A. It is business secrets they are protecting. These corporations fear that anyone can get a hold of this information, states Claes Blomqvist at SAF. Swedish businesses are also afraid of leaks within the American authorities. The security chief at SKF, Lars Lungren, states: ``If one has a lawful purpose for having control over encryption, it isn't a problem. But the precept is flawed: They ought to monitor (internally), but the Americans now act as if there are no crooks working within their authorities.'' In some countries, intelligence agencies clearly have taken a position on their country's trade and industry. Such is the case in France. One example, which French authorities chose to publicize, was in 1995 when five CIA agents were deported after having spied on a French telecommunications company. Win Treese <treese(a)openmarket.com> [The Lotus Notes crypto scheme is one that I have familiarly been calling ``64 40 or fight!'' (in a reference to a slogan for an early U.S. election campaign border-dispute issue many years ago. PGN]

2 1

Re: cypherpunks and guns
by Ian Sparkes 17 Dec '03

17 Dec '03

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 At 05:28 06.01.98 -0500, Ryan Lackey wrote: ><daemon(a)ATHENA.MIT.EDU> (Wei Dai) writes: > >> I don't understand why there is so much talk about guns here lately. >> Unless someone comes up with a weapon that has some very unusual economic >> properties, individuals cannot hope to compete with governments in the >> domain of deadly force. If we have to resort to physical violence, we've >> already lost! >> >> Think about it: if we can defend ourselves with guns, why would we need >> crypto? > >I am fairly certain that as an irregular army soldier I could inflict >a substantial amount of damage upon an occupying military. With maybe >$20k in equipment and several hundred hours of training, you could make >life very difficult for any luckless squad that happens your way. Multiply >that by 100 million armed citizens and you see that armed civilian >resistance *can* defeat an occupying army. > I'm not sure I am convinced by this argument. The "enemy within" seems to be the main focus of the discussions in the CP list. When the 'luckless squad that happens your way' is manned by your countrymen at the command of their (and your) government, what then? As far as I can see, the result would be a *very* bloody civil war. The outcome may indeed be less obvious than in a 'conventional' (i.e. unarmed populace) civil war, but the cost much higher. This is from the standpoint of a 'sissy' European. I admit I am poorly equipped to comment on the American Zeitgeist. However, my experience of civil war victims (refugees from the E-bloc) suggests that we should be concentrating on social revolution before we tool up for military. There is more to be won, with a potentially much lower cost. -----BEGIN PGP SIGNATURE----- Version: PGP for Personal Privacy 5.0 Charset: noconv iQA/AwUBNLImc4n3W0ooQnZKEQL4VwCffzMNK1MfQ/1zMv+E/3dfoioc8e8AoL0d uZMzgq6LPu9nVe90kcA49cbG =yL/D -----END PGP SIGNATURE-----

2 1

Seeking Environmentally Friendly People ?
by tozumi44＠msn.com 17 Dec '03

17 Dec '03

Welcome to the 21st Century Whoever gets in on the front end of this paradigm shift stands to make alot of money! Helps Us Replace a $20 Billion Industry (Laundry Detergent) The ULTRA 7 LaundryMaster System replaces Laundry Detergent, Fabric Softener, Bleach & Stain Remover Forever.(Sugg. Retail $89.95) *NO MORE DETERGENT *NO MORE FABRIC SOFTENER *NO BLEACH *NO STAIN REMOVER *CHEMICAL FREE WASHING * NO MORE POLLUTION *SAVES THE ENVIRONMENT * EXTENDS LIFE OF YOUR CLOTHES *60% LESS LINT *100% HYPOALLERGENIC *SAVES MONEY *Only 4 CENTS PER DAY * 7 YEAR PRODUCT WARRANTY.-PRODUCT LAST FOR 7 YEARS.. We can truly get you making money with this program and you will be doing your part to make the Earth a safer, better place for us and our children to live. I apologize for any inconvenience and hope to hear from you soon.. Please, serious inquires only. Best Regards, L. Crowder President Help Protect The Earths Water Sup

