Re: Complete package for Cantsin Protocol No. 2

Steffen Zahn wrote:
>I have put together a package for Cantsin 2 Signatures, to generate
>the keys, sign documents and check signatures.

I've been looking this over and it's a nice job.  The code is clean
and orderly.  I haven't had a chance to play with it yet, but it looks
like everything is done the right way.  For example, it doesn't tell
you how many valid signatures a file has, it outputs a fragment of the
file for each valid signature.  The database of known keys has the
nice property that you can name each key anything you like.

The source code is completely unencumbered.  This is great!  For some
reason, it has been the custom to issue free software with all sorts
of restrictions, in particular restrictions which hamper its
commercial use.  But, if we are giving it away to people so they will
use it, why restrict it?  If somebody can use it to start a cypherpunk
company, this is a Good Thing.  (This can even be a Very Good Thing
for the original programmer. ;-)

It might be a good idea to publish the SHA1 checksum of the file you
are distributing.  The checksum of the file I got (cantsin.tar.gz)
was: D054C9E4ABD5CEE0C5A4343E5D1E2EF91C00048A

I may not approve of the restrictions on free speech in Germany, but
at least the German government isn't trying to stop people from
publishing arithmetic.  The truth is, that for Monty Cantsin's
activities, he would get a better deal on free speech if he were
German.

Monty Cantsin
Editor in Chief
Smile Magazine
http://www.neoism.org/squares/smile_index.html
http://www.neoism.org/squares/cantsin_10.htm

Subject: Re: Complete package for Cantsin Protocol No. 2
To: cypherpunks@algebra.com
25BA1A9F5B9010DD8C752EDE887E9AF3 [Cantsin Protocol No. 2]
94C43229A76383D818D39952F7A41ACA0394C6FE
2D6DA2EDBCB7DDB4C9F113F160BCF21C5B47BE59
-680 680
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
BBEEEB9475CB0254CA902A8DA92B6C76700F590373FB759816E13EB28573CD5FCBCF144D6AA316E978E209AD0C67D7A3AC4DEA762664703C823B228F33B3C2BBCFF979C798356AFC00D98EF4279A8CC5B0B2E93282936EFA1A9EF6B7DE0AD8A5E830E2DD073355C47E043ADEC4EE3297FF3165E5874E2F3000CEB290F96087C98DFC836543717A377BE3BFC664D8DE87BF36CCA7E18690CA8A3793B1E7169B2C3299C9B5DE7F5FC8BB93C7818D29F003EF8EF00560875F6461900031FD57CEA3C5B71E161853BF064661AF401056023B360783BBC89CB596A7B16B52BF8C617EE21FA7AB20B63B2E2ECE5F18CA419AF3C65D7C886751B4AC285CA0EC35B5FFCC

>>>>> "Cantsin" == Anonymous  <nobody@REPLAY.COM> writes:

    Cantsin> The source code is completely unencumbered.  This is
    Cantsin> great!  For some reason, it has been the custom to issue
             [...]

Well, you need libgmp (GNU LGPL License) and Perl (Artistic License).
I consider this not more then a proof of concept, for example the
private key is not encrypted, the key management is done by hand,
there is no web of trust or something similar,
and normally one would write the hole thing completely in C.

    Cantsin> It might be a good idea to publish the SHA1 checksum of
    Cantsin> the file you are distributing.  The checksum of the file
    Cantsin> I got (cantsin.tar.gz) was:
    Cantsin> D054C9E4ABD5CEE0C5A4343E5D1E2EF91C00048A

I have       D054C9E4ABD5CEE0C5A4343E5D1E2EF91C00048A
which looks the same. I'm currently making some improvements, in
particular in the speed of the key generation. I'm open to other
suggestions to improve this package.

    Cantsin> I may not approve of the restrictions on free speech in
    Cantsin> Germany, but at least the German government isn't trying
    Cantsin> to stop people from publishing arithmetic.  The truth is,
    Cantsin> that for Monty Cantsin's activities, he would get a
    Cantsin> better deal on free speech if he were German.

There are activities underway. The German knights of public and national
security have their own agenda: production, distribution and use of strong
cryptography shall require key escrow in the software. There was already
one failed trial to launch a law to require this. Now the activities
run in interior circles, nobody knows what comes next.

Steffen

-- 
home email:  user@domain where domain=berlin.snafu.de, user=zahn
Use of my address for unsolicited commercial advertising is forbidden.
                 "Where do you want to crash today?"
25BA1A9F5B9010DD8C752EDE887E9AF3 [Cantsin Protocol No. 2]
712ADCBCF936ECA98E9F5D12AE0138F0436836A1
F393575F5C547874C12E15CAEDF4A268E1623D5F
-74A 74A
718BA40846F568B57BB92BE594CED849995CE0CD9F591AE4A59BF73E78B31BE7F138BC53902ADFBDCF7BA3E8D7AA380EC2827F86F124D8BAA5544FB91C660F5E6ECB12DD8C545B5F084C5532F496916818590AF5A9288C32F1A190C6B2181EBF15601A8547EC907ADDE064875354981AF0CE5E80702FBC5105060019627666F21F363E186A2A40C6D73
2535614AFF58DCE60F6CF2226D9B7F1C6E0B2F1B2B287C9369408352130AF0E39486E91A1C9EACE8A0901636574D018D3520F84491FD64F0868694FB716D7A93BFD9430D80F4D24F737CB86495F1315F84D0A37A7D4D1A7F3F6D62F7A508F1AE5C2ED897E8ABAA1AF21B936F9A7DBADBF3B5BC8F4D558F8AAE264CB83E567D23976EB6F2691EF8E556