- cypherpunks@lists.ogf.org

Telegram vs. Unhandled Expression
by rysiek 26 Feb '14

26 Feb '14

OHAI, This is very interesting, and I'd love cpunks opinion on it: http://unhandledexpression.com/2013/12/17/telegram-stand-back-we-know-maths/ Please note: http://unhandledexpression.com/2013/12/17/telegram-stand-back-we-know-maths… "Telegram backer, Pavel Durov, will give $200,000 in BTC to the first person to break the Telegram encrypted protocol. Starting today, each day Paul (+79112317383) will be sending a message containing a secret email address to Nick (+79218944725). In order to prove that Telegram crypto was indeed deciphered and claim your prize, send an email to the secret email address from Paul’s message." inb4 "this does not tackle server MITM problem" no, no it doesn't; still, an interesting bet. -- Pozdr rysiek

2 2

SSLv2
by Matej Kovacic 20 Feb '14

20 Feb '14

Hi, does anyone know which tool could be used for cracking SSLv2? Regards, Matej

2 1

re: bitcoin
by dan＠geer.org 19 Feb '14

19 Feb '14

Yesterday's letter to alumni from MIT President Reif ________________________________________________________________ Dear MIT Alumni, This evening, I sent the following message to the campus MIT community. Because I know that you care very much about the welfare of our students, I thought you might be interested to see it, too. Sincerely, L. Rafael Reif __________________________________________________________________ To the members of the MIT community: I am writing to address a problem that a group of MIT students currently face but that concerns all of us, because it highlights issues central to sustaining the creative culture of MIT. The students in question are the creators of Tidbit, a proof-of-concept code for a novel Bitcoin-harvesting strategy. After Tidbit won the "most innovative" award in a recent hackathon, the State Attorney General of New Jersey demanded that the students turn over a sweeping set of documents, code and information--a surprising and difficult turn of events for the Tidbit team. I am grateful to all those who have written to me to express their concern about this situation, and I want to make it clear that the students who created Tidbit have the full and enthusiastic support of MIT. Chancellor Cindy Barnhart and Provost Marty Schmidt met with the students yesterday. They and General Counsel Greg Morgan also spoke with the Electronic Frontier Foundation (EFF), which is providing to the students, pro bono, the independent legal representation that they need. We will remain in close coordination with the students and the EFF to offer assistance in the legal proceedings. Beyond this specific case, I believe we should provide our student inventors and entrepreneurs with a resource for independent legal advice, singularly devoted to their interests and rights. I have asked the Provost, Chancellor and General Counsel to develop and submit to me a specific proposal for creating such a resource, which will add an essential new strength to MIT's innovation ecosystem. When the MIT community works together, we spot problems, analyze them and solve them. Let's solve this one together. Sincerely, L. Rafael Reif

6 6

XMPP Server is Working Again!
by CypherPunk 19 Feb '14

19 Feb '14

Hello Everyone, Just wanted to let everyone know that the XMPP server at chat.cpunk.us is again operational. I experienced problems with it and ended up having to restore it (which, unfortunately, deleted all the user accounts). Please feel free to register again using the client of your choice. Server Name: chat.cpunk.us Supports: Voice, Video, and Text chat Server Software: OpenFire Server OS: Ubuntu 12.04.4 LTS Server Location: New York Supports SSL? Yes Support Email: cypherpunk(a)cpunk.us Certificate: Self-signed. Fingerprint below. Certificate Fingerprint (SHA1): 327581c67147225943ff36063fb6c293e95df5d3 Certificate Fingerprint (MD5): 10e8fd94a16c911bf72dc214f4e45966 PLEASE NOTE: cpunk.us is NOT associated in any way with the Cypherpunks mailing list, its administrators, or any member of the list other than myself. As such, neither is chat.cpunk.us. This is just a public service I'm providing because I believe in privacy. Enjoy! CypherPunk

3 2

Re: Cryptocurrencies for Good
by dan＠geer.org 18 Feb '14

18 Feb '14

http://www.bbc.co.uk/news/magazine-26169411 Why every household should have its own currency --dan

