From: Mike Ellis Area: Public Key Encryption To: All 17 Feb 95 09:32:00 Subject: PGPblue UpdReq -----BEGIN PGP SIGNED MESSAGE----- Ok I just got Public Key and PGP blue going for the first time. But i'm left with a few questions. If I JUST sing a message and it is altered, can the person receiving the message tell that it has been altered and if so do they need me PublicKey to do it? Also what is the difference between PGP -s and PGP -sa to a text file? Thanks, Mike, -----BEGIN PGP SIGNATURE----- Version: 2.6 iQCVAwUBL0SzQvNYDuCJGfM9AQH2vAQAp/SG8oPK3TH/TxF21Lb0ozUPd/QtWiZQ qNbPlAbiFraNc1wsjDrUOiiddOUHNv++WuZBxhDqFctZ0jeoH9S1nTB1I1Z6cEnw t+o22/Z8fttEbR7WiPV3zaopLnVnYkrGZGuzy8PWQ/eiY3Uqg2z3vFRrAfP74nyW jj6V2XPco7Y= =Jj/o -----END PGP SIGNATURE----- ~~~ PGPBLUE 3.0 ... General failure reading drive A: Please remove your fist. ~~~ PGPBLUE 3.0 ___ Blue Wave/QWK v2.12 201434369420143436942014343694201434369420143436942014343694718 From: Alan Pugh Area: Public Key Encryption To: Richard Dale 18 Feb 95 12:55:54 Subject: Can I Freq Pgp? UpdReq -----BEGIN PGP SIGNED MESSAGE----- RD> Oh, you don't know him then? He's real famous. There is a RD> whole 'nother net that has a firearms conference and he's the RD> topic half the time. A year or two ago -- guess it will be 2 years he's also the direct cause of at least 3 other firearms echos being founded. prn (paul revere network) has become quite successful as has aen (associated electronic news). guns recently went live as well. RD> Of course, that means the offline readers will have to catch up RD> and use PGP so it's transparent. I use PGP in a batch file, but it RD> takes 45 seconds to sign a message, so if I have 20 replies, it RD> means I've spent 15 minutes signing keys. pgpblue works pretty well with bluewave, but i don't know how well with other readers. it won't do much for your signing times though as that is a function of your keysize. (my 3k-bit key takes 2 minutes to sign/encrypt) be aware that there can be problems if all your messages are automatically passed through pgp. i created a bomb that is a signed ascii armored file while i was playing around that is just 1,120 bytes long. if pgp gets hold of it it will expand into a 20 megabyte file. i believe this may someday become a problem with anonymous remailers as someone can easily spam a remailer network and really overload them in a big way. the only way i've found that will stop such a bomb from exploding is to decrypt the file on a floppy. (it will run out of disk space during the 2nd pass) amp <0003701548@mcimail.com> February 18, 1995 12:12 ... "Who is John Galt?" -----BEGIN PGP SIGNATURE----- Version: 2.61 iQEVAwUBL0YKmSgP1O9KJoPBAQElHgf+OMpUVNqm3sPc20JD8UseS7yTtifQ02p5 QwhfYp+XgckJqjnN4iZ+k7ZKAcrEA9cl78/rKVfKVCe6nwNz/NRih5Azl3pIimxx kO8evuAZakcwlHvTsHJQb67pJcNoup8XibPvQhjV5UKEnNrjkeBJH4+sOggznFGy 5JUrFnrDLQ6XKJSqldiqptgue7kQJFgtuq0d/0c8j9EUw/hY9jMY6Fm0QH90ONLo l1KD6fJ3HSmj3x8eFUBielfMXnjnnFAHO8JzrXKd4w4VMimediCzdPP7ymAL1sL/ u3EarronN8awUkDWutlhuCeLFeDpVi7Aqz8/0F+U9TjI02VzUxd5ew== =SRN1 -----END PGP SIGNATURE----- ` 201434369420143436942014343694201434369420143436942014343694718 From: Alan Pugh Area: Public Key Encryption To: Richard Dale 18 Feb 95 12:26:38 Subject: Clear signing UpdReq -----BEGIN PGP SIGNED MESSAGE----- RD> Anyway, I sign most of my messages and replies using my 2047-bit RD> key. It takes 45 seconds to sign it, meaning