July 2023 - cypherpunks - lists.cpunks.org

What To Expect From High Court's Whistleblower Case
by Gunnar Larson 11 Jul '23

11 Jul '23

What To Expect From High Court's Whistleblower Case The U.S. Supreme Court's upcoming decision in Murray v. UBS Securities will likely have widespread implications for the future of anti-retaliation whistleblower litigation, and could make it more difficult for would-be whistleblower-employees to succeed on anti-retaliation claims under the Sarbanes-Oxley Act, say Ann-Elizabeth Ostrager and Diane McGimsey at Sullivan & Cromwell. Read full article » https://www.law360.com/banking/articles/1696378?nl_pk=99a2a594-20ad-4b2f-a2…

1 0

CORRECTION: Judge Urged To Keep Wells Fargo Deal Stayed
by Gunnar Larson 11 Jul '23

11 Jul '23

CORRECTION: Judge Urged To Keep Wells Fargo Deal Stayed By Sydney Price An Ohio federal judge was urged by plaintiffs in a California lawsuit against Wells Fargo to continue halting proceedings on a $94 million deal settling claims the bank improperly sent mortgages of struggling borrowers into forbearance during the COVID-19 pandemic, arguing ongoing similar litigation may risk contradictory outcomes for plaintiffs. Response attached https://www.law360.com/banking/articles/1697229?nl_pk=99a2a594-20ad-4b2f-a2…

1 0

GOP Reps Press Fed's Powell To Rev Up SVB Doc Hunt
by Gunnar Larson 11 Jul '23

11 Jul '23

GOP Reps Press Fed's Powell To Rev Up SVB Doc Hunt By Jon Hill Republicans on the House Oversight Committee pressed the Federal Reserve on Monday to turn over examiner reports, internal memos and other material they are seeking as part of a probe of Silicon Valley Bank's failure, escalating their requests to the central bank's top official. 2 documents attached https://www.law360.com/capitalmarkets/articles/1697822?nl_pk=8da16ff7-f140-…

1 0

Coinbase Knew Securities Laws Applied, SEC Tells Judge
by Gunnar Larson 11 Jul '23

11 Jul '23

Coinbase Knew Securities Laws Applied, SEC Tells Judge By Aislinn Keely The U.S. Securities and Exchange Commission told a New York federal judge that crypto exchange Coinbase knew its activity could lead to the current enforcement action against it, saying the firm repeatedly disclosed the risk that parts of its business could be subject to securities laws. Letter attached https://www.law360.com/capitalmarkets/articles/1697640?nl_pk=8da16ff7-f140-…

1 0

Disbarred Atty To Pay $243M For Student Loan, Crypto Scam
by Gunnar Larson 11 Jul '23

11 Jul '23

Disbarred Atty To Pay $243M For Student Loan, Crypto Scam <https://www.law360.com/legalethics/articles/1697572?nl_pk=a931e1a0-e840-4de…> By Ryan Harroff A disbarred attorney who played a prominent role in a student loan scam and hid his cryptocurrency assets from the government during an investigation into those loans must pay $243 million in redress and civil penalties, a California federal judge has ruled. Order attached https://www.law360.com/legalethics/articles/1697572?nl_pk=a931e1a0-e840-4de…

1 0

[pq] grad thesis DGMT: A Fully Dynamic Hash-Based Group Signature
by Undescribed Horrific Abuse, One Victim & Survivor of Many 11 Jul '23

11 Jul '23

https://prism.ucalgary.ca/items/759f1bda-3e4f-4f4c-8ab6-4d247f216b0e https://prism.ucalgary.ca/server/api/core/bitstreams/32f5d380-864b-4be7-ad6… 2023-07 DGMT: A Fully Dynamic Hash-Based Group Signature Erfanian Azad Soltan, Aylar Abstract Abstract With the rapid development of quantum technologies, quantum-safe cryptographic schemes have found significant attention. Shor’s quantum algorithms for breaking discrete logarithm (DL) and integer factorization (IF) problems will bring depredation … [View More]for currently used public key algorithms, including RSA (Rivest–Shamir–Adleman), DH (Diffie-Hellman) key agreement, DSA (Digital Signature Algorithm) and ECC (Elliptic Curve Cryptography), which their security depends on solving mathematical hard problems (IF and DL problem). Therefore, applications and protocols must evolve to be quantum secure in the presence of quantum computers. It is believed that symmetric encryptions and hash functions are resilient to attacks by a quantum adversary. Therefore, signature schemes have been modified so that their security relies on hash functions instead of the aforementioned mathematical hard problems. In this thesis, we consider post-quantum digital group signatures, whose security depends on one-way functions. In practice, these functions are replaced by cryptographic hash functions, which are expected to remain secure in the presence of quantum computers. A group signature is a signature scheme that allows a group member to anonymously sign messages on behalf of the group, while anonymity can be annulled by an opening authority or group manager. In fully dynamic group signature schemes, new members can be added to the group after the initialization phase and existing members can be revoked from the group. The primary aim of this thesis is twofold. Firstly, it aims to conduct a comprehensive analysis of various hash-based group signature schemes, taking into consideration their security models, properties, and limitations. Moreover, this thesis contributes to the development of a novel fully dynamic group signature scheme, named DGMT, which addresses the limitations of previous schemes, and we prove its security (unforgeability, anonymity, and traceability), and provide the complete implementation of the this scheme for the first time. Secondly, the thesis intends to review and evaluate various revocation methods with the objective of identifying potential ways to improve the revocation method utilized in the proposed scheme [View Less]

