The sorry state of non-US crypto

-----BEGIN PGP SIGNED MESSAGE-----

I just spent an hour surfing the various crypto/cypherpunks web sites. In
this hour I did not come across a single non-US site that carried anything
else but PGP. Most non-US sites just carry rants about the evil ITAR, and
a few carry the various international versions of PGP. That's it. I know
that there are several European ftp sites that have other cryptographic
software as well, but I sure as hell can't find them by browsing the web.
One would think that at lest some of the major homepages (Virtual library,
etc) carry links to such sites. Who cares if someone violates ITAR, if
overseas users can't find the exported software?

- -- 
- -- Lucky Green <mailto:shamrock@netcom.com>
   PGP encrypted mail preferred.
- ---
[This message has been signed by an auto-signing service.  A valid signature
means only that it has been received at the address corresponding to the
signature and forwarded.]

-----BEGIN PGP SIGNATURE-----
Version: 2.6.2
Comment: Gratis auto-signing service

iQBFAwUBMDq+LSoZzwIn1bdtAQGfJAF7B/XTP5VHlvTLgVRcrDHGX9kcLOANI7OE
oQbdMFG6K9V7URHL7HV4N7EaAo+TriRp
=Ocb0
-----END PGP SIGNATURE-----

Does anyone know of an addon to the Pine mailer that supports PGP? 
the only PGP software i could find required me to first compose a
letter in an editor then run it through a pgp signature program
then finally read it into my favorite mailer.

I'm looking for something that is hopefully transparent, or if not
relatively quick to do.


________________________________________________________________________
Sameer Manek                Seawolf@challenger.atc.fhda.edu         
________________________________________________________________________

-----BEGIN PGP SIGNED MESSAGE-----

> Does anyone know of an addon to the Pine mailer that supports PGP? 
> the only PGP software i could find required me to first compose a
> letter in an editor then run it through a pgp signature program
> then finally read it into my favorite mailer.
> 
> I'm looking for something that is hopefully transparent, or if not
> relatively quick to do.


My "Bryce's Auto-PGP" fits the bill.  It is an sh script so it can be
integrated without too much trouble into Pine, Elm, trn, tin, mh, etc etc.  
I have personally tested it with Pine so I know it'll work.  You can e-mail
me for a beta copy, or you can ask for a v1.0 copy if you don't mind waiting
an unspecified amount of time for beta-testing to finish.


Regards,

Bryce

-----BEGIN PGP SIGNATURE-----
Version: 2.6.2
Comment: Auto-signed with Bryce's Auto-PGP v1.0beta

iQCVAwUBMDrWWfWZSllhfG25AQEpXQP+ISF5DNtNa/SbceUTPzFkHLO7YFoV01+S
t91Tt488GplyFQrimqbJpRTRtdxNjt4fR7o23F9kbRkPRtD3zQPxi0/jjT29JrNU
Oi0eiteq2FpgAoevMdkfwdsVKupW2fb78jNnz2490JHM/Zr1CvOH+2bwziQ1i8hR
5y48rjUrLTE=
=DQYq
-----END PGP SIGNATURE-----

On Tue, 22 Aug 1995, Sameer R. Manek wrote:

> Does anyone know of an addon to the Pine mailer that supports PGP? 
> the only PGP software i could find required me to first compose a
> letter in an editor then run it through a pgp signature program
> then finally read it into my favorite mailer.
> 
> I'm looking for something that is hopefully transparent, or if not
> relatively quick to do.

Yes, and me too.  Someone sent me a package that relied upon reconfiguring 
Pine using the alternate editor option as a hook and it has never worked 
well.  This is important.  I am trying to convince my co-workers to start 
using PGP regularly and an easy interface may not be one of the best 
arguments to make (for encrypting regularly) but it's one that works on 
lots of people. 

===========================================================================
     Henry W. Farkas      |      Me?    Speak for IBM?    Fat chance.
 hfarkas@ims.advantis.com |------------------------------------------------  
   hfarkas@vnet.ibm.com   |     http://newstand.ims.advantis.com/henry
      henry@nhcc.com      |          http://www.nhcc.com/~henry 
---------------------------------------------------------------------------
PGP 6.2.2 Key fingerprint: AA D0 F5 44 C1 8C 11 52  B3 80 34 1C CE 38 EC 53
 Public key at: pgp-public-keys@pgp.mit.edu, and other popular key servers.
---------------------------------------------------------------------------
Brought to you by Henry's Hardware: Home of the Pretty Good Hack "We're not
  fast, but it's not bad, and we're cheaper than the guy down the street!"
===========================================================================

-----BEGIN PGP SIGNED MESSAGE-----

>>>>> "seawolf" == "Sameer R Manek" <seawolf@challenger.atc.fhda.edu> writes:

 seawolf> Does anyone know of an addon to the Pine mailer that
 seawolf> supports PGP?  the only PGP software i could find required
 seawolf> me to first compose a letter in an editor then run it
 seawolf> through a pgp signature program then finally read it into my
 seawolf> favorite mailer.

 seawolf> I'm looking for something that is hopefully transparent, or
 seawolf> if not relatively quick to do.

