- cypherpunks - lists.cpunks.org

[cryptography] Fwd: GB Secure Messenger V 06 released
by R.R. D. 25 Oct '13

25 Oct '13

fwd fyi ---------- Forwarded message ---------- Subject: GoldBug Secure Messenger V 06 released GoldBug - Secure Instant Messenger / V 0.6.2088 released. http://goldbug.sf.net https://sourceforge.net/projects/goldbug/ Download: https://sourceforge.net/projects/goldbug/files/goldbug-im_0.6._RELEASE/ Encryption Model: (SSL -> (AES -> (RSA -> (Message)))) GoldBug is a secure Instant Messenger. You can be sure with using GoldBug (GB), that no third party can look into your chat communication. Private user-to-user communication remains private. GoldBug therefore uses strong multi-encryption with different layers of modern encryption technologies of well known and revised crypto libraries (like libgcrypt (GnuPG) and OpenSSL). The app offers as well decentral and encrypted Email and decentral public E*IRC-Chat. GB is a Desktop / Mobile GUI Interface based on libspoton: http://spot-on.sf.net New Features and Improvements: (1) Introduction of ElGamal encryption key pairs (as alternative to RSA-Keys). (2) Signature key pairs are extended to a choice of: DSA and RSA. (3) Added Accounts for chat-servers/neighbors-connections: Create a dedicated connection on your EMPP-Chat-Server for friends only with a password. (4) Added pop-up windows per 1:1-friend-chat (doubleclick on a friend to open it). (5) Allow neighbors to be defined such that (non-ssl)-plaintext connections are prohibited (HTTPS-Only-Connections, Default: enabled - For that reason, please remove neighbors.db. in case you overtake your ".spoton"-datapath). (6) Introduced threaded peers: Go parallel with your processes! (7) Added Magnet-Uri Scheme for e*IRC/Buzz-Chat Channels as kind of Booksmarks for your echoed IRC-like-Chatrooms! _______________________________________________ cryptography mailing list cryptography(a)randombit.net http://lists.randombit.net/mailman/listinfo/cryptography

2 1

Re: [pfSense] Hardware requirements for gigabit wirespead
by Chris Bagnall 24 Oct '13

24 Oct '13

On 24/10/13 7:31 pm, Adam Thompson wrote: > If I upgraded to a better-quality unit, or switched to licensed > spectrum, I could probably eliminate the variability and increase speed > simultaneously. Indeed, we have Ubiquiti kit running point to point links in the 5Ghz unlicensed spectrum (band C) over around 18km which deliver ~65Mbps throughput. I think our distance record is just shy of 68km. > Within the Ubiquity line, the AirFiber apparently would get me to > ~99.99% reliability at ~600Mbps, or ~99.9% reliability at ~1Gbps. Still > using unlicensed spectrum, using the built-in directional antennas. Do check the 24Ghz spectrum rules carefully in your jurisdiction - certainly here in the UK the 24Ghz unlicensed spectrum is limited, and only allows fairly low power without a licence. > I do not have personal > experience with Alvarion, but I can unreservedly recommend Dragonwave. I'd add Motorola Orthogon kit to that list, based on some offshore experience with it a few years ago. Kind regards, Chris -- This email is made from 100% recycled electrons _______________________________________________ List mailing list List(a)lists.pfsense.org http://lists.pfsense.org/mailman/listinfo/list

1 0

CryptoSeal shutters, ala: LavaBit
by grarpamp 24 Oct '13

24 Oct '13

Voluntary shutdown beforehand... https://privacy.cryptoseal.com/ http://cryptoseal.com/team/ https://news.ycombinator.com/item?id=6585649 http://arstechnica.com/information-technology/2013/10/cryptoseal-vpn-shuts-… http://it.slashdot.org/story/13/10/21/2157225/cryptoseal-shuts-down-consume…

13 27

"How I compiled TrueCrypt 7.1a for Win32 and matched the official binaries"
by staticsafe 24 Oct '13

24 Oct '13

https://madiba.encs.concordia.ca/~x_decarn/truecrypt-binaries-analysis/ -- staticsafe O< ascii ribbon campaign - stop html mail - www.asciiribbon.org Please don't top post. It is not logical. Please don't CC me! I'm subscribed to whatever list I just posted on.

1 0

Mail Lists In the Post-Snowden Era
by grarpamp 24 Oct '13

24 Oct '13

Regarding the subthread about examining sources... http://ask.slashdot.org/story/13/10/22/1416201/ask-slashdot-can-bruce-schne…

1 0

Legality of warrantless tech trolling
by grarpamp 24 Oct '13

24 Oct '13

And will these sorts of rulings be used to support cases brought to stop the recently disclosed spy programs... http://www.wired.com/threatlevel/2013/10/warrant-required-gps-trackers/

1 0

Re: Undernet IPv6 Interop [was: Enigmabox/cjdns]
by Eugen Leitl 24 Oct '13

24 Oct '13

Forwarded with permission. ----- Forwarded message from Caleb James DeLisle <cjd(a)hyperboria.ca> ----- I'm not really worried about what the IETF has to say, at some point I'll probably add an option to use IPv4 for cjdns too. When you do a DNS lookup for a site it will allocate an address for that machine out of whatever block you choose. Applications won't even have to support IPv6 to support cjdns. As far as address generation speed, the address is a double-sha-512 of your public key so it's extremely fast. Anything less than 128 bits (you're forced to collide the last 8 bits) would be dangerous. I'm sure we could have decided to limit valid keys to a fixed 16 bits or maybe even 24 but 48 bits would be quite unreasonable to expect of small devices. ----- End forwarded message -----