1 0

[random] Somebody's Dissertation Involving AES Template Attacks
by Undescribed Horrific Abuse, One Victim & Survivor of Many 11 Jul '23

11 Jul '23

O_O To carry out the evaluation, the work analyzes the SCA of AES-CTR in a few hardware and software implementations. This study uses two hardware devices: a microcontroller board with an arm Cortex-M4F chip and a System-on-Chip (SoC) CoraZ7 board from Xilinx. The power trace acquisition method was used to collect trace sets on the microcontroller, and the electromagnetic method was used to collect trace sets on both microcontroller and the SoC. The findings of this study present a novel … [View More]

1 0

[spam][spam][crazy] spam
by Undescribed Horrific Abuse, One Victim & Survivor of Many 11 Jul '23

11 Jul '23

big cans of ham squeezed into tiny box

1 23

[microsoft][education] Analysis of Post Quantum Cryptography / Lee Dale / systemweakness / medium
by Undescribed Horrific Abuse, One Victim & Survivor of Many 11 Jul '23

11 Jul '23

[link to summary excised because it uses cross-host redirect tricks to retain tracking ids] [some commentary lost during system misbehavior] The following is taken from a paper I submitted for the MSc Applied Cryptography module [https://www.napier.ac.uk/courses/msc-advanced-security-and-digital-forensic…] The full code listing and PDF can be found on GitHub at https://github.com/leedale1981/msc-applied-crypto-coursework # Introduction Currently the world of cryptography is solely based on … [View More]what classical computers can achieve with well know Turing machine based algorithms. Quantum computers don’t come into the picture when it comes to general use encryption. This is set to change as quantum computers start to gain enough Qubits to successfully implement general use quantum algorithms that can break the encryption of our current state of the art public key exchange mechanisms [Bel+21]. Once this happens there will be a need for robust quantum key exchange methods that allow privacy of message exchange to be maintained, even when subjected to a quantum computing algorithms. Quantum computers with new quantum based algorithms will also make it possible to brute force current encryption keys in polynomial time. This puts any data that is currently encrypted with todays state of the art encryption algorithms in jeopardy of being cracked and made available for anyone with a quantum computer to view. Once a quantum computer with enough Qubits becomes available for general use it will mean they can also be used to keep communications between two parties secret. This paper outlines the current weaknesses in todays cryptography schemes including public key exchange methods that rely on the a mathematically hard to compute private key, and why these will be vulnerable to quantum computers in the future. It will then outline some key solutions to this problem that will be robust in a post quantum world. ...[the internals of the paper review classical and quantum cryptography and go through example quantum code. a good cypherpunk would include them so people would learn all these things. i'm not including them for personal reasons, to pressure myself to read such things a little rather than just copypaste.] ## Results When Eve interfered with the Qubits the result of the difference measurement was 65%. When no eavesdropping occurred the differences percentage dropped to only 25%. This shows that the amount of difference in bases comparisons increases when there is an eavesdropper interfering with the qubits. A percentage threshold can be set to determine when Alice and Bob should retry their communication based on a set percentage of difference of measurements. # Conclusions I have outlined the problems with cryptography that relies on hard to compute mathematical properties and the issues this creates for current asymmetric public key exchange 11 mechanisms such as RSA and elliptic curves. The current state of post quantum cryptography includes new methods of encryption such as lattice based cryptography and new public key exchange methods such as quantum key distribution. I showed that a protocol called BB84 can be used to share bits that can be later used to encrypt messages and which crucially doesn’t rely on a key that is hard to crack computationally. BB84 relies on the properties of quantum mechanics that allow two actors to know if their communication channel has been compromised. I showed an example of the BB84 protocol using a 6 bit key, due to the nature of the