I'm disappointed at the *nonexistent* serious response to the Mycotronx postings on the list (I guess we do have some new algebraic formulas, though.) Apparently, these are just to hot for anyone to handle. I think these should be getting our utmost scrutiny as a group for tactical rewards. Are we at war or aren't we? So once again I have to do some dangerous limbwalking because all the other cyphersheep are clutching mommy's apron :). Okay, here goes. I'm sure there will be many inaccuracies but I think it is better here to be loud and wrong than to be silent and let it die with a whimper and nary a peep. I'd like to hear other reactions surely much superior to my own unauthoritative wanderings. I'll put in many questions; if anyone has insights into them please forward them to me and I will summarize (writing about each point to the list will probably take up too much traffic). * Also, if anyone can independently *verify* *any* of these pieces of information, please say so. * If you have access to databases that record relevant info from accounts listed and that kind of thing, and aren't at risk in doing so, please query them. * What about the people listed? Ever encountered them? * Interpretations of codenames and numbers especially of interest. * The possibilities for a little creative and ingenious `social engineering' (esp. with all the phone numbers in part 1) are absolutely unlimited for some really nervy cypherpunks, but I'm not going to encourage it... * Have there been any `repercussions' to the posting on cypherpunks? We need to know how afraid people are of us. Tighter security? Disconnected phone numbers? New code names? In sending me mail, please tell me if I can quote you or your address in the summary or just attribute it anonymously. Also, do not assume that email is secure. If a PGP key of mine will make the difference between your sending me email and not, I'll send it to you. * * * First of all, as a very preliminary opinion, it all looks believable and plausible. Ironically, there is almost too *much* information! The first document was forwarded anonymously to the list by nobody@alumni.cco.caltech.edu. Both documents contain some comments apparently inserted by the source, the first only at the beginning, the second at the beginning and in the middle. In the first a statement is quoted

the government wants us to trust to keep the Clipper design secret, don't know jack shit about security.