2 1

Re: [serval-project-dev] More on mesh addressing.
by Paul Gardner-Stephen 24 Oct '13

24 Oct '13

Hello, Jeremy I think has answered the broadcast issue, so I will focus more on the entropy issue. On Thu, Oct 24, 2013 at 3:48 PM, Miles <myles(a)tenhand.com> wrote: > > > On Wednesday, October 23, 2013 9:18:36 PM UTC-7, Paul Gardner-Stephen > wrote: >> >> Howdy, >> >>> >>> I think it is better that we harvest a nice lump of entropy from the >> radios rather than install random data (that might give naughty people help >> reproducing your private keys). We could read RSSI levels from the UHF >> radio, hash it a couple of times, and feed some bits into the entropy pool. >> This would just require talking to the radio a bit, which isn't too hard. >> > Using the radio as a HWRNG is interesting. Wouldn't RSSI be easily > predictable (and influenceable) by any observer with an SDR radio? At the > very least you'd need to tune the radio to an unknown channel, bandwidth & > hopping code first. Or use the difference between the two radios in a > clever way. User space clock solutions like havaged or DakaRand seem > easier. > I think clocks are good to use, also. For the radio RSSI, we could easily make an entropy gathering mode where the radio hops over quite a wide band, perhaps from about 870MHz ~ 1000MHz in a random pattern sampling ambient energy levels, i.e. without talking to a remote radio, just listening. Combine that with some clock input, and feeding the RSSI results into the forward channel selection to help further randomise the hopping sequence while sampling for RSSI, and we should be able to make a fairly robust entropy source. Thoughts? Paul. > > >> >>> >>>> I am not sure how easy it would be to detect the address conflicts when >>> they occur (regardless of address range and size). It would probably >>> require some careful thought and work to implement it >>> >>> >> I agree that it is ugly in many ways, short of getting a doctoral student >> to work on the problem for a few years. Even then, we still need a solution >> until then. Let's keep thinking about it for a few days and see if either >> of us can come up with a good solution. >> > IP collisions could be an unintended accident or a deliberate DOS. In the > case of DOS, doing nothing seems better than amplifying/feeding the energy > monster. > > Using the Mac -> IP conversion, we know that any accidental collision will > share our last 3 MAC bytes. But the odds are very good they won't share > bytes 2-3. > RARP/ARP/RARP would be awesome if it didn't fail for hidden/distant/lossy > nodes. > > Nodes with IP address conflicts can still send and receive broadcast > traffic. What is serval already broadcasting that we could use to look for > trouble unicasting? > Broadcast to nearest node's (serval?) echo service, unicast to them, if > the response doesn't come back, re-Ip? > > -- > You received this message because you are subscribed to the Google Groups > "Serval Project Developers" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to serval-project-developers+unsubscribe(a)googlegroups.com. > To post to this group, send email to > serval-project-developers(a)googlegroups.com. > Visit this group at > http://groups.google.com/group/serval-project-developers. > For more options, visit https://groups.google.com/groups/opt_out. > -- You received this message because you are subscribed to the Google Groups "Serval Project Developers" group. To unsubscribe from this group and stop receiving emails from it, send an email to serval-project-developers+unsubscribe(a)googlegroups.com. To post to this group, send email to serval-project-developers(a)googlegroups.com. Visit this group at http://groups.google.com/group/serval-project-developers. For more options, visit https://groups.google.com/groups/opt_out.

1 0

Re: [Cryptography] [RNG] on RNGs, VM state, rollback, etc.
by Russ Nelson 24 Oct '13

24 Oct '13

Tony Naggs writes: > I think you a overestimating how much real entropy you will collect this > way [ through powerline drift.] Indeed. By the time you set up a powerline interface, you may as well just reverse-bias a diode, compare it to a low-pass-filtered version of itself, and capture that noise. You could do it with a DigiSpark, and get a USB bytestream. 100% open source, 100% auditable. http://digistump.com/ -- --my blog is at http://blog.russnelson.com Crynwr supports open source software 521 Pleasant Valley Rd. | +1 315-600-8815 Potsdam, NY 13676-3213 | Sheepdog _______________________________________________ The cryptography mailing list cryptography(a)metzdowd.com http://www.metzdowd.com/mailman/listinfo/cryptography

3 2

[Bitcoin-development] Core Development Update #5
by Melvin Carvalho 24 Oct '13

24 Oct '13

https://bitcoinfoundation.org/blog/?p=290 Very excited about this, particularly the 80 bytes embeddable message. I do believe satoshi mentioned he wanted to add short messages, at some point. Great work Gavin & all! ------------------------------------------------------------------------------ October Webinars: Code for Performance Free Intel webinars can help you accelerate application performance. Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from the latest Intel processors and coprocessors. See abstracts and register > http://pubads.g.doubleclick.net/gampad/clk?id=60135991&iu=/4140/ostg.clktrk _______________________________________________ Bitcoin-development mailing list Bitcoin-development(a)lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bitcoin-development

1 0