if I post 20 replies RD> and messages, that's 15 minutes spent staring at the computer. I RD> suspect using my 1024-bit key would be faster, but am unsure how RD> to do it. RD> I use: PGP -sta +clearsig=on reply try this... PGP -sta +clearsig=on reply -u 0xmykeyid where '0xmykeyid' is your hex key id. no need to re-encrypt your old stuff if you keep your old key on your ring-even if it is revoked. you can still decrypt with it. also, some people that you pass encrypted mail to/from may not get the word immediately. if your old key is no longer on your ring, you won't be able to decrypt mail sent from them. here's what my keyring looks like now...(edited to fit your screen) pub 3072/B7B77625 1995/02/13 Alan M. Pugh 3072-bit key sig E04FA2E1 Alan M. Pugh sig 4A2683C1 Alan M. Pugh (2048bit) sig B7B77625 Alan M. Pugh 3072-bit key pub 2048/4A2683C1 1994/11/22 Alan M. Pugh (2048bit) sig E04FA2E1 Alan M. Pugh sig 4A2683C1 Alan M. Pugh (2048bit) pub 1248/E04FA2E1 1994/05/13 Alan M. Pugh sig C7751CC1 Benjamin T. Moore, Jr. <1:231/110> sig 72D17C47 Al Thompson <1:231/110> sig E04FA2E1 Alan M. Pugh <0003701548@mcimail.com> pub 1024/4B6DE2A5 1993/08/13 *** KEY REVOKED *** Alan M. Pugh sig D59FF72D Mary Tuttle <00004309503@mcimail.com> sig 72D17C47 Al Thompson <1:231/110> sig 4B6DE2A5 Alan M. Pugh at the moment i have 3 active keys. once noone else i know is still using 2.3a, i'll revoke my 1248-bit key. notice i sign the keys with previous versions to help remove doubt amongst those i message with as to their authenticity. -----BEGIN PGP SIGNATURE----- Version: 2.61 iQEVAwUBL0YDSigP1O9KJoPBAQF88Af/caTdpLWWu07GJ1kNAFMJHlXMGnFE9nwT IEkC6o33LLsXMJAI75djcNQRHdNTYY/+XjYYzc23uBlPMb3fhbFvJW4qt80xFW37 RgUJMbLY4nqCM/1k2pKKCSKMF4IL1DVB7V7eC2sZiV93VyMi7yBU5XtPEHgEvtna ix9xXCnh7D/BfM6RsAOyDjD36MGxpNAKFw9jHEoyQ0OKi0VmzQtItEsPlOg4jxa/ 4gbFsO8lKHQSYILZfJSOPU96GcX/VW4qLH6FYyxDtyzdcmfQGfRVq8dSaXd6dBN6 IQLjobTDBEFsQWbJLPz1h8B3jwxVhFEegIuKX3b3i08NZrlFCfhoPw== =had0 -----END PGP SIGNATURE----- ... Gun Control: A Logic-Free Philosophy. 201434369420143436942014343694201434369420143436942014343694718 From: Alan Pugh Area: Public Key Encryption To: Bill Brown 18 Feb 95 12:36:42 Subject: inquiry UpdReq -----BEGIN PGP SIGNED MESSAGE----- GT> Okay, so have your program insert, oh, say, a date/time stamp or a GT> random 'fortune-cookie' quote here or there. BB> Well, I was referring to something which checked to see if the BB> Constitution was unmodified, and therefore ignorable, or had ... oh, BB> now I get it. Creating extra work for "nothing" eh? ;) "Busy work" to BB> keep them busy. BB> I thought Alan was looking for a means to make his (real) message look BB> like it was the Constitution, with the idea that it WOULDN'T draw BB> attention that way. BB> Bill Brown both actually. in some threat models, it is useful to send an encrypted message of a standard length every day at a certain time. they are essentially test messages to verify the links are up. occasionally stuffing them with real information just _might_ get by if someone was used to seeing them. this was actually used to good effect during world war ii. also, if i am going to give them busy work, i want it to be something they _need_ to read. amp <0003701548@mcimail.com> February 18, 1995 12:34 -----BEGIN PGP SIGNATURE----- Version: 2.61 iQEVAwUBL0YFsSgP1O9KJoPBAQEsPAf/Rb3YQJZxFRC5Teyi7b3wF1GQYFU+XOGO o+9LRbfHIJEXyAz1oWBQiMofhFZEAMkICoQ38boZydQnSXk8Kz5CL2wIGApB/Mdo 6vV34GT9kOhovO3NUDGaZ/JslY6oQQW3X48vTyZ0DSHULrEE3AoJJX6IvIimZ6CN Cz7X2FOKZ8oEPBBJO5ZOf0fvShRgpvFURSghz5mTtxP7oq3FubjBgxTMifu1QJVL czdOe5UNteWGb4GwU1mLkdq2grFcHWTBzCpnmTzTBWwxMJdG052kLT1BY5WLlW+z g9IZK6I2nvRIya7fjz/05qniPgxXwbdJZER/9aqCIWz0q+Xq/4PcHQ== =ISGo -----END PGP SIGNATURE----- ... ...All stressed out and no one to choke! 