- cypherpunks - lists.cpunks.org

Re: [pfSense] Hardware requirements for gigabit wirespead
by Chris Bagnall 24 Oct '13

24 Oct '13

On 24/10/13 7:31 pm, Adam Thompson wrote: > If I upgraded to a better-quality unit, or switched to licensed > spectrum, I could probably eliminate the variability and increase speed > simultaneously. Indeed, we have Ubiquiti kit running point to point links in the 5Ghz unlicensed spectrum (band C) over around 18km which deliver ~65Mbps throughput. I think our distance record is just shy of 68km. > Within the Ubiquity line, the AirFiber apparently would get me to > ~99.99% reliability at ~600Mbps, or ~99.9% reliability at ~1Gbps. Still > using unlicensed spectrum, using the built-in directional antennas. Do check the 24Ghz spectrum rules carefully in your jurisdiction - certainly here in the UK the 24Ghz unlicensed spectrum is limited, and only allows fairly low power without a licence. > I do not have personal > experience with Alvarion, but I can unreservedly recommend Dragonwave. I'd add Motorola Orthogon kit to that list, based on some offshore experience with it a few years ago. Kind regards, Chris -- This email is made from 100% recycled electrons _______________________________________________ List mailing list List(a)lists.pfsense.org http://lists.pfsense.org/mailman/listinfo/list

1 0

CryptoSeal shutters, ala: LavaBit
by grarpamp 24 Oct '13

24 Oct '13

Voluntary shutdown beforehand... https://privacy.cryptoseal.com/ http://cryptoseal.com/team/ https://news.ycombinator.com/item?id=6585649 http://arstechnica.com/information-technology/2013/10/cryptoseal-vpn-shuts-… http://it.slashdot.org/story/13/10/21/2157225/cryptoseal-shuts-down-consume…

13 27

"How I compiled TrueCrypt 7.1a for Win32 and matched the official binaries"
by staticsafe 24 Oct '13

24 Oct '13

https://madiba.encs.concordia.ca/~x_decarn/truecrypt-binaries-analysis/ -- staticsafe O< ascii ribbon campaign - stop html mail - www.asciiribbon.org Please don't top post. It is not logical. Please don't CC me! I'm subscribed to whatever list I just posted on.

1 0

Mail Lists In the Post-Snowden Era
by grarpamp 24 Oct '13

24 Oct '13

Regarding the subthread about examining sources... http://ask.slashdot.org/story/13/10/22/1416201/ask-slashdot-can-bruce-schne…

1 0

Legality of warrantless tech trolling
by grarpamp 24 Oct '13

24 Oct '13

And will these sorts of rulings be used to support cases brought to stop the recently disclosed spy programs... http://www.wired.com/threatlevel/2013/10/warrant-required-gps-trackers/

1 0

Re: Undernet IPv6 Interop [was: Enigmabox/cjdns]
by Eugen Leitl 24 Oct '13

24 Oct '13

Forwarded with permission. ----- Forwarded message from Caleb James DeLisle <cjd(a)hyperboria.ca> ----- I'm not really worried about what the IETF has to say, at some point I'll probably add an option to use IPv4 for cjdns too. When you do a DNS lookup for a site it will allocate an address for that machine out of whatever block you choose. Applications won't even have to support IPv6 to support cjdns. As far as address generation speed, the address is a double-sha-512 of your public key so it's extremely fast. Anything less than 128 bits (you're forced to collide the last 8 bits) would be dangerous. I'm sure we could have decided to limit valid keys to a fixed 16 bits or maybe even 24 but 48 bits would be quite unreasonable to expect of small devices. ----- End forwarded message -----

2 1

Re: [serval-project-dev] More on mesh addressing.
by Paul Gardner-Stephen 24 Oct '13

