The Hacker's Encyclopedia 1998/hackers_encyclopedia.iso/pc/crypto/ipgp0202.txt

Text File | 2003-06-11 | 23.6 KB | 528 lines

   Info-PGP: PGP Digest   Wednesday 16 December 1992  Volume 2 : Number 2
                Hugh Miller, List Manager / Moderator

    Info-PGP is a digested mailing list dedicated to discussion of Philip
Zimmermann's `Pretty Good Privacy' (PGP) public-key encryption program for
MS-DOS, Unix, VMS, Atari, Amiga, SPARC, Macintosh, and (hopefully) other
operating systems.  It is primarily intended for users on Internet sites
without access to the `alt.security.pgp' newsgroup.  Most submissions to
alt.security.pgp will be saved to Info-PGP, as well as occasional relevant
articles from sci.crypt or other newsgroups.  Info-PGP will also contain
mailings directed to the list address.
    To SUBSCRIBE to Info-PGP, please send a (polite) note to
[e-mail].  This is not a mailserver; there is a
human being on the other end, and bodiless messages with "Subject:" lines
reading "SUBSCRIBE INFO-PGP" will be ignored until the sender develops
manners.  To SUBMIT material for posting to Info-PGP, please mail to
[e-mail].  In both cases, PLEASE include your name and
Internet "From:" address.  Submissions will be posted pretty well as received,
although the list maintainer / moderator reserves the right to omit redundant
messages, trim bloated headers & .sigs, and other such minor piffle.  I will
not be able to acknowledge submissions, nor, I regret, will I be able to pass
posts on to alt.security.pgp for those whose sites lack access.
    Due to U.S. export restrictions on cryptographic software, I regret that I
cannot include postings containing actual source code (or compiled binaries)
of same.  For the time being at least I am including patches under the same
ukase.  I regret having to do this, but the law, howbeit unjust, is the law.
If a European reader would like to handle that end of things, perhaps run a
"Info-PGP-Code" digest or somesuch, maybe this little problem could be worked
around.
    I have received a promise of some space on an anonymous-ftp'able Internet
site for back issues of Info-PGP Digest.  Full details as soon as they firm
up.
    Oh, yes: ALL CONTRIBUTIONS CONSIDERED AS PERSONAL COMMENTS; STANDARD
DISCLAIMERS APPLY.

Hugh Miller       | Asst. Prof. of Philosophy |  Loyola University Chicago
FAX: [phone] |    Voice: 312-508-2727    |  [e-mail]
 Signed PGP v.2.1 public key certificate available by e-mail & finger(1)

=-=-=-=-=-=

From: [e-mail] (James Campbell)
Newsgroups: alt.security.pgp
Subject: Re: pgp2.1 signed announcement botched by usenet?
Date: 11 Dec 92 16:06:09 -0600

In article <[e-mail]>, [e-mail]
   (Rob Stampfli) writes:

> I missed the official announcement of pgp2.1 which was apparently posted
> here several days ago, but I found a copy of it posted to alt.privacy.
> The message was signed by Phil with the new pgp "+clearsig=on" option.
> Unfortunately, Phil's concern about mailers slightly corrupting the message
> in innocuous ways so that it no longer matches the original, and therefore
> no longer has a valid signature, appears to be borne out by the posting to
> alt.privacy:  All empty lines in that post have one space added to them.
> The signature only checks out when one edits the posted file and ":%s/^ $//".
>
> BTW, excellent job on the 2.1 release -- a clean compile the first time.
> --
> Rob Stampfli  [e-mail]      The neat thing about standards:
> 614-864-9377  HAM RADIO: [e-mail]  There are so many to choose from.
> =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
> Here's a copy of the actual (bad) message:
>
> Path: colnet!n8emr!zaphod.mps.ohio-state.edu!malgudi.oar.net!caen!uunet!cs.utexas.edu!wupost!emorys2!memstvx1!ujacampbe
> From: [e-mail] (James Campbell)
> Newsgroups: alt.privacy
> Subject: PGP v. 2.1 Released
> Message-ID: <[e-mail]>
> Date: 9 Dec 92 01:30:38 -0600
> Organization: MSU Cryptosystems
> Lines: 54
>
  [Bad Message Omitted]

Sorry, USENET ain't the culprit; Procomm Plus and I were.  Unbeknownst to me
(but knownst to everyone in alt.privacy), Procomm's ASCII Upload feature was
secretly adding an ASCII 32 to each blank line in the post.  It's a big help
when posting to bulletin boards which interpret a blank line as the end of a
post, but a royal pain in the neck when posting signed cleartext messages, I
see.  Please, don't send messages on how to fix it; I know how, but I didn't
think about it before posting.  Sorry, folks.