1 0

Gadget Warfare, from the Netly News
by Declan McCullagh 17 Dec '03

17 Dec '03

********* http://cgi.pathfinder.com/netly/opinion/0,1042,1669,00.html The Netly News (http://netlynews.com/) January 6, 1998 Gadget Warfare by Declan McCullagh (declan(a)well.com) For a country with no real military rivals, the U.S. still manages to find an amazing number of enemies. Terrorists top the list of anti-American villains, according to a Pentagon report released last month. The 100-page document, called "Responses to Transnational Threats," describes how the military should respond to the threat of saboteurs and bombers aiming for violence, not victory. The solution, according to the Pentagon, is to develop a set of gadgets that would make even James Bond jealous: * STICKY ELECTRONICS Think SpiderMan's spidertracers, only smaller. "Sticky electronics" adhere to a suspected terrorist's clothing, hair, luggage or vehicle and report his location. These almost microscopic gizmos tune in to satellite signals and transmit their exact latitude and longitude. "To conserve battery (and mission life) they would respond only when" activated by a radio signal, the Pentagon says. And if you're the suspicious type, sprinkle some in your spouse's underwear. * DATA MINING If you worried about the FBI's jones for access to your data, wait 'til you find out what the military hopes to do. The Pentagon wants authority to sift through private-sector databases in hopes of tracking down, say, the World Trade Center bombers before they strike. The plan is to incorporate "real-time data on international border crossings, real-time cargo manifests, global financial transactions and the global network carrying international airline ticket manifests." As new private-sector databases are developed, "the baseline system would be augmented so that the correlation and fusion process becomes more automated." But the benefits of invading everyone's privacy are dubious: It's hard to imagine the alleged Unabomber, for instance, showing up in computer files. [...]

1 0

Jim Bell article excerpt (Was: Letter on Jim Bell)
by Declan McCullagh 17 Dec '03

17 Dec '03

I wrote this last summer: [...] Then Assassination Politics sent the IRS into a tizzy. Jeffrey Gordon, an inspector in the IRS' Internal Security Division, widened the investigation immediately. He detailed in an 10-page affidavit how he traced Bell's use of allegedly fraudulent Social Security Numbers, how he learned that Bell had been arrested in 1989 for "manufacturing a controlled substance," how he found out that Bell possessed the home addresses of a handful of IRS agents. Gordon's conclusion? Bell planned "to overthrow the government." The IRS investigator said in his affidavit that Bell's "essay details an illegal scheme by Bell which involves plans to assassinate IRS and other government officials... I believe that Bell has begun taking steps to carry out his Assassination Politics plan." But for all Gordon's bluster in court documents, he had no proof that Bell broke the law. He didn't even have enough evidence to arrest the prolific essayist -- at least not yet. After the April 1 raid, Gordon and a team of IRS agents worked to assemble a case against Bell. They pored through the hard drives of the three computers they seized. They scrutinized documents from Bell's house. They interrogated his friends. They listened to tape recordings of the "Multnomah County Common Law Court." They scoured the Net for mentions of Assassination Politics. Six weeks later they felt their case was complete. --- IRS agents arrested Bell on May 16 and charged him with obstructing government employees and using false Social Security numbers. Now, this is hardly attempting "to overthrow the government." But government agents insist Bell is far more dangerous than the charges suggest. (The judge seemed to agree: at the time of this writing, Bell is being held without bail.) The latest IRS documents filed with the court label Bell a terrorist. They claim he talked about sabotaging the computers in Portland, Oregon's 911 center, contaminating a local water supply with a botulism toxin, extracting a poison called Ricin from castor beans, and manufacturing Sarin nerve gas. He