protocol this means that we would need a quantum computer that can support 24 qubits. Scaling this up to larger keys would means a larger amount of qubits. A 128 bit key for example would need 512 qubits and as of November 2022 the largest quantum computer produced by IBM has 433 qubits [22], falling short of the required amount for even a 128 bit key. For generating encryption keys it seems that lattice based cryptography methods are showing the most promise as protection against the computation power of quantum computers and this is most likely the area where the most benefits will be shown in the early stages of a post quantum world. In terms of communications channels then QKD methods will likely be adopted with more advanced methods like using Muons or other sources of quantum randomness to generate secret keys being used when methods become more refined and hardware is able to support the methods. # References [Deu85] D Deutsch. “Quantum theory, the Church–Turing principle and the universal quantum computer”. In: Proceedings of the Royal Society of London. A. Mathematical and Physical Sciences 400.1818 (Apr. 1985), pp. 97–117. issn: 00804630. doi: 10.1098/RSPA.1985.0070. url: https://royalsocietypublishing. org/doi/10.1098/rspa.1985.0070. [Mon94] Peter L Montgomery. “A Survey of Modern Integer Factorization Algorithms”. In: 7.4 (1994), pp. 337–365. [Sho94] Peter W. Shor. “Algorithms for quantum computation: Discrete logarithms and factoring”. In: Proceedings — Annual IEEE Symposium on Foundations of Computer Science, FOCS (1994), pp. 124–134. issn: 02725428. doi: 10. 1109/SFCS.1994.365700. [MR08] Daniele Micciancio and Oded Regev. “Lattice-based Cryptography *”. In: (2008). [Gus+09] Julia Guskind et al. “Controlling passively quenched single photon detectors by bright light Circular Semi-Quantum Secret Sharing Using Single Particles This content was downloaded from IP address New Journal of Physics Controlling passively quenched single photon detectors by bright light”. In: New Journal of Physics 11.18pp (2009), p. 65003. doi: 10.1088/1367–2630/11/ 6/065003. url: http://www.idquantique.com/;. [And20] Ross Anderson. “Security engineering: a guide to building dependable distributed systems”. In: 2020, pp. 170–170. [BB20] Charles H. Bennett and Gilles Brassard. “Quantum cryptography: Public key distribution and coin tossing”. In: Theoretical Computer Science 560.P1 (Mar. 2020), pp. 7–11. doi: 10.1016/j.tcs.2014.05.025. url: http://arxiv. org/abs/2003.06557%20http://dx.doi.org/10.1016/j.tcs.2014.05. 025. 12 [Bel+21] Davide Bellizia et al. “Post-Quantum Cryptography: Challenges and Opportunities for Robust and Secure HW Design”. In: Proceedings — IEEE International Symposium on Defect and Fault Tolerance in VLSI and Nanotechnology Systems, DFT 2021-October (2021). issn: 2765933X. doi: 10.1109/ DFT52944.2021.9568301. [KG21] Ajay Kumar and Sunita Garhwal. “State-of-the-Art Survey of Quantum Cryptography”. In: Archives of Computational Methods in Engineering 2021 28:5 28.5 (Apr. 2021), pp. 3831–3868. issn: 1886–1784. doi: 10.1007/S11831–021- 09561–2. url: https://link.springer.com/article/10.1007/s11831- 021–09561–2. [22] IBM unveils world’s largest quantum computer at 433 qubits — New Scientist. 2022. url: https : / / www . newscientist . com / article / 2346074 — ibm — unveils-worlds-largest-quantum-computer-at-433-qubits/. [CCE23] Edwin Cartlidge, Cartlidge, and Edwin. “Muons used for cryptography system”. In: PhyW 36.3 (Mar. 2023), pp. 5–5. issn: 0953–8585. doi: 10.1088/ 2058–7058 / 36 / 03 / 05. url: https : / / ui . adsabs . harvard . edu / abs / 2023PhyW…36….5C/abstract. [Dal23] Lee Dale. leedale1981/msc-applied-crypto-coursework: Coursework repository for MSc Applied Cryptography document and code. 2023. url: https : / / github.com/leedale1981/msc-applied-crypto-coursework. [View Less]

1 0

Non-canon Second Draft Spinoffs Re: Second Draft (was MC Boss Webcomic, Re: Morning Spam)
by Undescribed Horrific Abuse, One Victim & Survivor of Many 11 Jul '23

11 Jul '23

So what happened? - It kind of looks like there's been an advanced virus or something out there that presents a fake reality to people. A massive MITM. It seems like doing this was a thing before the internet; people describe exposure to fake radio stations and such. - It seems the people I bumped into are big on cult-like mind control. - Somebody told me when there's a lot of device compromise it's often a spy agency. Others have experienced that those two don't necessarily line up. … [View More]

1 0