BIO-MUNITION: gifs of perl-RSA tattoo

People have been reading the list for a while will be familiar with
this piece of perl code used as a non-exportable, supposedly ITAR
controlled .sig:


#!/bin/perl -s-- -export-a-crypto-system-sig -RSA-3-lines-PERL
$m=unpack(H.$w,$m."\0"x$w),$_=`echo "16do$w 2+4Oi0$d*-^1[d2%Sa
2/d0<X+d*La1=z\U$n%0]SX$k"[$m*]\EszlXx++p|dc`,s/^.|\W//g,print
pack('H*',$_)while read(STDIN,$m,($w=2*$d-1+length($n)&~1)/2)


which is an implementation of RSA encryption in perl optimised for
size.

A lot of list bandwidth a while back was consumed with discussion of
the T-shirt versions of this .sig.  More info on the .sig, and T-shirt at:

.sig:		http://www.dcs.ex.ac.uk/~aba/rsa/
t-shirts:	http://www.obscura.com/~shirt/

Update wrt the idea of using the .sig for a tattoo:

Richard White <maldoror@pacificnet.net> had his wife (who is a tattoo
artist) put a tatto of this code on his forearm.

Gif of the Richard's tattoo now available here:

	http://www.dcs.ex.ac.uk/~aba/rsa/tattoo.html

This means that he may, technically, qualify as a munitions on the
USML, and as a result not be allowed to show the tattoo to a foreign
national in the US, nor leave the US.

Note it says _technically_ above, as there was much discussion on the
list re the shirts as to whether the shirt actually would ever be
classified as a munition due to the impracticality of using a shirt as
a distribution media, and silliness factor.  We shall see wrt the
shirt when and if Raph recieves a determination from his CJR for the
shirt.  (I would note that someone posted a while ago that they did
manage to get the barcode to scan, on I think one of Joel Furr's
shirts).  Also the secondary claim about whether or not ITAR
stipulates that a software item can be shown to a foreign national in
the US seems open to debate (some say ITAR strictly interpreted does
say this, others say not).

Also something about the anti-ITAR fight recently which was an eye
opener for me was that I took a look at Phil Karn's export page to do
with his ongoing battle against ITAR as applied to crypto, with the
Applied Crypto disk/book case:

	http://www.qualcomm.com/people/pkarn/export/

In his court transcripts there is a declaration by Phil Zimmermann in
connection with the Applied Crypto case, however he (PRZ) also
mentions the unofficial progress on his PGP source code book published
by MIT press.

PRZs declaration from bottom of:

	http://www.qualcomm.com/people/pkarn/export/zimm.html

> 10. I believe that the commodity jurisdiction request referred on page
> 28 of the Justice filing is the one which was filed by MIT Press for
> my book, PGP: Source Code and Internals. I am further informally
> advised that the National Security Agency has considered the Request
> and recommended that the book be controlled for export under the ITAR
> and that the Department of Commerce has recommended that it not be
> subject to ITAR controls.

Wow!  If this informal info is confirmed as the NSAs determination, it
will have interesting ramifications for the distinction between paper
based publications and electronic.  It will also reinforce Phil Karn's
use of the charge of "arbitrary, [and] capricious" enforcement on the
part of the NSA/ODTC, as the CJR for Applied Crypto in print form was
successful.

Adam

-----BEGIN PGP SIGNED MESSAGE-----

On Tue, 12 Dec 1995 aba@atlas.ex.ac.uk wrote:

> 
> People have been reading the list for a while will be familiar with
> this piece of perl code used as a non-exportable, supposedly ITAR
> controlled .sig:
> 
> 
> #!/bin/perl -s-- -export-a-crypto-system-sig -RSA-3-lines-PERL
> $m=unpack(H.$w,$m."\0"x$w),$_=`echo "16do$w 2+4Oi0$d*-^1[d2%Sa
> 2/d0<X+d*La1=z\U$n%0]SX$k"[$m*]\EszlXx++p|dc`,s/^.|\W//g,print
> pack('H*',$_)while read(STDIN,$m,($w=2*$d-1+length($n)&~1)/2)
> 
Okay, I admit it I don't know everything.
What does the perl script actually do.
I saved to file, chmod 777 perly
tried running the script and kept getting error line 3.
What does it do, does it encrypt a file or what. What Have i done wrong?


