NODE 7b570929[NTSEC] SKIPJACK / NT4.0 (SP3?) (fwd)
Ray Arachelian <sunder@brainlink.com>Sat, 27 Dec 1997 00:49:57 +0800
--Boundary..4026.1071714307.multipart/mixed
Content-Type: text/plain
Content-Transfer-Encoding: 7bit
Now this is interesting! :) (Either that or JA is smoking crack... - no
idea on JA's reputation capital though...)
=====================================Kaos=Keraunos=Kybernetos==============
.+.^.+.| Ray Arachelian |Prying open my 3rd eye. So good to see |./|\.
..\|/..|sunder@sundernet.com|you once again. I thought you were |/\|/\
<--*-->| ------------------ |hiding, and you thought that I had run |\/|\/
../|\..| "A toast to Odin, |away chasing the tail of dogma. I opened|.\|/.
.+.v.+.|God of screwdrivers"|my eye and there we were.... |.....
======================= http://www.sundernet.com ==========================
---------- Forwarded message ----------
Date: Wed, 24 Dec 1997 01:29:07 -0600
From: "J.A. Terranson" <sysadmin@mfn.org>
To: 'NT Security Listserv' <ntsecurity@iss.net>
Subject: [NTSEC] SKIPJACK / NT4.0 (SP3?)
-----BEGIN PGP SIGNED MESSAGE-----
I was rooting around in the registry tonight, (looking to repair my own
stupidity!),
and guess what I saw? SKIPJACK is installed, and ENABLED! I have NOT
(now would I EVER) installed it voluntarily, and Micro$loth only advertises
the
"standard" ciphers (which I also found).
Is anyone else aware of this? Is it safe to delete the key (and code?
Hopefully
this is DLL driven: I'm still looking!).
Also, anyone know what it was put there for? It's certainly not what I would
consider an SSL issue!
J.A. Terranson
sysadmin@mfn.org
A small fading light in a vast and obscure universe...
PROTECT YOUR RIGHT TO PRIVACY - ENCRYPT!
PGP/DSS: 0x12896749 FP: 63F2 1777 BC38 AC1E 3359
0B0E C6C0 ED6B 1289 6749
PGP/RSA: 0x9D85DF05 FP: 810C 25E9 7DD3 C157
3081 A202 DDFD 4245
If Government wants us to behave, it should set a better example!
-----BEGIN PGP SIGNATURE-----
Version: PGP for Personal Privacy 5.0
Charset: noconv
iQEVAwUBNKC5wqAMF5Wdhd8FAQFsDQgAkietW1awMFDE9ZY5d9B+Zc0cGuGxlPC+
XzVy6+RleDngUecSAf8MbZZlTDDyN69liKG2Of0n+pZnlJSbKZWZiG0cRN592bbL
xCF/cwgNdJi1/HTA/mDZ7fpRT1phCMi/b2U3XXyV3QG2fv+Z8M5o4LjykYT+u4Lt
aEkfedFZKjkURO+artvGFnISfVxAMwpW0TfdbxE2Izw8iSjX2w+4aT0ub+Ck3OA4
X3Bek8ZPhbmsf9lIfBSe38ZPMZGrk7VwTPaMo7JiU5MM58OmCMaodKlwyxfsptKf
khLnbWJbwHrlbW2yXL7nh7Ttnxv1WJ6BHaaJhxX/5EWSU4xAc/FjaQ==
=jsvV
-----END PGP SIGNATURE-----
--Boundary..4026.1071714307.multipart/mixed
Content-Type: application/octet-stream; name="bin00000.bin"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="bin00000.bin"
Content-Description: "application/ms-tnef"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--Boundary..4026.1071714307.multipart/mixed--
NODE 46e87df0Re: [NTSEC] SKIPJACK / NT4.0 (SP3?) (fwd)
"William H. Geiger III" <whgiii@invweb.net>Sat, 27 Dec 1997 02:19:19 +0800
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
In <Pine.SUN.3.96.971226114446.17857A-101000@beast.brainlink.com>, on
12/26/97
at 11:45 AM, Ray Arachelian <sunder@brainlink.com> said:
>Now this is interesting! :) (Either that or JA is smoking crack... - no
>idea on JA's reputation capital though...)
Well to be honest anyone who would trust the M$ crypto API get what they
deserve.
- --
- ---------------------------------------------------------------
William H. Geiger III http://users.invweb.net/~whgiii
Geiger Consulting Cooking With Warp 4.0
Author of E-Secure - PGP Front End for MR/2 Ice
PGP & MR/2 the only way for secure e-mail.