24 Oct '13

Hello, Jeremy I think has answered the broadcast issue, so I will focus more on the entropy issue. On Thu, Oct 24, 2013 at 3:48 PM, Miles <myles(a)tenhand.com> wrote: > > > On Wednesday, October 23, 2013 9:18:36 PM UTC-7, Paul Gardner-Stephen > wrote: >> >> Howdy, >> >>> >>> I think it is better that we harvest a nice lump of entropy from the >> radios rather than install random data (that might give naughty people help >> reproducing your private keys). We could read RSSI levels from the UHF >> radio, hash it a couple of times, and feed some bits into the entropy pool. >> This would just require talking to the radio a bit, which isn't too hard. >> > Using the radio as a HWRNG is interesting. Wouldn't RSSI be easily > predictable (and influenceable) by any observer with an SDR radio? At the > very least you'd need to tune the radio to an unknown channel, bandwidth & > hopping code first. Or use the difference between the two radios in a > clever way. User space clock solutions like havaged or DakaRand seem > easier. > I think clocks are good to use, also. For the radio RSSI, we could easily make an entropy gathering mode where the radio hops over quite a wide band, perhaps from about 870MHz ~ 1000MHz in a random pattern sampling ambient energy levels, i.e. without talking to a remote radio, just listening. Combine that with some clock input, and feeding the RSSI results into the forward channel selection to help further randomise the hopping sequence while sampling for RSSI, and we should be able to make a fairly robust entropy source. Thoughts? Paul. > > >> >>> >>>> I am not sure how easy it would be to detect the address conflicts when >>> they occur (regardless of address range and size). It would probably >>> require some careful thought and work to implement it >>> >>> >> I agree that it is ugly in many ways, short of getting a doctoral student >> to work on the problem for a few years. Even then, we still need a solution >> until then. Let's keep thinking about it for a few days and see if either >> of us can come up with a good solution. >> > IP collisions could be an unintended accident or a deliberate DOS. In the > case of DOS, doing nothing seems better than amplifying/feeding the energy > monster. > > Using the Mac -> IP conversion, we know that any accidental collision will > share our last 3 MAC bytes. But the odds are very good they won't share > bytes 2-3. > RARP/ARP/RARP would be awesome if it didn't fail for hidden/distant/lossy > nodes. > > Nodes with IP address conflicts can still send and receive broadcast > traffic. What is serval already broadcasting that we could use to look for > trouble unicasting? > Broadcast to nearest node's (serval?) echo service, unicast to them, if > the response doesn't come back, re-Ip? > > -- > You received this message because you are subscribed to the Google Groups > "Serval Project Developers" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to serval-project-developers+unsubscribe(a)googlegroups.com. > To post to this group, send email to > serval-project-developers(a)googlegroups.com. > Visit this group at > http://groups.google.com/group/serval-project-developers. > For more options, visit https://groups.google.com/groups/opt_out. > -- You received this message because you are subscribed to the Google Groups "Serval Project Developers" group. To unsubscribe from this group and stop receiving emails from it, send an email to serval-project-developers+unsubscribe(a)googlegroups.com. To post to this group, send email to serval-project-developers(a)googlegroups.com. Visit this group at http://groups.google.com/group/serval-project-developers. For more options, visit https://groups.google.com/groups/opt_out.

1 0

Re: [Cryptography] [RNG] on RNGs, VM state, rollback, etc.
by Russ Nelson 24 Oct '13

24 Oct '13

Tony Naggs writes: > I think you a overestimating how much real entropy you will collect this > way [ through powerline drift.] Indeed. By the time you set up a powerline interface, you may as well just reverse-bias a diode, compare it to a low-pass-filtered version of itself, and capture that noise. You could do it with a DigiSpark, and get a USB bytestream. 100% open source, 100% auditable. http://digistump.com/ -- --my blog is at http://blog.russnelson.com Crynwr supports open source software 521 Pleasant Valley Rd. | +1 315-600-8815 Potsdam, NY 13676-3213 | Sheepdog _______________________________________________ The cryptography mailing list cryptography(a)metzdowd.com http://www.metzdowd.com/mailman/listinfo/cryptography

3 2

[Bitcoin-development] Core Development Update #5
by Melvin Carvalho 24 Oct '13

24 Oct '13

https://bitcoinfoundation.org/blog/?p=290 Very excited about this, particularly the 80 bytes embeddable message. I do believe satoshi mentioned he wanted to add short messages, at some point. Great work Gavin & all! ------------------------------------------------------------------------------ October Webinars: Code for Performance Free Intel webinars can help you accelerate application performance. Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from the latest Intel processors and coprocessors. See abstracts and register > http://pubads.g.doubleclick.net/gampad/clk?id=60135991&iu=/4140/ostg.clktrk _______________________________________________ Bitcoin-development mailing list Bitcoin-development(a)lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bitcoin-development

1 0

Curious RNG stalemate [was: use of cpunks]
by grarpamp 24 Oct '13

24 Oct '13

On Thu, Oct 17, 2013 at 2:29 AM, Eugen Leitl <eugen(a)leitl.org> wrote: > If we had good PRNGs everywhere, with lots of trustable physical entropy > stirred in then nobody would care about talking about these. > It would be boring, since a solved problem. > > Now show me a cryptographic quality PRNG with a few MBytes of > internal state. Best, a whole robust family of them. See? That's > some quality trolling, right there. Problem is, apparently no one is solving it, so round and round it goes... physical entropy, rdrand, reboot state, prng code. I'd guess that with good sources, today's prng code is sufficiently strong and at least some unix systems do save state across reboot. Now if someone would just sell a completely open discrete logic serial port hw entropy source for under $50... that would end a lot of the talk. Even with a more costly radiation source rather than other phenomena you'd still likely make good profit in quantity from China at that price. Sell other/cheaper/slower phenomena for a little less and make even more profit. Seal some up in a pretty wrapper and call it the corporate version for $1500.

14 19