allegedly bought and tested some of the chemicals. "Bell has taken overt steps to implement his overall plan by devising, obtaining, and testing the materials needed to carry out attacks against the United States, including chemicals, nerve agents, destructive carbon fibers, firearms, and explosives," the complaint says. But what really got the IRS in a stink was what happened a month after they seized Bell's car. The complaint says: "On March 16, 1997, a Sunday, an IRS employee noted a strong odor in the Federal building. On March 17, 1997, several IRS employees had to be placed on leave due to the odor, and another employee reported other ill effects. The odor was traced to a mat and carpeting... just outside the IRS office entrance." The chemical proved to be "mercaptan," with which Bell's friends say he doused an adversary's law office in the early 1980s. Yet if Bell was a crypto-terrorist, he was a singularly idle one. This is a problem with the IRS' accusations: if true, they prove too much. If Bell was bent on toppling the government, and his exploits date back from the early 1980s, why are they such laughably juvenile and ineffectual ones? Stink-bombing offices isn't a Federal felony, nor should it be. "I would've thought this would be 'malicious mischief,' at most," Tim May, one of the founders of the cypherpunks, writes. "People who've done far, far, far worse are left unprosecuted in every major jurisdiction in this country. The meat thrown to the media -- the usual AP stuff, mixed in with 'radical libertarian' descriptions -- is just to make the case more media-interesting... It sure looks like they're trying to throw a bunch of charges against the wall and hope that some of them stick -- or scare Bell into pleading to a lesser charge." Since his arrest, the denizens of the cypherpunks list, where Bell introduced and refined his ideas, have become generally sympathetic. Gone is the snarling derision, the attacks on his ideas as too extreme. Now a sense of solidarity has emerged. One 'punk wrote: "I have decided that I cannot in good conscience allow Jim Bell's persecution for exercising his basic human right to free speech to pass by without taking personal action to support him." --- When I talked to Bell a few days before his arrest, he spoke calmly and with little rancor about the pending investigation. I couldn't tell how he felt after being raided and interrogated by his arch-enemy, the IRS. But imagine continuously railing on the Net against jackbooted thugs, then having real ones bash down your front door. Bell was most interested in talking up Assassination Politics and predicting how it would eventually blossom. He had just published an op-ed in a local newspaper saying "the whole corrupt system" could be stopped. "Whatever my idea is, it's not silly. There are a lot of adjectives you can use, but not silly," he told me. "I feel that the mere fact of having such a debate will cause people to realize that they no longer have to tolerate the governments they previously had to tolerate. At that point I think politicians will slink away like they did in eastern Europe in 1989. They'll have lost the war." He told me why he became convinced that the government needed to be lopped off at the knees. Bell's epiphany came after he ordered a chemical from a supply firm and was arrested when he failed to follow EPA regulations. "That radicalized me," he said. "That pissed me off. I figured I'd get back at them by taking down their entire system. That's how I'd do it."' Moral issues aside, one of the problems plaguing Bell's scheme is that it's not limited to eliminating "government thugs who violate your rights," as he likes to describe it. If it existed, anyone with some spare change could wipe out a nosy neighbor or even an irritating grocery store clerk. After I pointed this out to Bell on the phone, he fired email back a few days later saying, "Assuming a functioning Assassination Politics system, nothing stops you from contributing to my death." He suggested that maybe assassins would develop scruples: "You'd be able to purchase deaths of unworthy people, but it might be only at a dramatically higher price. Doable but not particularly economical." [...] -Declan