OS/2 PGP 2.6.3a at: http://users.invweb.net/~whgiii/pgpmr2.html
- ---------------------------------------------------------------
-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 5.0i for non-commercial use
Comment: COMMENT
Charset: cp850
iQA/AwUBNKPk9Lki0dXBotN0EQK0twCg2d11Co4YoNOQ9ciISsYcOE+aFZ4AoL5d
TGu4cnp80+dgObS/yVxcdfxm
=tpkE
-----END PGP SIGNATURE-----
NODE 45e07796Re: [NTSEC] SKIPJACK / NT4.0 (SP3?) (fwd)
Lucky Green <shamrock@cypherpunks.to>Sat, 27 Dec 1997 03:30:29 +0800
Skipjack can't be installed, since there is no generally available
software implementation of the cipher. I would guess the person has
some software installed that supports Fortezza cards, that would explain
the registry entry.
On Fri, 26 Dec 1997, Ray Arachelian wrote:
> Now this is interesting! :) (Either that or JA is smoking crack... - no
> idea on JA's reputation capital though...)
>
> =====================================Kaos=Keraunos=Kybernetos==============
> .+.^.+.| Ray Arachelian |Prying open my 3rd eye. So good to see |./|\.
> ..\|/..|sunder@sundernet.com|you once again. I thought you were |/\|/\
> <--*-->| ------------------ |hiding, and you thought that I had run |\/|\/
> ../|\..| "A toast to Odin, |away chasing the tail of dogma. I opened|.\|/.
> .+.v.+.|God of screwdrivers"|my eye and there we were.... |.....
> ======================= http://www.sundernet.com ==========================
>
> ---------- Forwarded message ----------
> Date: Wed, 24 Dec 1997 01:29:07 -0600
> From: "J.A. Terranson" <sysadmin@mfn.org>
> To: 'NT Security Listserv' <ntsecurity@iss.net>
> Subject: [NTSEC] SKIPJACK / NT4.0 (SP3?)
>
> -----BEGIN PGP SIGNED MESSAGE-----
>
> I was rooting around in the registry tonight, (looking to repair my own
> stupidity!),
> and guess what I saw? SKIPJACK is installed, and ENABLED! I have NOT
> (now would I EVER) installed it voluntarily, and Micro$loth only advertises
> the
> "standard" ciphers (which I also found).
>
> Is anyone else aware of this? Is it safe to delete the key (and code?
> Hopefully
> this is DLL driven: I'm still looking!).
>
> Also, anyone know what it was put there for? It's certainly not what I would
>
> consider an SSL issue!
>
> J.A. Terranson
> sysadmin@mfn.org
> A small fading light in a vast and obscure universe...
>
> PROTECT YOUR RIGHT TO PRIVACY - ENCRYPT!
> PGP/DSS: 0x12896749 FP: 63F2 1777 BC38 AC1E 3359
> 0B0E C6C0 ED6B 1289 6749
> PGP/RSA: 0x9D85DF05 FP: 810C 25E9 7DD3 C157
> 3081 A202 DDFD 4245
> If Government wants us to behave, it should set a better example!
>
>
> -----BEGIN PGP SIGNATURE-----
> Version: PGP for Personal Privacy 5.0
> Charset: noconv
>
> iQEVAwUBNKC5wqAMF5Wdhd8FAQFsDQgAkietW1awMFDE9ZY5d9B+Zc0cGuGxlPC+
> XzVy6+RleDngUecSAf8MbZZlTDDyN69liKG2Of0n+pZnlJSbKZWZiG0cRN592bbL
> xCF/cwgNdJi1/HTA/mDZ7fpRT1phCMi/b2U3XXyV3QG2fv+Z8M5o4LjykYT+u4Lt
> aEkfedFZKjkURO+artvGFnISfVxAMwpW0TfdbxE2Izw8iSjX2w+4aT0ub+Ck3OA4
> X3Bek8ZPhbmsf9lIfBSe38ZPMZGrk7VwTPaMo7JiU5MM58OmCMaodKlwyxfsptKf
> khLnbWJbwHrlbW2yXL7nh7Ttnxv1WJ6BHaaJhxX/5EWSU4xAc/FjaQ==
> =jsvV
> -----END PGP SIGNATURE-----
>
-- Lucky Green <shamrock@cypherpunks.to> PGP v5 encrypted email preferred.