2 1

Chaotic Times on the Dark Nets
by Rich Jones 17 Feb '14

17 Feb '14

Rough week for the underground! Utopia has been seized by the Dutch police, BMR forums got seized by the Iranian police (anybody want to take any guesses at that one?), and now Silk Road 2.0 has been owned/possibly scammed everybody. I guess TMP will take the crown now, but for how long? I'm honestly not optimistic about the continued operation of _any_ service if Tor hidden service operators continue to operate in the manner instructed by the Tor project. There just isn't enough redundancy, servers need to be located in multiple regions simultaneously. We shall see what the future holds. R

8 10

Snowden and Compilers
by Rich Jones 16 Feb '14

16 Feb '14

In all of the Snowden docs that have been released so far, has anybody seen any mention of any NSA programs designed to subvert compilers? Compilers seems like an extremely prime target for manipulation, but as far as I am aware there hasn't been anything mentioned about this yet. Has anybody here heard anything that I haven't? R

17 21

Re: [Cryptography] Snowden Meets MacAskill, Poitras and Greenwald
by John Young 14 Feb '14

14 Feb '14

Page added. Thanks. At 07:38 PM 2/13/2014, Jerry Leichter wrote: >This one also seems to be missing a page - between "Snowden believed >that the US" and "struggled to make sense of the PRISM slides." > > -- Jerry > >On Feb 9, 2014, at 10:32 AM, John Young <jya(a)pipeline.com> wrote: > > > http://cryptome.org/2014/02/snowden-meet.pdf > > > > Snowden to MacAskill, vehemently: "GCHQ is worse than NSA. It's > even more intrusive."

1 0

consistent pcp/pbp formats (was: Curve p25519 Replacements for GnuPG?(x2 now) ..)
by Thomas von Dein 14 Feb '14

14 Feb '14

> consistent key formats are critical more than fine with me. > need to converge on: > - endianness I'm currently using big endian for multibyte values whereever they appear. It's already verified to work on little and big endian platforms (e.g. tested on aix/ppc) > - coordinate representation x, x&y, x and sign ... > or bits to show which of these ... perhaps borrow ANSI method Could you please explain this further? > - hint / indication of cipher suite / curve In pcp there's already such a hint included in exported keys, however I'm not using it, since there's no choice of different curves in libsodium so far. But it's on the list. > - text encoding of binary format (ascii) As already stated in the other subthread, I use Z85, while stef is using base85. Since Z85 is a subset of base85, I'm pretty sure we can agree on something. > - human readable format There's a human readable version of keys in pcp, but the tool itself doesn't use it (example attached). It uses the z85 encoded binary part of such a file. pcp has some more fields stored in a key than pbp: - a key id (e.g. 0x54E9C62E1852EBC5) which is required to identify a key - some text fields (owner, mail) - a serial number - key format version number I'm not sure, how stef solved the ed25519 issue (you can't use a curve25519 secret key to create an ed25519 signature directly). After some discussion on the libsodium mailinglist we came up with this: When the user generates a new key, the ed25519 secret key will be generated first. The curve25519 secret will be derived from that, since the ed25519 already contains a usable curve25519 key. In pcp I store both of them for easier access, so the ed25519 and curve25519 secret and public keys are stored, the secret keys are encrypted and I store the nonce as well (see include/pcp/key.h). Speaking of key encryption: @stef: according to your docs you're already using scrypt() for key derivation. I'd like to use that as well, but it's not part of libsodium (afaik), so I use my own method for this til scrypt() is implemented in libsodium. That's because I want to avoid writing crypto code myself. Maybe we should iron out the details off-list? bes, Tom -- PGP Key: https://www.daemon.de/txt/tom-pgp-pubkey.txt S/Mime Cert: https://www.daemon.de/txt/tom-smime-cert.pem Bitmessage: BM-2DAcYUx3xByfwbx2bYYxeXgq3zDscez8wC -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

6 23

Cryptocurrencies for Good: Revolutionizing Microdonations
by Odinn Cyberguerrilla 13 Feb '14

13 Feb '14

We've launched 'Cryptocurrencies for Good: Revolutionizing Microdonations' as an indiegogo project. This currently involves myself, Filipe Farinha, and technical support from Cryptostorm. Also, there's wine. Here's our page, launched today: http://igg.me/at/microdonations-using-cryptocurrencies As the world changes, so must we! :-)

2 1