"mkpgp" is probably the best PGP/Pine interface.

Email "deviate@lipschitz.sfasu.edu" for more information.

-----BEGIN PGP SIGNATURE-----
Version: 2.6.2
Comment: Processed by Mailcrypt 3.3, an Emacs/PGP interface

iQCVAwUBMDtBSnr7ES8bepftAQGa8wP+OPvqYNQ5d/UEEo5WKjlmhg7eEtgzsURR
V92IRWAmtm/CyYS/TZSLjQaCJhjw0OCy5+tcELtJYZeUUxpLtwg1Cm4h3RtowyBj
Ou69FTKjqb56/n52afVe1mt7WGEXO9AfomrNc/rWVwhIWSMpEhTWJiccju4cVY4U
mac8kq4h5mI=
=Bsru
-----END PGP SIGNATURE-----

On Tue, 22 Aug 1995, Sameer R. Manek wrote:

> Does anyone know of an addon to the Pine mailer that supports PGP? 
> the only PGP software i could find required me to first compose a
> letter in an editor then run it through a pgp signature program
> then finally read it into my favorite mailer.
> 
> I'm looking for something that is hopefully transparent, or if not
> relatively quick to do.
> 
> 

R.A. Hayden has posted this to the list before.  I also recall Raph Levien's 
premail, but I don't know if it works for PINE, any satisfied customers 
out there?.  I admit I haven't tried either of these myself, though I 
would be interested in the results of a  *Cypherpunks sign with PINE* 
comparison of the various solutions for PGP integration into PINE.  I might 
even be persuaded to beginning signing my posts to the list.  :-)


C. J. Leonard                     (    /      "DNA is groovy"
                                   \ /                - Watson & Crick
<cjl@welchlink.welch.jhu.edu>      / \     <--  major groove
                                  (    \
Finger for public key               \   )
Strong-arm for secret key             /    <--  minor groove
Thumb-screws for pass-phrase        /   )





After a couple of comments, I've updated Pinesign to a new version.  This 
new version adds the ability to choose whether your ascii signature (ie 
$HOME/.signature) is added.  Some mail servers get confused by extra 
text, so the ability to make sure nothing extra is added was requested.

Basically, if you want to sign the message both digitally and asciilly 
(is that a word :-), just press return twice after you exit your composing 
editor.  Otherwise, make the selections you want specific to the type of 
message you are sending.

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

#!/bin/sh

# PINESIGN v2.0
# Written by:  Robert A. Hayden <hayden@krypton.mankato.msus.edu>

# PINESIGN is a simple program that will allow you to automatically sign 
# your email and news messages composed with the Pine 3.89 mail reader.  It 
# may also work with other mail and news programs, but it has not been 
# tested.

# INSTRUCTIONS FOR CONFIGURING PINE
# 
# You need to define the following options in Pine.  This can be done 
# either via the SETUP options in the main menu of Pine, or via editing 
# the .pinerc. 
#
# 	A)	signature-file=" "  (an empty space)
#	B)	enable-alternate-editor-cmd
#	C)	enable-alternate-editor-implicitly (optional but recommended)
#	D) 	signature-at-bottom
#	E)	editor=<exact path to this script>

# INSTRUCTIONS FOR CONFIGURING PINESIGN
#
# The PGP program must be in your path, and the PGPPATH environment 
# variable must be defined.  See the PGP documentation for details.
#
# Double check that the first line of this program points to sh. 
#
# Edit the SIGPATH and PINEEDITOR variables to point at your signature 
# (if any) and the editor you wish to use for your Pine mail.  Default 
# signature will be the file .signature in your $HOME directory.  
# Default editor is pico -z -t.

SIGPATH=$HOME/.signature-pine
PINEEDITOR='pico -z -t'

# INSTRUCTIONS FOR USING PINESIGN
#
# When you compose a message, you will compose your message as normal.  
#
# When you exit your editor (control-X in Pico), you will receive a prompt 
# asking if you wish to add your signature file to the message.  If you 
# respond with y, Y or just press return, your text signature file (often 
# $HOME/.signature) will be appended to your message.  If you type  
# anything else, your message will not have your signature added.
#
# Next, you will be prompted as to whether you wish to PGP sign your
# message.  If you answer with y, Y or return, you will be prompted for your
# PGP passphrase and then dumped back to the address/subject section of
# Pine.  If you type anything else, your message will not be signed.  
#
# If you selected it to be added, your .signature file will be appended 
# AFTER your digital signature. 
#
# If you have not defined your alternate editor to be run implicitly, you 
# will need to start it manually.  If you do not run the alternate editor,
# your .signature file will not be appended and you will also have to do
# that manually.  It is highly recommended that your define your alternate
# editor to run implicitly. 