"Tonga? Where the hell is Tonga? They have Cypherpunks there?"
NODE fe6fc68bRe: [NTSEC] SKIPJACK / NT4.0 (SP3?) (fwd)
David Honig <honig@otc.net>Tue, 30 Dec 1997 02:06:09 +0800
At 11:12 AM 12/26/97 -0600, William H. Geiger III wrote:
>-----BEGIN PGP SIGNED MESSAGE-----
>Hash: SHA1
>
>In <Pine.SUN.3.96.971226114446.17857A-101000@beast.brainlink.com>, on
>12/26/97
> at 11:45 AM, Ray Arachelian <sunder@brainlink.com> said:
>
>>Now this is interesting! :) (Either that or JA is smoking crack... - no
>>idea on JA's reputation capital though...)
>
>Well to be honest anyone who would trust the M$ crypto API get what they
>deserve.
>
>
Is this just random MS-baiting or do you have a real point re the API?
The API describes an interface to things you'd need for a cryptosystem.
I believe it is up to implementors to instantiate the functions appropriately.
------------------------------------------------------------
David Honig Orbit Technology
honig@otc.net Intaanetto Jigyoubu
"Windows 95 is a technologically complex product that is best left alone by
the government..."
---MSFT Atty B. Smith
NODE 245051f3Re: [NTSEC] SKIPJACK / NT4.0 (SP3?) (fwd)
"William H. Geiger III" <whgiii@invweb.net>Tue, 30 Dec 1997 02:33:49 +0800
-----BEGIN PGP SIGNED MESSAGE-----
In <3.0.5.32.19971229094401.007a7570@otc.net>, on 12/29/97
at 12:44 PM, David Honig <honig@otc.net> said:
>At 11:12 AM 12/26/97 -0600, William H. Geiger III wrote:
>>-----BEGIN PGP SIGNED MESSAGE-----
>>Hash: SHA1
>>
>>In <Pine.SUN.3.96.971226114446.17857A-101000@beast.brainlink.com>, on
>>12/26/97
>> at 11:45 AM, Ray Arachelian <sunder@brainlink.com> said:
>>
>>>Now this is interesting! :) (Either that or JA is smoking crack... - no
>>>idea on JA's reputation capital though...)
>>
>>Well to be honest anyone who would trust the M$ crypto API get what they
>>deserve.
>>
>>
>Is this just random MS-baiting or do you have a real point re the API?
>The API describes an interface to things you'd need for a cryptosystem. I
>believe it is up to implementors to instantiate the functions
>appropriately.
1. The sorce code for the crypto API is not available for peer review. I
would not recomend using any crypto API where I was unable to review if it
performend as advertised.
2. If one does not have the ability of peer-review then one must rely on
trust. Through past actions MS has shown to be an untrustworthy company
(IMHO trust is not a sufficient replacement for peer review).
3. The MS crypto API can not be modified nor replaced. Export version of
the MS API contain only export apporved algrothms of export approved
strength.
I think the 3 reasons above should be sufficient reason not to use the
API.
This is not soly an attack against M$. The same argument can be used
against SUN, IBM, RSADSI, Lotus, ...ect.
I wouldn't trust any of them to tell me that water was wet let alone tell
me that their crypto API's were secure. No Code = No Trust!!
- --
- ---------------------------------------------------------------
William H. Geiger III http://users.invweb.net/~whgiii
Geiger Consulting Cooking With Warp 4.0
Author of E-Secure - PGP Front End for MR/2 Ice
PGP & MR/2 the only way for secure e-mail.
OS/2 PGP 2.6.3a at: http://users.invweb.net/~whgiii/pgpmr2.html
- ---------------------------------------------------------------
-----BEGIN PGP SIGNATURE-----
Version: 2.6.3a-sha1
Charset: cp850
Comment: Registered_User_E-Secure_v1.1b1_ES000000
iQCVAwUBNKfqxI9Co1n+aLhhAQFf9gP/e3gdjHaiRPcZeeSHJj/zaOF2On3EncPR
kfvuVL83zoa2MzBeMaQAskkXn+j4B7mDPBKhbn6tbK5da7JXgvZxEFPTc3WIaxMk
Y9KIZLHmzSbQZGQn/pKD+63Naw6apZMaNLM8i2cEhuGbavURXLl5lSnnVsSgIVCk
RD5FIhr9vQU=
=TwPk
-----END PGP SIGNATURE-----