-----BEGIN PGP SIGNATURE-----
Version: 2.6.2i
Comment: PGP Signed with PineSign 2.2

iQBVAgUBMNTcedZnjIiISvIVAQF7IwH7BufPIuyXuJy6LJOsUnxJYIzv7GAly4FL
OWL8xHaKZb/7Ltepmeyd988TM+3DAmIDzEW2EdX5Nwia8Scst3TnoA==
=/gW7
-----END PGP SIGNATURE-----
 
Please report any Strange behaviour by the Mail Monster to rick@muskoka.net
****************************************************************************** 
send mail w/ subject 'send help', To get Commands accepted by Mail Monster.  
rick@muskoka.net   rick.sheffar@primetime.org  
PGP encrypted mail accepted and preferred!     
PGP key ID  0x884af215
PGP key finger print = 01 49 EA C6 42 90 21 02  9D CB 19 7E E3 23 66 58
******************************************************************************

-----BEGIN PGP SIGNED MESSAGE-----

On Sun, 17 Dec 1995, Richard D. Sheffar wrote:
 
[Perl RSA sig deleted]
> Okay, I admit it I don't know everything.
> What does the perl script actually do.
> I saved to file, chmod 777 perly
> tried running the script and kept getting error line 3.
> What does it do, does it encrypt a file or what. What Have i done wrong?
> 

The script, when supplied with a exponent (public or secret) and a modulus,
encrypts standard input with the RSA algorithm and sends the result to
standard output.  You can get all the info on this from http://dcs.ex.ac.uk/
~aba/rsa/.  In response to why it doesn't work, did you check to see if you
have a working copy of the UNIX program "dc"?


-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQCVAwUBMNTogrZc+sv5siulAQHqPQP+LDCv8cNmyQh0vxcF5hS+Mk96PgpygmL4
QLjcdHZTUKHxRD8/V0b84+JITqc8uPKy/aN6Vp9ZiihRb8VBxWQzbJt5w2YIglW0
jzh1IFiRQ1O2oJzNG+mNjJfrJYwXG88BcajOd7JrsPj0uC9oh5hkRMFgMtFSjNsm
m5G+F4rLlBM=
=D9LX
-----END PGP SIGNATURE-----


finger markm@voicenet.com for Public Key http://www.voicenet.com/~markm/
Key-ID: 0xF9B22BA5 Fingerprint: bd24d08e3cbb53472054fa56002258d5
-----BEGIN GEEK CODE BLOCK-----
Version: 3.1
GAT d- s:- a? C++++ U+++>$ P+++ L++(+++) E--- W++(--) N+++ o- K
w--- O- M- V-- PS+++>$ PE-(++) Y++ PGP+(++) t-@ 5? X++ R-- tv+
b+++ DI+ D++ G+++ e! h* r! y?
------END GEEK CODE BLOCK------

Richard Sheffar <rick@net.muskoka> writes on cpunks:
> Okay, I admit it I don't know everything.
> What does the perl script actually do.

It does RSA encrypt/decrypt, works with keys up to 1024 bits (and
larger).

> I saved to file, chmod 777 perly
> tried running the script and kept getting error line 3.

You need two utils installed on your machine: perl and dc.  Not having
dc would cause an error on line 3.  Try getting gnu dc (bc-1.03.tar.gz
from gnu sites, see:

	http://www.dcs.ex.ac.uk/~aba/rsa/dc.html
)

> What does it do, does it encrypt a file or what. What Have i done wrong?

To encrypt:

	rsa -k=11 -n=ca1 < plaintext > ciphertext
	
to decrypt:

	rsa -d -k=ac1 -n=ca1 < ciphertext > out

you can extract pgp keys to use with it, that was a 32 bit key for
demonstrational purposes and offers no security.  See:

	http://www.dcs.ex.ac.uk/~aba/rsa/pgpacket.html

for extracting pgp keys in hex format.

Adam