 ===========================================================================
 James Campbell, Math Sciences Department, MSU; [e-mail]
 ---------------------------------------------------------------------------

=-=-=-=-=-=

From: [e-mail] (Michael T. Palmer)
Newsgroups: alt.security.pgp,alt.security,sci.crypt,talk.politics.misc,talk.politics.guns
Subject: Re: PGP v. 2.1 Released
Date: 11 Dec 92 17:49:40 GMT

[e-mail] (Carl Ellison) writes:

>Sounds like a good reason to switch from PGP to RIPEM.

Okay, could you please point us to where we can find a PGP-type program
that uses RIPEM?  I would love to not have to even *consider* patent stuff
when using a crypt program.

Ftp sites are preferable!  Thanks.

--
Michael T. Palmer, M/S 152, NASA Langley Research Center, Hampton, VA 23681
Voice: 804-864-2044,   FAX: [phone],   Email: [e-mail]
PGP 2.0 Public Key now available -- Consider it an envelope for your e-mail

=-=-=-=-=-=

Newsgroups: alt.security.pgp
From: [e-mail] (Robert Lewis Glendenning)
Subject: Re: PGP v. 2.1 Released
Date: Fri, 11 Dec 1992 18:41:27 GMT

In article <[e-mail]> [e-mail] (Conway Yee) writes:
>>Would it be possible to to devise a public key
>>encryption program that would, when used to encrypt a message with
>>someone's private key, emit a series of bytes that would appear to be
>>essentially random?
>
>If a series of bytes were to be random, no message could possibly be
>encoded within it.  The question, then becomes, is it possible that
>two entirely different encoding schemes would produces bytestreams
>which are statistically indistinguishable from each other.

I think this is wrong.  Shannon's Information Theory says that a perfectly
non-redundant message is statistically random.

Compression engines remove redundancy.  Scrambling the output (randomly
re-assigning the bytes into another file) produces a pretty good cypher.
Scrambling at the bit level might be better, but the problem of decoding
is of O(n!) complexity where N is the length of the message.  If you add
some random padding, it pushes up n as large as you want.

I believe that different compression schemes will produce identical
statistics to the extent that they are "perfect" and to the extent that
the "compression information bytes" are scrambled into the rest of the
compressed information.

Lew
--
Lew Glendenning         [e-mail]
"Perspective is worth 80 IQ points."    Nils Bohr (or somebody like that).

=-=-=-=-=-=

From: [e-mail] (James Gustave)
Newsgroups: alt.security.pgp
Subject: Re: PGP v. 2.1 Released
Date: 11 Dec 1992 18:48:16 GMT

The concern over the PGP tag-lines raises two questions in my mind.
  First, can you distinguish between a PGP file encrypted using RSA and one
encrypted using the plain encryption (IDEA only)?
  Second, how public is IDEA?  Are there copyright or import/export laws
governing its use?

As far as I can tell, the two types of encryption look the same to the naked
eye (ie. both have those tag-lines).  If there are no restrictions on IDEA,
then we can all just plead that we are only using the standard encryption
option of PGP, not the RSA stuff.
________________________________________________________________________________
james speth          finger for pgp 2.0 public-key           [e-mail]

=-=-=-=-=-=

Newsgroups: alt.security.pgp,alt.security,sci.crypt,talk.politics.misc,talk.politics.guns
From: [e-mail] (Uri Blumenthal,35-016,8621267,)
Subject: Re: PGP v. 2.1 Released
Date: Fri, 11 Dec 1992 20:07:37 GMT

From article <[e-mail]>, by [e-mail] (Perry E. MetzgerWhy does PGP has those ugly lines "----BEGIN PGP...."
>>and so on? PGP-2.1 is much better than PGP-2.0. Let's
>>make it really good now -  GET RID OF THOSE BETRAYING
>>TAGS! NOW!
>
> I guess you never read the docs. Those "betraying tags" have a purpose
> -- they allow the system to automatically find the beginning and end
> of messages.

