- cypherpunks - lists.cpunks.org

Reduced NSA TA History
by John Young 24 Jul '13

24 Jul '13

Th NSA Traffic Analysis history reduced from 11.5MB to 3.2MB: http://cryptome.org/2013/07/nsa-traffic-analysis.pdf

1 0

NSA History of Traffic Analysis
by John Young 24 Jul '13

24 Jul '13

NSA released on 23 July 2013 "The History of Traffic Analysis: World War I-Vietnam." http://www.nsa.gov/about/_files/cryptologic_heritage/publications/misc/traf… It notes the formation of T/A (Traffic Analysis) and C/A (Cryptanalysis) as the two elements of code-breaking, using the mail analogy of T/A for the envelope, C/A for the contents. As noted elsewhere T/A is now publicized as "metadata."

1 0

Join us for a public hack day on Friday, July 26, 2013 in Munich, Germany.
by Eugen Leitl 24 Jul '13

24 Jul '13

https://blog.torproject.org/blog/join-us-tor-hack-day-munich-germany JOIN US - Tor Hack Day, Munich, Germany Posted July 8th, 2013 by kelley in dev meeting hack day Join us for a public hack day on Friday, July 26, 2013 in Munich, Germany. Thank you to our hosts at the Technische Universität München (http://www.tum.de) The agenda and conversations will be determined by you and Tor's team of developers and researchers - so bring your ideas, questions, projects and technical expertise with you! This event is open to the public and free of charge - no RSVP necessary. Friday, July 26, 2013 Start Time: 10:00 am Location: LRZ building, Sminarraum (H.E. 008), Bolzmannstrabe 1, 85748 Garching, Germany. NOTE: the room is to the right of the main entrance. For questions please contact execdir(a)torproject.org

1 0

Re: Python Random Number Generator for OTP
by Bill Stewart 24 Jul '13

24 Jul '13

> > >Â Why not use /dev/random, instead of "ensuring you have entropy"Â > > /dev/random limits the output size to the > estimated entropy. So it has abysmal > performance unless there are high performance entropy sources available. This is for a one-time pad. Limiting the output size to the estimated entropy is a *requirement*. Abysmal performance is fine, because you're going to transfer the pad using a briefcase handcuffed to a courier's arm or some similarly high-cost high-latency physical distribution method, though if you've got a higher-performance entropy source, great. > After the initial seeding this gains very little security in practice. If "gains very little security in practice" is good enough for you, you don't need a one-time pad. Yes, the pseudo-random bits you get out of /dev/urandom will probably be much better than the bits the Russians got by mashing down the keys on typewriters, and you're probably not going to be attacked with the persistence of the Venona decrypters, but don't waste your time using one-time pads unless you're going to use them perfectly. You're much better off using a long-enough RSA key and some Diffie-Hellman session key generation. (Of course, you still want good random numbers for those, but /dev/random is plenty fast enough for that, at least on any non-virtual machine.)

3 3

Re: Gnu PG is more Safe ?
by Anthony Papillion 24 Jul '13

24 Jul '13

On Jul 23, 2013, at 9:01 PM, oxopz7(a)riseup.net wrote: > Hello everybody! > > I hope all are fine, and doing well! > > I'm good member :) I hope you will accept me! Welcome to the list! It's good to see so many new members coming on board. I'm new myself. > I like to ask about GNU PG, if is more safe than other kind of > software! > that talks about Crypto ? Because GnuPG is open source, it's been extensively peer reviewed and found safe and secure. That doesn't mean it's perfect and has no errors. But they are much less likely to exist in GnuPG than in some other solutions; particularly proprietary ones. > I like to ask also about good resources in Crypto, specially about > SSL/TLS? One of the best ways to learn about tech topics is reading RFC's. The entire way SSL/TLS operates is detailed in an RFC. Read I'd and you will be infinately more informed. Unfortunately, I can't really recommend any good crypto list because I've not found many. To learn about FnuPG and practice, you might want to look at the PGPNET list. Another of interest might be Cryptography. Regards and Welcome! Anthony

7 9

Re: [serval-project-dev] mesh networking patent application - prior art request
by Eugen Leitl 24 Jul '13

24 Jul '13

----- Forwarded message from Bryce Lynch <virtualadept(a)gmail.com> ----- Date: Tue, 23 Jul 2013 13:41:35 -0400 From: Bryce Lynch <virtualadept(a)gmail.com> To: serval-project-developers(a)googlegroups.com Subject: Re: [serval-project-dev] mesh networking patent application - prior art request Reply-To: serval-project-developers(a)googlegroups.com On Tue, Jul 23, 2013 at 7:54 AM, Dan Staples < danstaples(a)opentechinstitute.org> wrote: > That's sickening. Not paying a dime in US taxes on billions of dollars > of profit apparently isn't enough for GE, now they have to patent mesh > technology. > Mesh networking is too potentially dangerous to go unrestricted. That said, I just posted a bunch of stuff to that thread with as many links to verifiable code commits in public repos as I could. Anybody so inclined to check my work, please do, and some up-votes would be nice if they don't suck too badly. -- The Doctor [412/724/301/703] [ZS] https://drwho.virtadpt.net/ "I am everywhere." -- You received this message because you are subscribed to the Google Groups "Serval Project Developers" group. To unsubscribe from this group and stop receiving emails from it, send an email to serval-project-developers+unsubscribe(a)googlegroups.com. To post to this group, send email to serval-project-developers(a)googlegroups.com. Visit this group at http://groups.google.com/group/serval-project-developers. For more options, visit https://groups.google.com/groups/opt_out. ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://ativel.com http://postbiota.org AC894EC5: 38A5 5F46 A4FF 59B8 336B 47EE F46E 3489 AC89 4EC5

1 0

Crowdfunding code reviews [was: GnuPG Safe]
by grarpamp 24 Jul '13

24 Jul '13

On Tue, Jul 23, 2013 at 11:08 PM, Peter Gutmann <pgut001(a)cs.auckland.ac.nz> wrote: > Having code that's open source doesn't help at all if no-one looks at it. It is easy to write code. Harder to write it securely. Even harder to spot your own mistakes. And unless perfect written from the start, will need reviewed and fixed. Yet time to review and fix is not as free as the time writing it, is often viewed as a chore, and happens far less than open source assumes it does. Are we developed enough to begin putting together lists of most critical libraries/tools/apps and pipelining them through a crowdfunded independant peer review program? (501c3 perhaps) Or at least put bounties on the same lists.

1 0

Gnu PG is more Safe ?
by oxopz7＠riseup.net 24 Jul '13

24 Jul '13

Hello everybody! I hope all are fine, and doing well! I'm good member :) I hope you will accept me! I like to ask about GNU PG, if is more safe than other kind of software! that talks about Crypto ? I like to ask also about good resources in Crypto, specially about SSL/TLS? Have a nice day, Cheers, Ζακάρια

2 1

Python Random Number Generator for OTP
by Tom 23 Jul '13

23 Jul '13

Does anyone on the list have some Python source code for an OTP-focused random number generator they'd be willing to share? I'm interested in seeing how different people would approach it?

15 16

Re: The Muslim Problem
by Bill Stewart 23 Jul '13

23 Jul '13

At 11:39 PM 7/20/2013, Jens Christian Hillerup wrote: >BTW, Nicolai Sennels is a racist nutcase. He's had a long career of >nobody taking him seriously in Denmark Too bad other racist nutcases don't get the same lack of respect everywhere. He certainly won't find any around here, and we've had a fairly high tolerance for craziness over the years. >Also, wasn't this list supposed to be about cypherpunk? Absolutely.

4 3