this comment makes sense in the light of a later message that purportedly revealed the source of the data. The statement also refers to `general ledger' probably referring to the second posting. The second posting came forwarded anonymously from nobody@alumni.cco. The contributor talks of leaving out account numbers. Also made two comments on the employee bonuses. * * * In posting 1 we have a great deal of very critical information on people involved in the company, current projects, company contacts, amazingly detailed cost/finance records. We even know their bank and banker! NSA contacts listed! It's not clear that all these diverse records would be stored in one volume of information. They appear to be pasted together from various sources, with some continuity in places. A later posting also suggests the reason for this long-term `snapshot' of company activity at the highest level. The most critical `big-picture' elements of posting 1 are probably the companies mentioned. It paints a clear picture of Mycotronx as a sort of `middleman' in coordinating and contracting other companies to do chip fabrication and testing, apparently with the NSA as their sole customer. AT&T was paid $100K under `Capstone Financial Commitments.' The companies VLSI Tech (fabrication?) and Exatron (testing?) figure prominently. Technical documentation by ELITE. Most amazing is the list of employees and their occupations. If it is complete, then it is remarkable in the number of employees, 10. There is a wide range of occupations from engineer to secretary to president that suggests the list may be complete. Chips: posting 1 refers to MYK80 for testing. Many references to KG44B, with several hundred thousand dollars worth of deliveries to the NSA. KG-48B appears to still be in testing phases. Part of the `Outrunner' project. The `Outrunner' project figures very prominently, what is it? Maybe a specialized chip for Air Force security (appears to be cryptographic because of KG-46 `Tactical Decryptor'). Capstone shows up at the end under `Financial commitments'. It's not clear if Clipper is referenced anywhere. There are many product codes that may refer to it. * * * In posting 2 we have an incredibly detailed, perhaps complete, financial ledger for the company listing everything from employee costs to office supplies. An accountant would probably find it much more readable than me. Because of the probable single source, the information is more focused (into financial categories) than that in posting 1. There are three columns in each series, beginning balance, debits, and credits, supposedly for first four months of 93. Series are probably some Federal or IRS categories for reporting. It is organized into `series' with 1000 recording various brokerage agencies. This may reflect that employees have stock options in the company. Other entries are customer and employee accounts receivable. 2000 series records employee benefits with `accued bonuses' of $341K for the period (given 10 employees, this could be astronomical for someone). Payroll is $343K for the period -- bonuses are as much as salaries. These are very high numbers for 10 employees. Probably the `upper echelon' of a few is making six figure salaries. 3000 series lists more stock. 4000 series lists sales of $2.5M for the 4 month period. 5000 lists consultant fees at $47K, subcontracts at $932K debited and $110K credited. Direct labor for Engineering came to 186K, Technician 93K, Administrative 37K. 6000 lists a lot of different categories (miscellaneous) mostly debits. 7000 series lists another `special bonus' $132K debit, $123. Net money debited and credited at the end of the statement is given as $12.5M for the four month period. Finally the source lists some `outstanding VLSI purchase orders'. It is not clear if these are owed to Mycotronx or Mycotronx owes someone else, but in the first posting the same figure $100K is mentioned for AT&T under `Capstone Financial Commitments', so these are probably payments by Mycotronx. In this document we see that `Compass' is software, a total of $160K. Motorola $76K, VLSI Tech (for the Capstone project) $212K. Myk78 (Clipper?) figures prominently with VLSI Tech: $66K, fix $68K, 78A prototype $11K, 78A production $220K. Also Myk 80 #1 and #2 $48K and $33K, and Myk82 and Myk 79 (80K and 79K). VLSI Tech `Expoteniator' (sic?) $163K. The exponentiator might be a general purpose digital exponentiator suitable for integration with many cryptographic techniques (Diffie Hellman, RSA, etc.) * * * Battle plan: *If* Mykotronx is to be harassed, the things that might be useful to focus on are the large bonuses. Where is all that cold cash going? If it ended up in the hands of a few (or even one) it would not be good PR, to say the least. Also, Mykotronx is clearly heavily dependent on VLSI Tech, and the company does not appear to sell to anyone other than the NSA currently. So those are the jugular veins, so to speak. I suppose if we were really extremists, like animal rights activists, we might individually harass members of the company. I don't encourage anyone to do this unless they do something to provoke it. However, a little friendly getting-to-know 'em type interaction might be interesting and help make sense of our current horde or glean other information. In particular, if anyone in the company feels (shall we say) undercompensated that could be another Achilles heel after they hear how much bonuses are coming out (bonus? I haven't heard about any bonuses! You heard of any bonuses?) Following is the mostly raw undistilled stuff. As noted, please comment on *anything* to me personally in email, and I'll try to organize, compile, and make sense of it all. Special thanks to the `anonymous' individual who was willing to risk potentially severe repercussions to bring the outrageous secrecy concerning the chip to glaring lighted public exposure and those who went out of their way to help `him'. Hey, even though this person could greatly benefit from Introductory Espionage 101 we love you anyway. You'll probably be the main character when Cypherpunks get their own sitcom or Monday Night Movie... posting 1 ======== * address, phone, FAQ of company * bank that holds company account(s)? Shearson Lehman Brothers. Acct #509 24261 12011. * Fed Ex Acct #1122-7492-8 * List of employees names and occupations. There are 10 employees listed.

Bob Gottfried, CEO Leonard J. Baker, President Ralph O' Connell, aka "The Father of COMSEC", NSA Lobbyist Mike Furusawa, Space COMSEC Manager Patti Linahan, Executive Secretary Kikuo Ogawa, Buyer R. Todd, W. Greenfield, KG-44B (Outrunner) Project John C. Droge, Personnel Bob Todd, Manufacturing Manager Landy Riley, Engineering

* Has anyone heard of an `NSA lobbyist'? This is very interesting. Later O'Connell is listed as `NSA Contact'. * Also, `COMSEC manager'? * `Buyer' of what? All major parts? * What about the code KG-44B Outrunner project? Under `Principle NSA Technical Contact' we have the NSA address (`Maryland Procurement Office) and code

Attn: N244 (CEB) (MDA904-92-G-0354/J.O. 5001)

* Code names: what are these? People involved are clues. We already know KG-48B is also `Outrunner' and 48B and 46 are related somehow. * 46 is a `Tactical decryptor unit' -- sounds like a military application. Involvement of Air Force agents confirms it. * What is `Computer Systems Command'? That would really nail it, probably. * Capstone is being built by Mycotronx, right? It's likely Clipper and Capstone are also named KG-?. I don't think KG-46 and 48B are Clipper and Capstone due to the `tactical' Air Force involvement. Also, Clipper is MYK78, right?