I guess you
        a) are deprived of sense of humor;
        b) have too little experience with real crypto...

> You can feed mail messages into PGP without even
> stripping the headers.

Ge, thanks for explaining! And I was sure they are there
just to attract feds' attention... Oh, my...

> Its all very well engineered, and the feds can
> tell you are using PGP anyway by looking at the magic numbers in the
> Radix 64 text.

And what sense would a hexadecimal number prepended to an
encrypted (hexadecimal) data make to an eavesdropper?

> I don't think there is any point in stripping them,
> since it adds no security for you and will make the program a lot more
> inconvenient to use.

I do, since it can increase security via making it
"unprovable" that the message is encrypted/created
my PGP. Yes, this will prohibit one from simply
piping the whole message through PGP and
getting plaintext. Well, it depends
on which concern is bigger - to
have to strip head/tail off
the arriving e-mail,  or
fear to get caught with
using "guerilla" PGP... (:-)

> Its inconvenient enough already....

It depends. For me, PGP-2.1 is perfectly convenient and nice.
If only it didn't advertise itself so loudly with "---BEGIN"... (:-)
--
Regards,
Uri.            [e-mail]
------------
<Disclaimer>

=-=-=-=-=-=

Newsgroups: alt.security.pgp
From: [e-mail] (Uri Blumenthal,35-016,8621267,)
Subject: Re: PGP v. 2.1 Released
Date: Fri, 11 Dec 1992 20:21:36 GMT

From article <[e-mail]>, by [e-mail] (Carl Ellison):
>>----BEGIN PGP *  along with the usual mundane stuff?  Then go after
>>people for patent infringement; confiscating burglary tools, a.k.a
>>citizens' computers.....
>
> Sounds like a good reason to switch from PGP to RIPEM.

A) Since RIPEM doesn't have and [probably] isn't going to have
   key management [other than your favorite text editor :-],
   and since Public Key Servers are far from reality for
   many of us - RIPEM still has too long a way to go
   before it becomes even close to usable. [I'm not
   even starting to talk about other lacks of PEM].

B) RSAREF license is a funny thing: Jim Bidzos promised to
   release his new license for RSAREF first Tuesday after
   Thanksgiving (in his personal e-mail to me). Well,
   I don't have to tell you, that several Tuesdays
   came, but no license arrived (:-). Therefore,
   concerns Mr. Atkins had about modifying
   RSAREF are still valid...

> More to the point, someone should publish an interface description for
> PGP so that someone else can write a totally legal program which sends
> and receives in PGP format but uses RSAREF and its individual license.

As Mr. Atkins showed, it's not possible, because RSAREF doesn't
have granularity fine enough to do it, and while PKP *draft*
license allows modification, their *legal* *real* one does
not. And the "relaxed" license is "about to be released",
but that about can take forever.

On the other hand, I could envision development of PGP turning
the way real "guerilla" software should go - achieving stealth
capabilities (:-).
--
Regards,
Uri.            [e-mail]
------------
<Disclaimer>

=-=-=-=-=-=

From: mathew <[e-mail]>
Newsgroups: alt.security.pgp
Subject: Re: PGP-compatible archiver released
Date: Fri, 11 Dec 92 13:21:56 GMT

[e-mail] (Peter Gutmann) writes:
> In <[e-mail]> mathew <[e-mail]> writes:
> >[e-mail] (Peter Gutmann) writes:
> >>   - Quality Postscript documentation (600K worth)
>
> >Any chance of making the documentation available in some sort of document
> >format, rather than as a printer dump file?  I mean, how would you like it i
> >I posted this article in HPGL?
>
> There's a flat ASCII file included with the source code and executables if
> you can't handle Postscript (that's why I put the PS docs in a seperate file
> not everyone will want them.  You get the ASCII docs by default, and if you
> want better-quality ones you can grab the PS stuff).

OK, thanks.  When you said "Quality Postscript documentation" I thought you
meant that it was *only* in Postscript -- I've seen quite a few packages with
ps-only documentation.

But can't you provide some nice documentation in some sort of editable and
portable format?  TeX, LaTeX, RTF, ...?

mathew
--
You can communicate with me securely via PGP 2.1.  For information, send mail
to [e-mail].  For a big block of keys, mail [e-mail].
PGP public key fingerprint = B2 41 30 5F 5B 20 B9 D5  7C 8F 75 88 7C DA D8 C5

=-=-=-=-=-=

Date: Sat, 12 Dec 92 17:52:51 EST
From: [e-mail] (Gray Watson)
To: [e-mail]
Subject: Info-PGP licensing...

