Re: Which internet services were used?

2001-09-17 Thread Matt Crawford
A german TV news magazine (ZDF spezial) just mentioned that the terrorists prepared and coordinated also by using the internet, but no details were told. [Moderator: I've listened to virtually all the news conferences made so far. The FBI has yet to make any such statement. The only

Re: Did the US defeat wiretapping success?

2001-09-17 Thread Matt Crawford
Senator Hatch was interviewed by national media on Tuesday and stated that the US government had voice intercepts of calls talking about success with two targets. He was later criticized for talking about the intercepts. Hm, criticized? Why not indicted? (a) Whoever knowingly

Re: FBI-virus software cracks encryption wall

2001-11-27 Thread Matt Crawford
If they only cover Windoze (which is likely) the result will be that the criminal / paranoid / privacy freak / hacker community will just plain migrate to another OS... Which would be good for the world, don't you think? When outlaws use Linux, Linux will be outlawed. And I'm not being

Re: CFP: PKI research workshop

2001-12-26 Thread Matt Crawford
As I never tire of saying, PKI is the ATM of security. Meaning that has a certain niche relevance, but is claimed by proponents to be the answer to every need, and is the current magic word for shaking the money tree. - The

Re: PGP GPG compatibility

2002-01-15 Thread Matt Crawford
Is there even development on the PGP (product) line? AFAIK they (NAI) have not release PGP 7.x in source form. Worse, there are a couple of bugs I found in 6.5.8 when I was porting it to Tru64, but who knows if anyone is listening over at NAI. Years ago I bought a few copies of commercial

Re: Stego applications for other file types

2002-01-17 Thread Matt Crawford
I think there must be some sort of steganography tools in the Microsoft Office Suite. I say this because people often tell me they are sending me a Word or Powerpoint file with important information in it, but I've yet to discover any. :-) [Moderator's note: I

Re: [linux-elitists] Re: Looking back ten years: AnotherCypherpunksfailure (fwd)

2002-01-28 Thread Matt Crawford
There are other problems with using IPsec for VoIP.. In many cases you are sending a large number of rather small packets of data. In this case, the extra overhead of ESP can potentially double the size of your data. HOW small? You'd already be adding IP+UDP+RTP headers (20 [or 40] + 8 +

Re: Schneier on Bernstein factoring machine

2002-04-16 Thread Matt Crawford
Businesses today could reasonably be content with their 1024-bit keys, and military institutions and those paranoid enough to fear from them should have upgraded years ago. To me, the big news in Lucky Green's announcement is not that he believes that Bernstein's research is

Re: Quantum crypto broken?

2002-05-14 Thread Matt Crawford
scatter an input photon, but I'm sure you needn't lose 1/2 of them. But I agree that the use of this device can be detected by the communicating parties. Matt Crawford (former quantum mechanic

Re: building a true RNG

2002-07-29 Thread Matt Crawford
2) I can't prove that a standard hash function such as SHA1 generates all possible codes, but I consider it likely. It would be quite shocking if a strong hash function such as SHA1 generated fewer codes than a weak function such as H0. I think you could do a probabilistic

Re: Cryptographic privacy protection in TCPA

2002-09-04 Thread Matt Crawford
The basic idea of using zero-knowledge proofs to create an unlikable anonymous credentials system ... [sic] ! - The Cryptography Mailing List Unsubscribe by sending unsubscribe cryptography to [EMAIL PROTECTED]

Re: M-209 for sale on EBay

2002-10-28 Thread Matt Crawford
There's an M-209 for sale on EBay: http://cgi.ebay.com/ws/eBayISAPI.dll?ViewItemitem=726499988 Interestingly enough, some people are blocked for legal reasons from getting to it. Even more interestingly, connecting from a Department of Energy network IP address with a .gov domain

Re: Micropayments, redux

2002-12-16 Thread Matt Crawford
No, it doesn't. It doesn't take unlimited time for lottery-based payment schemes to average out; finite time suffices to get the schemes to average out to within any desired error ratio. Strictly speaking, the average will come within your error tolerance of the expected value *with

Re: AES-128 keys unique for fixed plaintext/ciphertext pair?

2003-02-18 Thread Matt Crawford
... We can ask what is the probability of a collision between f and g, i.e. that there exists some value, x, in S such that f(x) = g(x)? But then you didn't answer your own question. You gave the expected number of collisions, but not the probability that at least one exists. That

Re: Keysigning @ CFP2003

2003-03-25 Thread Matt Crawford
I must be out of touch - since when did PGP key signing require a photo id? It's rather efficient if you want to sign a large number of keys of people you mostly do not know personally. Assuming, of course, that the ID is of a sort for which you have an is-a-forgery oracle. Has anyone

Re: Run a remailer, go to jail?

2003-03-28 Thread Matt Crawford
http://www.freedom-to-tinker.com/archives/000336.html Quoting: Here is one example of the far-reaching harmful effects of these bills. Both bills would flatly ban the possession, sale, or use of technologies that conceal from a communication service