201434369420143436942014343694201434369420143436942014343694718 From: Alan Pugh Area: Public Key Encryption To: Gordon Campbell 18 Feb 95 12:43:10 Subject: My key and a story... UpdReq GC> Y'know, I really don't have any idea. It was the first time I tried it GC> and somehow it actually came out as 2048. I've messed around with it a GC> couple of times since and have always got 2047. were you using pgp2.61 (an unofficial version)? it does not contain the bug that stops 2.6.2 from creating 2048-bit keys. i've had it successfully create a 4k-bit key as well. -just playing around with it though. it's _far_ too slow to use on my current computer. amp <0003701548@mcimail.com> February 18, 1995 12:43 ... A penny saved is a Congressional oversight. 201434369420143436942014343694201434369420143436942014343694718 From: Alan Pugh Area: Public Key Encryption To: Armando Ortiz 18 Feb 95 12:52:50 Subject: unauthorized info gatheri UpdReq AO> PGP is illegal outside of the United States. Beta testing UAE outside AO> of the U.S. would not only make the project void, but would bring out AO> the government from under the rocks. Besides, it's much less costly AO> to send Snail Mail within the U.S. ->AO> Beta testers will be chosen on July 4, 1995. ->pardon any skepticism. [grin] AO> No problem. You have valid questions. I hope that I was equally AO> valid in my responses. At least you're not here to bash an idea. AO> Besides, if there's a DOS interface, why not make a Windows interface? armando, if you want people to send such information across the internet, it would be wise to publish a public key with which to encrypt the data. i send _very little_ over the internet that isn't encrypted since most of my messaging there is private. amp <0003701548@mcimail.com> February 18, 1995 12:52 ... A DOLLAR is a weight of silver. 201434369420143436942014343694201434369420143436942014343694718 From: Jeffrey Bloss Area: Public Key Encryption To: Armando Ortiz 17 Feb 95 15:39:00 Subject: unauthorized info gatheri UpdReq AO>> ->AO> Hawaii, may apply. Those living in Canada and Mexico may not AO>> ->AO> participate. AO>> ->why is that? AO>> PGP is illegal outside of the United States. Beta testing UAE outside AO>> of the U.S. would not only make the project void, but would bring out Untrue. :) There's an export version of PGP, and technically I suppose, using the non-export version outside the US and Canada can not be deemed "illegal". There ARE no restrictions on use... only export, and even then it's only applicable to those under the sphere of US governmental control. jbloss@meadville.com -=- 1:2601/551.0 -=- ->5317 PGP v2.6.2 public encryption key available by request. 