Excuse me if this has been discussed before.  I'm new to the group.

So PKP does not want to distribute licenses to PGP.  But PGP is
spreading all around.  PKP is missing an opportunity and we in the
U.S. are missing the use of PGP or are using it illegally.

So, question: How much would you pay for a license to use PGP?  $20,
$50, $100, less, more?  Be realistic because no one will give a
license for $5 (and maybe not even for $100).

If PGP users settled on a certain amount and then put some money into
a pool to hire a decent legal representative/negotiater, I would be
surprised if PKP was not at least a tiny bit interested.

Let's say $50.  I would bet a couple of hundred computer professionals
might be interested in being able to use PGP.  I know that I would.
So PKP gets $10k or so for generating some paperwork maybe more if
people saw legal PGP keys flying around.

Anyone know if there are pressures on PKP from the NSA or other
organizations to not generate licenses for PGP?

gray

=-=-=-=-=-=

From: [e-mail] (Carl Ellison)
Newsgroups: sci.crypt,alt.security.pgp
Subject: PKP/RSA comments on PGP legality
Date: 11 Dec 92 18:16:23 GMT

I went to the horse's mouth and asked some folks at PKP & RSA to comment
on PGP legality.  Here's their reply.  I have permission to post it.

This was inspired by my original question, to them, whether I could buy
an individual license to permit me to use PGP.  [I have since concluded
that I would like to get a copy of the PGP interface spec so that I could
write a program, using RSAREF, which interoperates with PGP.  I see PGP
as setting a kind of new standard format -- an alternative to PEM.]

So -- on to the reply from PKP (much from a lawyer there) and RSA:

- - -----------------------------------------------------

Risks of using pgp

One should be careful about assuming that the documentation in
electronically distributed software is accurate, especially where
law is concerned.

There is much that the documentation for pgp does not tell you about
patent and export law that you should be aware of.  Some of the
statements and interpretations of patent and export law are simply
false. This note will attempt to offer some clarification and accurate
information.

pgp seems to be an attempt to mislead netters into joining an
illegal activity that violates patent and export law, letting them
believe that they run no serious risk in doing so.

PATENTS

Patent law prohibits anyone from making, using, or selling a device
that practices methods described in a U.S. patent.  pgp admits
practicing methods described in US patent #4,405,829, issued to the
Massachusetts Institute of Technology, and licensed by Public Key
Partners.

Those who send signed or encrypted messages, post the pgp program,
or encourage others to do so are inducing infringement. Under
patent law, there is no distinction between inducement to infringe and
direct infringement. You are just as liable.

Being aware of the RSA patent makes infringement willful and
deliberate. Under patent law, a patent holder is entitled to seek
triple damages and legal fees from deliberate infringers.  While the
pgp documentation suggests you that you probably won't get sued, it
doesn't tell you what can happen when patent holders assert their
rights against infringement.

Free and legal RSA software is available. RSA Data Security has
released a program, including source code, called RSAREF. This program
is available free to any U.S. person for non-commercial use.
Applications may be built on RSAREF and freely distributed, subject to
export law.  An application that provides email privacy, based on
RSAREF, which uses the RSA and DES algorithms, called RIPEM is an
example. For information, send email to [e-mail] or
[e-mail].

NOTE: The pgp documentation states that PKP acquired the patent rights
to RSA "... which was developed with your tax dollars..." This is very
misleading.  U.S. tax dollars only partially funded researchers at MIT
who developed RSA. The U.S. government itself received royalty-free
use in return.  This is standard practice whenever the government
provides financial assistance.  The patents on public-key are no
different and were handled no differently than any others developed at
universities with partial government funding. In fact, almost every
patent granted to a major university includes government support,
returns royalty-free rights to the government, and is then licensed
commercially by the universities to private parties.

EXPORT LAW

pgp leads users to believe that it has circumvented export controls
when it says "...there are no import restrictions on bringing
cryptographic technology into the USA."  You are led to believe that
since you didn't import it, it's legal for you to use it in the US.
The "no import restrictions" claim has been made so many times, many
people probably believe it.