### DO NOT EDIT ANYTHING BELOW THIS LINE UNLESS YOU KNOW WHAT YOU ARE DOING ###

$PINEEDITOR $1

clear
echo -n "Would you like to add your ASCII signature to this message? [y] " 
read SIG
echo " "
echo -n "Would you like to sign this message with your PGP signature? [y] "
read PGP

if [ "$PGP" = "y" ]
	then 
		pgp -sat +comment="PGP Signed with PineSign 2.0" $1
		mv $1.asc $1
fi

if [ "$PGP" = "Y" ]
	then 
		pgp -sat +comment="PGP Signed with PineSign 2.0" $1
		mv $1.asc $1
fi

if [ "$PGP" = "" ]
	then 
		pgp -sat +comment="PGP Signed with PineSign 2.0" $1
		mv $1.asc $1
fi

if [ "$SIG" = "y" ]
	then 
		echo " " >> $1
		cat $SIGPATH >> $1
fi

if [ "$SIG" = "Y" ]
	then 
		echo " " >> $1
		cat $SIGPATH >> $1
fi

if [ "$SIG" = "" ]
	then 
		echo " " >> $1
		cat $SIGPATH >> $1
fi

-----BEGIN PGP SIGNED MESSAGE-----

I use mkpgp.  It is a script that requres a lot of setting up, but once 
you learn what you are doing it makes sense.  Depending on how you want 
it, it can be totally transparent.  Personally, I took it off of total 
transparency, and now use it by invoking it with Atl-&

I lost the site where I got it from, but I have it on disk if anybody 
wants it sent.  It includes instructions, and once it is going is totally 
slick.

Sean

o-------------------o----------------------o-----------------------o
|   Sean Walberg,   |    Tech Support      | Pas_al, _obol, BASI_, |
|  sean@escape.ca   | escape communication |   PostS_ript, T_L...  |
| Mail for PGP key  |      925-4290        | C fills all the holes |
o----------------] http://www.escape.ca/~sean [--------------------o


-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQCVAwUBMDtVmt82JgvRKzQZAQGkAwP/cZU3+P2I6HB1fso4b1acv9O/QZWmPBw7
paP1jvkn0Vs9mU3yfF5kbvv6v7o/RMgm21+v/TVxnWnPnvDbHbqG/qnJmSHo1bhZ
lAoq26iwD1Urg8HXVPbnOti8PrboF2J5/cBIyQyC7tXtNI9t+ZgFu8V90QmPOHLl
wuhvOaHPjAg=
=iR37
-----END PGP SIGNATURE-----

On Wed, 23 Aug 1995, Lucky Green wrote:

> I just spent an hour surfing the various crypto/cypherpunks web sites. In
> this hour I did not come across a single non-US site that carried anything
> else but PGP. Most non-US sites just carry rants about the evil ITAR, and
> a few carry the various international versions of PGP. That's it. I know
> that there are several European ftp sites that have other cryptographic
> software as well, but I sure as hell can't find them by browsing the web.

Try these URL's:

Italy:   ftp://ftp.dsi.unimi.it/pub/security/crypt/
UK:      ftp://ftp.ox.ac.uk/pub/crypto/
Croatia: http://pgp.rasip.fer.hr/
Germany: ftp://ftp.darmstadt.gmd.de/pub/crypto/

> > I just spent an hour surfing the various crypto/cypherpunks web sites. In
> > this hour I did not come across a single non-US site that carried anything
> > else but PGP. Most non-US sites just carry rants about the evil ITAR, and
> Try these URL's:

Finland: ftp://ftp.funet.fi/pub/crypt
Sweden: ftp://ftp.sunet.se/pub/security/tools/crypt
Russia: ftp://ftp.kiae.su/pub/unix/crypto
Norway: ftp://ftp.unit.no/pub/unix/security
Australia: ftp://ftp.psy.uq.os.au/pub/Crypto

I have created a set of WWW pages at http://www.cs.hut.fi/ssh/crypto
that contains a lot of material and references to cryptographic
software, algorithms, and related information available outside the
US.  I'll expand the pages as I get suggestions for more things to put
there.  The pages will probably be quite stable and I'll try to
maintain them, so it is possible to refer to those pages wherever
references are needed for crypto archives outside the United States.

    Tatu

Lucky Green wrote:

> a few carry the various international versions of PGP. That's it. I know
> that there are several European ftp sites that have other cryptographic
> software as well, but I sure as hell can't find them by browsing the web.

Hmm... I started from 'scratch' (Yahoo, a popular take-off site) and
within 10 min found 'everything' on:

ftp://ftp.dsi.unimi.it/pub/security/crypt

Mats