201434369420143436942014343694201434369420143436942014343694718 From: Jeffrey Bloss Area: Public Key Encryption To: Christopher Baker 18 Feb 95 18:39:00 Subject: Re: comment line [Was: Re UpdReq CB>> CB>> have you tried double quotes? where did you pick up this info? CB>> JB> Figured it out all on my lonesome. ;) I was trying to add a high CB>> have you mentioned it to PRZ? [the quote justification thing i mean] do You mean like being able to play "Bulls vs. Blazers" on the Sega using a President Clinton character? ;-) No... I really didn't think to tell Phillip. Think it's really that important... or just "handy". jbloss@meadville.com -=- 1:2601/551.0 -=- ->5317 PGP v2.6.2 public encryption key available by request. 201434369420143436942014343694201434369420143436942014343694718 From: Mike Lenker Area: Public Key Encryption To: Chris Adams 18 Feb 95 23:50:10 Subject: Re: quotes as passphrase UpdReq -----BEGIN PGP SIGNED MESSAGE----- In a message dated: 09 Feb 95, Chris Adams was quoted as saying: CA> On (31 Jan 95) David Chessler wrote to David Mcintyre... CA> DC> In any event, if you're under surveillance, now that PGP is available, CA> and CA> DC> SECDRV and SECDEV and SFS, you can figure that the surveillance will Can someone list a source for SECDEV, please? I'm a happy user of SECDRV, and I think the docs in the version mention SECDEV, but messages to the address in the docs bounced. Thanks. mike.lenker@f1776.n106.z1.fidonet.org -----BEGIN PGP SIGNATURE----- Version: 2.6a iQBVAwUBL0bOEM4Ymr59enmxAQH3/QH/THlrT807ipx9/Djwm/y2l6r4ic0Hz9cq CrMub4Y4vik2gRvkrot8CLceBEMuYzkMcle+2OsIBWW4GsEIgBALLA== =Ya5O -----END PGP SIGNATURE----- 201434369420143436942014343694201434369420143436942014343694718 From: Ian Hebert Area: Public Key Encryption To: Scott Mills 19 Feb 95 19:01:10 Subject: Can I Freq Pgp? UpdReq -----BEGIN PGP SIGNED MESSAGE----- SM> Sunday February 12 1995, Alan Pugh writes to Scott Mills: SM> AP> wow. the mod should be informed of some of the various other SM> AP> methods of stenography where messages can be hidded in a message SM> AP> of any kind. SM> Ivan didn't want to be informed of anything. He was quite content in SM> his ignorance. I tried explaining the differences between encrypted SM> messages, clearsigned messages, and the PGP fingerprint he was upset SM> about. His argument boiled down to "If I say the string PGP fingerprint SM> = CD 45 F4 ... is encryption then it's encryption". Not even discussion SM> of PGP is welcome over there. Scott, this type of attitude is going to lead Fido (and Rime and the other networks with similar prohibitions on encryption) down the road into the dustbin of history. If they don't change, eventually they'll be extinct--as use of the Internet grows, eventually people will abandon the hobby networks with all the idiotic rules, regulations and restrictions. You've probably heard of Senator Exon's latest piece of legislation-- i.e. S-314; when you look a the way that Fidonet and Rime are adminstered, for the most part, they are currently acting (and have always acted) as if this legislation were already in place. Ian Hebert London, Ontario, Canada RIME: HOMEBASE (5508) Fido: 1:2401/114 Internet: ian.hebert@homebase.com PGP Key: 1024 / 077A2F7F 1993/02/11 PGP Key Fingerprint: A2 15 DE 22 DA FE D4 DC 0F 17 43 24 1F F2 1E 7B -----BEGIN PGP SIGNATURE----- Version: 2.6.i iQCVAgUBL0fGfd+oQ+cHei9/AQHpLwP/ViOpMkgRGt0kvNhvA5Q6VtNW4cUJacQv dkShVdlDiEP2kJXUxB2KktCNFHov8wB+8DbjrTaKkO4pZc+Rd/O90Nk+XDHHtOQJ dAKXuyKsruq/IYXXCEvVMnJH+D+vP/kEgy18yL19nYUXPCeaqE3T6EbghgV8QuPl SkzzAb37jcQ= =7u+T -----END PGP SIGNATURE----- 201434369420143436942014343694201434369420143436942014343694718 From: Ian Hebert Area: Public Key Encryption