KG-46 Tactical Decryptor Unit and KG-48B Outrunner Provisioning Conference participants: Robert Todd, Mykotronx Bill Greenfield, Mykotronx G. Burgio, NSA J. Gochnour, NSA J. Wimpy, Air Force Computer Systems Command S. Solis, Air Force Computer Systems Command

To Be Discussed at meeting May 18 & 19, 1993

* This is an amazing piece of intelligence. These meetings were scheduled *after* this posting appeared for us. I think there are a lot of NSA agents having nightmares right now. * It is not clear, but it may be that `Outrunner Project Milestone Payments' were the subject of the May 18,19 meetings. (What is a `milestone payment'? Is that an NSA term? Military?) The meeting was very likely on Outrunner given the rest of the information. * The dates for payments are 2/14/92 (Preliminary Studies) to 5/13/93 (Deliver 4 KG-44B to NSA). What is a known project under those dates? * Most categories refer to chip design with terms like VLSI and `complete fab' and `complete tests', `crypto verif'. Also, is VLSI a company? * Entires 11a,11b,13-17 are deliveries to the NSA, batches of 44B. What is chip 44B? Very important. No deliveries of 48B to NSA listed. Since this is in the `outrunner' categories we now know that KG48B, 44B, 46 are all related. Also, the KG number appears to be some parameter on the device code. * What are these keywords: `Complete PDR' (preliminary design review?) `Complete CDR' (concluding design review?) `SFA review VLSI'? Next sounds like a `Invoice' for KG-44LSI. Mykotronx P/N M20/00301XXX KG44 VLSI Procurement to

United Technologies Microelectronics Center Colorodo Springs, CO 80907

Can't spell! The part I like is ``Secret item handling''. The invoice is fairly small, refers to Group B and Group C testing (?). Also a statement `export of this product is controlled by U.S. Disclosure of related technical data to foreign nationals without the appropriate export license is prohibited by law.' Test plan for MYK-80: Work for Exatron. MYK-80. 176 pin TQFP might pinpoint the chip. IMS tester? Installation of PET (Positron Electron Tomography? Like a microscope?) `handlers' at Mykotronx. Training & Manuals (for MYK-80?) subcontracted to ELITE Technical Corp (Redondo Beach, CA). `Capstone financial commitments' * ``Basic VII Cap VLSI 10'' $212,000. Sun 1 yr maintenance warranty. `Compass' $160K? IKOS System. ELITE Tech. Corp. Plotter. SJ (1) and (2), $71k and $76k. * AT&T, $100K (?) What is Mycotronx *paying* AT&T 100K for Capstone? * Another `Compass' $110K. VLSI Tech $30K and $163K. VLSI Tech Capstone TQFP $10K. Hm, both VSLI Tech. and Exatron do TQFP. * VLSI Tech Exponeniator Tamper System $163K? * $225K for `Litronics'? posting 2 ========

Acct Descr Beg Bal Debits Credits Shearson Lehman 286,511 2,620,096 2,670,822

Paine Webber 95,602 868 0

Dean Whitter 55,391 484 0

Petty Cash 3,000 0 0

* Why is so much stock being traded? What is it for? Employee bonuses? Ownership of child companies?

Raw inventory 172,252 0 76,064

* not much, although what is it in? reconfirms picture as just an intermediate company, almost just a `reseller'.

Accrued payroll 25,637CR 343,682 318,045 Accrued bonuses 214,040 341,240 127,200

* how does this break down among employees?

Common Stock 169,320 0 61,435

Capital disbursement 916,675 222,230 0

Retd Earnings, begng 2,385,020CR 0 0

* more stock. What does it mean? Retd? disbursement?

Subcontracts 0 932,210 110,419

* almost $1M debit for 4 months. Most of the action is here.

Materials/parts 0 186,252 22,423

* for what?

Direct labor-Engnrg 0 240,341 54,172

Direct labor-Technician 0 129,839 37,459

Direct labor-Adminst 0 47,542 10,081

* why are these in a different category than employee costs? What's the difference?

Special Bonus 0 132,200 123,200

* Comes out to $9K. What does it mean?

G&A Labor 0 103,4520 0

* G&A means? 100K is fairly large; more than consulting fees for example.