RE: a new way to do anonymity

-----BEGIN PGP SIGNED MESSAGE-----

> I'd suggest just getting something running first, to get some
> prototyping experience.

Now that I've just spent some time compiling and playing with Matt's ESM
program, it seems almost perfectly suited for prototyping Pipe-Net 
since you can use it to do nested encryption.  All that's needed is 
to hack it so that it implements link encryption (i.e., send a
constant stream of random data in between keypresses).

This is what the user would do: (LESM for Link Encrypted Session Manager)
lesm -l
lesm -l
login to server 1
lesm -s
lesm -l (or better yet take over a free LESM session already running
		 between server 1 and server 2)
login to server 2
lesm -s
lesm -s

I wonder if Matt has the time and interest do this...  If not then I 
guess I can try, but I've never done real crypto programming before...

Wei Dai


-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQCVAwUBLzlIdDl0sXKgdnV5AQFKuwQAqhJulKWcPV8GWUM11+2zonT+EQ8q18YV
TAymUlhjuYo0csHP/nmoMDRpf/9veISdBQE/GlRkc1k0JsWpPBD0+6e0nA7kCTMO
xqVoXdM3F/qN31CXjMT9rgAanIXFat2Ox3bjT3g07ReaN372TPnGGvNauxO69Z52
kvWajSSXiSY=
=yF/i
-----END PGP SIGNATURE-----

...
>since you can use it to do nested encryption.  All that's needed is 
>to hack it so that it implements link encryption (i.e., send a
>constant stream of random data in between keypresses).
...
You could just send a stream of some uncomon ascii character, which you
filter out on the receiving end (if you wanted to this right, you could add
a simple escape mechanism for actually passing that character).

To avoid flooding the network and also bringing the machines on which its
running to its knees, you'd probably want to add a bandwidth-choke
mechanism to run the white noise at some reasonable rate.  You'd have to limit
the real traffic output to the same rate.  Link encryption over a broadcast
network is a tricky business.
>
>I wonder if Matt has the time and interest do this...  If not then I 
>guess I can try, but I've never done real crypto programming before...
>

For the next couple of months, I have absolutely no free hacking time.
Things on the stack include:
	- ESM 1.0
	- Diffie-Hellman encrypting and authenticating Telnet (almost ready...)
	- CFS 1.3
	- The course
	- The book
	- My real work

So I don't even have the time to figure out whether I have the interest.

-matt