To: Shawn Mcmahon 19 Feb 95 19:01:10 Subject: Inquiry UpdReq -----BEGIN PGP SIGNED MESSAGE----- SM> Despite the stern warnings of the tribal elders, Donald Rose said this to Alan SM> Pugh: SM> DR> Better yet, take a .gif file and crypt it about 60 times SM> DR> (the same file), so when they finally get it open they see SM> DR> Bill the Cat looking at them with his tounge out. SM> The extra encryption steps will just waste your time, not theirs. SM> There'll be one key that can completely decrypt the final product, unless I SM> have a fundamental misunderstanding of the principles involved. It won't SM> necessarily be the key you expect, but if they're brute-force decrypting the SM> thing they'll find that key, not your key. According to what I read, this would only be true of IDEA were part of a class of function known as a "group". To date, from what I've read it has not yet been demonstrated whether IDEA is a group or not. Ian Hebert London, Ontario, Canada RIME: HOMEBASE (5508) Fido: 1:2401/114 Internet: ian.hebert@homebase.com PGP Key: 1024 / 077A2F7F 1993/02/11 PGP Key Fingerprint: A2 15 DE 22 DA FE D4 DC 0F 17 43 24 1F F2 1E 7B -----BEGIN PGP SIGNATURE----- Version: 2.6.i iQCVAgUBL0fHhd+oQ+cHei9/AQFdjQP+Puo1XuRV9E0dTHhVgxm431RIKZAmJxhV uagjMEY97RzBNYgiKcpk72eB+G9KFlgVtgDtXsuMBBX2tqm06SfJ5lc6Dhq5u/lP 5wEhOTYHL9oA8CWsNV/5BNMugP6xT1JKlrNM+0c/7rot57Ve6F8G9tcA9hcPGWdH 7Uenl/E2KgQ= =QEAI -----END PGP SIGNATURE----- 201434369420143436942014343694201434369420143436942014343694718 From: Chris Adams Area: Public Key Encryption To: Scott Mills 19 Feb 95 00:19:56 Subject: PGP for OS/2 Slow v3.0 UpdReq -----BEGIN PGP SIGNED MESSAGE----- On (16 Feb 95) Scott Mills wrote to Armando Ortiz... SM> can help you speed it up. I'm running it on a 386/40 with 8 meg and have no SM> problems at all. It is slow to boot but since I only reboot every month or Just leave it on a lot, or is it a BBS? ... I was arrested for stripping high order bits in public. -----BEGIN PGP SIGNATURE----- Version: 2.6 iQCVAwUBL0b/Zrf8VAamwaxpAQENjgP/VXLZ9spRnGpFBiwI1r3kYNYSVmW8g2Vi UrYcvP1r1LL5y+41YvkXr6+8Ta1PPvp5nl6ZBBBNbl8AsT0cJrCNiprh9OCTBVfY PSaT6gHV6PxPkblHBR0KuxU9g/tZcodLidVqLBfuYpys/SMycPjNoVgwwxe7m8n9 rWzbTBzBz4Y= =wF4l -----END PGP SIGNATURE----- 201434369420143436942014343694201434369420143436942014343694718 From: Doug Muth Area: Public Key Encryption To: Scott Mills 18 Feb 95 19:27:00 Subject: Re: Quotes as passphrase UpdReq -----BEGIN PGP SIGNED MESSAGE----- Greetings Scott Mills! SM> I thought the most efficient way to erase a drive was to type SM> "recover"? It's been awhile, but I think recover is used to reconstruct a corrupted disk. What it will do is try to find every possible directory and file on the disk and give them arbitrary names. It's a pain to fix anything you do with recover, but recover shouldn't erase anything... Doug.... -----BEGIN PGP SIGNATURE----- Version: 2.6.2 Comment: My PGP key is requestable from the keyservers on the Internet. iQCVAwUBL0aQZx0LJlIsPN1JAQGIbgQAtkQO3WmspiHTuWDgQaBqxwwTr1s86/Se 8KWBiJ9/OmhBezL9uhNgmmq4PjnbpU2TqEdUcB0ta1+kK9/uzV7LBhV6fbGHJj66 fMJnwQ982dHdwKDpaFGgXRTcB9BtwSYG0U9NySPLehK1nIyrbCI7jmn4+dZCo8QD RU0aphIklcc= =2DEM -----END PGP SIGNATURE----- ~~~ PGPLoad 1.2 -[UNREGISTERED]- ... Simplified Crime Bill: It's illegal to be a criminal. ___ Blue Wave/QWK v2.12 201434369420143436942014343694201434369420143436942014343694718