3 2

ACM conference on computer-related policy (DC, 5/98)
by Declan McCullagh 17 Dec '03

17 Dec '03

---------- Forwarded message ---------- Date: Tue, 6 Jan 1998 11:10:49 -0800 (PST) From: Declan McCullagh <declan(a)well.com> To: fight-censorship-announce(a)vorlon.mit.edu Subject: ACM conference on computer-related policy (DC, 5/98) [The best policy for the Net is probably no policy, or at most a hands-off one. We don't have national "policies" for how we should regulate, for example, newspapers or bookstores, and we don't need such policies for the Net. On universal service, we already have Internet connections that are cheaper than cable TV; on copyright, the safest course is to let federal courts decide; on crypto, most agree that the current "policy" is misguided at best. --Declan] *************** ASSOCIATION FOR COMPUTING (ACM) ANNUAL CONFERENCE * * * POLICY98 * * * "Shaping Policy in the Information Age" Washington, DC, Renaissance Hotel May 10-12, 1998 Preliminary Notice For Conference and Registration information see: http://www.acm.org/usacm/events/policy98/ The ACM Annual Conference will focus on public policy issues affecting future applications of computing. Our goal is to forge stronger links between computing professionals and policy makers. Attendees will interact with prominent leaders from academia, industry, Congress, and Executive agencies, and participate in debates on policy issues including Universal Access, Electronic Commerce, Intellectual Property, and Education Online. The conference will promote more regular engagement of computing professionals in democratic processes related to productive use of computing and information processing innovations. A blend of technical skills and policy insights are essential to cope with the inherent opportunities and dangers of any transformational technology. Continuing collaborations between computing professionals and policy makers will benefit citizens, consumers, entrepreneurs, researchers, and students. You can make a difference! May 10: Ethical and social impacts papers and panels May 11-12: Public policy panels and featured speakers All Policy98 attendees are invited to the Annual ACM Awards Banquet on Sunday evening May 10th, and a conference reception on Monday evening May 11th. +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ PANEL TOPICS AND COORDINATORS =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ Universal Service: Ollie Smoot What can be done to promote widespread access to the benefits of the Internet? What is the role of government and the role of the private sector in wiring schools, libraries, and medical facilities? Electronic Commerce: Jim Horning How much public policy does EComm need? What problems would inadequate, excessive, or misguided policies cause? Can compromises in areas like fair trade practices, fraud prevention, security, privacy, law enforcement, and taxation advance the interests of all stakeholders? Intellectual Property in Cyberspace: Pam Samuelson What will be the impact of the WIPO agreements on copyright in cyberspace? How should intellectual property be protected and what safeguards are necessary to protect libraries and academic institutions? Education Online: Charles N. Brownstein The Internet offers unparalleled opportunities for learning and teaching. What public policy and technical challenges must be met to realize these prospects? +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ CONFERENCE CO-CHAIRS =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ Ben Shneiderman, USACM (U.S. Public Policy Committee) C. Dianne Martin, SIGCAS (ACM Special Interest Group on Computers & Society) +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ PROGRAM COMMITTEE CHAIRS =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ Marc Rotenberg, Public Policy Keith Miller, Ethics and Social Impacts +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ REGISTRATION INFORMATION =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ For more information, contact: policy98(a)acm.org or to register electronically, see: http://www.acm.org/usacm/events/policy98/reginfo.html Early registrants and ACM members receive discounts.

2 1

Hi-tech anti-terrorism... [CNN]
by Jim Choate 17 Dec '03

17 Dec '03

Forwarded message: > GADGET WARFARE: HIGH-TECH ANTI-TERRORISM > > January 6, 1998 > Web posted at: 9:34 p.m. EST (0234 GMT) > > From Netly News Writer Declan McCullagh > > For a country with no real military rivals, the U.S. still manages > to find an amazing number of enemies. Terrorists top the list of > anti-American villains, according to a Pentagon report released last > month. > > The 100-page document, called "Responses to Transnational Threats," > describes how the military should respond to the threat of saboteurs > and bombers aiming for violence, not victory. The solution, > according to the Pentagon, is to develop a set of gadgets that would > make even James Bond jealous. > > Micro-robots > > A spy camera scuttling through the underbrush? Yes, disguised as "an > insect, a small pebble, or a stick." The report calls for the > development of "micro-robots" that walk or fly and can beam video, > audio and infrared signals back to their operators: "These sensors [deleted text] > Sticky electronics > > Think SpiderMan's spidertracers, only smaller. "Sticky electronics" > adhere to a suspected terrorist's clothing, hair, luggage or vehicle > and report his location. These almost microscopic gizmos tune in to > satellite signals and transmit their exact latitude and longitude. [deleted text] > Bio-sniffers > > Go lie down, Fido. Soon drug-sniffing dogs may be replaced by even > more sensitive, digital noses. If suspects have been handling nukes, > biological weapons or high explosives, the military hopes to be able > to sniff substance traces from items like passports. "As future [text deleted] > technology is improved, antigens might then be detected at national > entry portals as trace contamination on emigration documents or > passports, by urine analysis or by other means." Look for companies > to use this as a more sensitive (if not more reliable) type of drug > testing. > > The Internet > > The Net shouldn't be viewed as "a vulnerability." That view "loses > sight of many potential benefits," the Pentagon explains. To the > spooks, the Net "is an underexploited information-acquisition > resource" that "allows for remote and anonymous participation in > online 'chat' forums that might provide insight into dissident group > activities." (Look out, alt.fan.militia!) The military also wants to > create a "secure, transnational threat information infrastructure" > -- at a cost of a mere $300 million. > > Data mining > > If you worried about the FBI's jones for access to your data, wait > 'til you find out what the military hopes to do. The Pentagon wants > authority to sift through private-sector databases in hopes of > tracking down, say, the World Trade Center bombers before they > strike. The plan is to incorporate "real-time data on international > border crossings, real-time cargo manifests, global financial [deleted text] > Smart software > > Once you've got the databases, how do you use 'em? The military says > the answer is "groupware" and "intelligent software agents" that > "can be focused to search for a confluence of events in multiple > databases or for goals over time." Consumer marketers will finally > be able to determine the commonalities between the Hajj, Promise > Keeper gatherings and Burning Man. > > So would military budgets. In a world where even the Pentagon admits > that the U.S. is the only remaining superpower, the defense > community argues that terrorism threats justify their budgets. > "Nothing will be more challenging to the protection of our citizens, > soldiers and our way of life than the threats of weapons of mass > destruction and terrorism," General John Shalikashvili, chairman of [text deleted] ____________________________________________________________________ | | | Those who make peaceful revolution impossible will make | | violent revolution inevitable. | | | | John F. Kennedy | | | | | | _____ The Armadillo Group | | ,::////;::-. Austin, Tx. USA | | /:'///// ``::>/|/ http://www.ssz.com/ | | .', |||| `/( e\ | | -====~~mm-'`-```-mm --'- Jim Choate | | ravage(a)ssz.com | | 512-451-7087 | |____________________________________________________________________|