One would be well advised not to accept this legal opinion.  While
stated as if it were a well-known fact, the claim that "there are no
import restrictions" is simply false.  Section 123.2 of the ITAR
(International Traffic in Arms Regulations) reads:

"123.2 Imports. No defense article may be imported into the United
States unless (a) it was previously exported temporarily under a
license issued by the Office of Munitions Control; or (b) it
constitutes a temporary import/intransit shipment licensed under
Section 123.3; or (c) its import is authorized by the Department of
the Treasury (see 27 CFR parts 47, 178, and 179)."

Was pgp illegally exported? Was pgp illegally imported?  Of course.
It didn't export or import itself.  pgp 1 was illegally exported from
the U.S., and pgp 2, based on pgp 1, is illegally imported into the
U.S.  Is a license required? According to the ITAR, it is.  ITAR
Section 125.2, "Exports of unclassified technical data," paragraph (c)
reads:

"(c) Disclosures. Unless otherwise expressly exempted in this
subchapter, a license is required for the oral, visual, or documentary
disclosure of technical data...  A license is required regardless of
the manner in which the technical data is transmitted (e.g., in
person, by telephone, correspondence, electronic means, telex, etc.)."

What is "export?" Section 120.10, "Export," begins:

"'Export' means, for purposes of this subchapter: ...(c) Sending or
taking technical data outside of the United States in any manner
except that by mere travel outside of the United States by a person
whose technical knowledge includes technical data; or..."

Is pgp subject to the ITAR? See Part 121, the Munitions List, in
particular Category XIII, of which paragraph (b) reads, in part,
"...privacy devices, cryptographic devices and software (encoding and
decoding), and components specifically designed or modified
therefore,..."

A further definition in 121.8, paragraph (f) reads: "Software
includes but is not limited to the system functional design,
logic flow, algorithms, application programs, ..."

pgp encourages you to post it on computer bulletin boards.  Anybody
who considers following this advice is taking quite a risk.  When you
make a defense item available on a BBS, you have exported it.

pgp's obvious attempts to downplay any risk of violating export law
won't help you a bit if you're ever charged under the ITAR.

Penalties under the ITARs are quite serious.  The ITARs were clearly
designed to put teeth into laws that make exporting munitions illegal.
It's unfortunate that cryptography is on the munitions list. But it
is.  pgp is software tainted by serious ITAR violations.

These points on patent and export law are straightforward and can
easily be confirmed with legal advice. However, there are other
statements in the pgp documentation that should not go unchallenged.

In pgp 2.0, the author says, "I did not steal any software from PKP."
(PKP is the patent holder for the RSA patent.)  Of course not; PKP
doesn't make any software. However, not mentioned is a software
product by RSA Data Security called MailSafe.  This product was first
shipped in July of 1986.  Features such as a digital signatures on the
program itself for verification, internal self-check for virus
detection, compression of plaintext and ASCII recoding of encrypted
binary files, direct and extended trust of public keys through
certification, including the publisher's public key in the
distribution, display of a message digest, security and password
advice, and many others are in MailSafe and are carefully documented
in the user manual.  The authors of pgp have had a copy of MailSafe
and the user manual since 1987.

There may be nothing illegal about using ideas from another product,
but there's something dishonest about misleading people into believing
these ideas were your own in the interest of recruiting "fans."

pgp calls itself "public-key for the masses." Even this isn't
original.  The September 12, 1986 issue of the Christian Science
Monitor contains a page one story on cryptography, and discusses
MailSafe. In that story, an RSA spokesman is quoted as saying
"MailSafe is public-key for the masses." Reprints of this story were
widely circulated in RSA press kits, and received by the pgp authors
in 1987.

The documentation to pgp would have readers believe that pgp was the
result of a noble desire to save everyone from an evil government
threatening to deny rights to privacy; that users and distributors of
pgp have little or nothing to fear from the patent holders, who, it is
implied, are probably dishonest anyway; and that one shouldn't be
concerned about export controls because pgp beat the system for
everyone by having been developed overseas and imported legally.  The
facts simply don't support these claims.
- - -----------------------------------------------------
-- <<Disclaimer: All opinions expressed are my own, of course.>>
-- Carl Ellison                                         [e-mail]
-- Stratus Computer Inc.        M3-2-BKW                TEL: [phone]
-- 55 Fairbanks Boulevard ; Marlborough MA 01752-1298   FAX: [phone]

***** End Info-PGP Digest *****