1 0

Re: cypherpunks and guns
by Information Security 17 Dec '03

17 Dec '03

Ryan Lackey <rdl(a)mit.edu> # AOLserver (a nice web server formerly from GNN/navisoft) punted their # 128bit SSL module distribution *EVEN TO US CITIZENS* due to commerce # department fuckedness. Anyone know where I could get a copy? It would # really suck to have to patch the 40bit one into a 128bit version, since # they do not distribute source. I don't know if this is the "module" form of the answer you want: http://www.replay.com/ Download Netscape Communicator 4.04 with 128 bits SSL today on: ftp.replay.com Replay Associates distributes this software so you can safely conduct your E-commerce ---- Tim May wrote: > Final comment: If I find the motivation, I may finish an essay I've been > working on about how we, the Cypherpunks and the World, are *retrogressing* > in crypto areas. Most of the exotic applications are no longer being > discussed, and various mundane commercial products are the main focus. > Yawn. How about moving this list to encrypt its transmissions in the recipient's public keys, just to begin encrypting Net traffic? Obviously not to hide what is being said, but simply to start moving communications into the encrypted realm. That way, we'll build up the software tools for handling this, and try to get other lists to do the same. Maybe encourage all pro-crypto people to use it for all email to as many other people they talk with as possible. (Adopt two others...) Heh: a white-list to allow only encrypted messages through. Encourage Senators to set up public keys. In general, try to get the general flow of traffic encrypted, even if PGP is "mundane" these days. Solving the human factors problem of getting its use wide-spread is _not_ a mundane problem. Encryption ain't gonna be that useful if only a few in-the-know use it. ---guy

2 1

Re: Is FEAL developed by NTT safe?
by Nobuki Nakatuji 17 Dec '03

17 Dec '03

> >In article <19980105070034.3946.qmail(a)hotmail.com> you write: >> Is FEAL developed by NTT safe? Where isn't safe if it is here because it >> isn't safe? > >FEAL is dead; I wouldn't ever use it in any new product. >Use triple-DES instead. > What kind of method was FEAL decoded in? ______________________________________________________ Get Your Private, Free Email at http://www.hotmail.com

2 1

Silly Shrinkwrapped Encryption
by Eric Cordian 17 Dec '03

17 Dec '03

Could someone poke through Lotus Notes with a debugger and see exactly how this "giving 24 bits to the government" is implemented? Most commercial software simply introduces redundancy in order to limit the keyspace to 40 bits, regardless of the advertised length of the key. This claim that they deliver 64 bits of key to the customer seems a bit bogus. Of course, they could have done something clever, like generating a completely random 64 bit key, and then encrypting 24 bits of it with a giant government-owned RSA public key, and including this additional information with each message. However, it seems unlikely that they would employ such strong encryption for message recovery, while offering only 64 bits for message encryption. Is Lotus Notes encryption documented anywhere? Are the differences between the export and domestic versions disclosed to overseas customers? -- Eric Michael Cordian 0+ O:.T:.O:. Mathematical Munitions Division "Do What Thou Wilt Shall Be The Whole Of The Law"

7 9