Cryptography-Digest Digest #536, Volume #12      Fri, 25 Aug 00 15:13:00 EDT

Contents:
  Test on pseudorandom number generator. ("Cristiano")
  Re: SHA-1 program, wrongo ! (Francois Grieu)
  Re: Serious PGP v5 & v6 bug! (Mok-Kong Shen)
  Re: Looking for link (Mok-Kong Shen)
  Re: My unprovability madness. (Pertti Lounesto)
  Re: My unprovability madness. (Just Another Deckchair on the Titanic)
  PROMIS-software for worldwide spy network by US/Isreal (Eriavierta)
  Re: Test on pseudorandom number generator. (Mok-Kong Shen)

----------------------------------------------------------------------------

From: "Cristiano" <[EMAIL PROTECTED]>
Subject: Test on pseudorandom number generator.
Date: Fri, 25 Aug 2000 20:19:13 +0200

This is a multi-part message in MIME format.

=======_NextPart_000_0022_01C00ED1.BC689C60
Content-Type: text/plain;
        charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Hello,

I'll try to explain (in english !) my problem about pseudorandom number =
generator (PRNG).

I'm looking for a PRNG for seeding a cryptographically secure PRNG. So, =
to test several PRNG, I wrote a program that seems not present in any =
test suite:
  1.. utilizing the PRNG to test, my program generate and store =
1,000,000 of different keys each 5 bytes long;
  2.. sort the keys;
  3.. generate others 100,000,000 keys (5 bytes long) and verify how =
many keys are the same to these generated at step 1.
The program, obviously, verify that a particular sequence of bits is not =
repeated often (my free program in Borland C++ Builder v1.0 is available =
on request).

These are the results:

      test n.
     Mother
     CryptGenRandom
     URAND
     random
    =20
      1
     92
     109
     19
     161
    =20
      2
     99
     94
     18
     140
    =20
      3
     110
     91
     29
     159
    =20
      4
     96
     97
     22
     154
    =20
      5
     104
     89
     24
     172
    =20
      6
     71
     105
     19
     170
    =20
      7
     93
     107
     27
     166
    =20
      8
     78
     92
     24
     152
    =20
      9
     83
     83
     24
     139
    =20
      10
     94
     82
     20
     165
    =20

    =20
    =20
    =20
    =20
    =20
      mean
     92,00
     94,90
     22,60
     157,80
    =20
      standard dev.
     11,81
     9,54
     3,66
     11,55
    =20
      std. dev./mean %
     12,84
     10,05
     16,18
     7,32
    =20


Explanation:=20
  Mother: George Marsaglia's The mother of all random number generators =
producing uniformly distributed pseudo random 32 bit values with period =
about 2^250.
  =20
  CryptGenRandom: Windows 95/98 CryptoAPI 1.0 (criptographically secure =
software PRNG).
  =20
  URAND: Porting of a FORTRAN generators producing uniformly distributed =
pseudorandom 32 bit values.
  =20
  random: standard c library.

  For example with Mother, in 100,000,000 keys, 92 keys are the same as =
these generated in the fisrt 1,000,000 keys in the first sequence (n=B0 =
1), 99 keys in the second seuence, and so on.
With my test, the best generator is "URAND" (few repetitions) while the =
worst is "random" (many keys are the same).

Other generators (Mersenne Twister, ranmar, etc.) are about the same as =
Mother (or a little bit better).

The differences in the table above are not detected by any statistical =
test used in my program (FIPS PUB 140-2, Diehard, Maurer's universal =
statistical test and others).

Can anybody say me if my test is right? Why the statistical tests =
doesn't detect these differences?

Tank you very much.

Ciao
Cristiano

=======_NextPart_000_0022_01C00ED1.BC689C60
Content-Type: text/html;
        charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content=3D"text/html; charset=3Diso-8859-1" =
http-equiv=3DContent-Type>
<META content=3D"MSHTML 5.00.2614.3500" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY>
<DIV><FONT face=3DArial size=3D2>
<DIV align=3Djustify style=3D"MARGIN-RIGHT: 0px"><FONT face=3DArial=20
size=3D2>Hello,</FONT></DIV>
<DIV align=3Djustify style=3D"MARGIN-RIGHT: 0px">&nbsp;</DIV>
<DIV align=3Djustify style=3D"MARGIN-RIGHT: 0px"><FONT face=3DArial =
size=3D2>I'll try to=20
explain (in english !) my problem&nbsp;about pseudorandom number =
generator=20
(PRNG).</FONT></DIV>
<DIV align=3Djustify style=3D"MARGIN-RIGHT: 0px">&nbsp;</DIV>
<DIV align=3Djustify style=3D"MARGIN-RIGHT: 0px"><FONT face=3DArial=20
size=3D2>I'm&nbsp;looking for a PRNG for&nbsp;seeding&nbsp;a=20
cryptographically&nbsp;secure&nbsp;PRNG. So, to test&nbsp;several PRNG, =
I wrote=20
a program that seems&nbsp;not present&nbsp;in any test =
suite:</DIV></FONT>
<OL>
  <LI>
  <DIV align=3Djustify style=3D"MARGIN-RIGHT: 0px"><FONT face=3DArial =
size=3D2>utilizing=20
  the PRNG to test, my program generate and&nbsp;store 1,000,000&nbsp;of =

  different keys&nbsp;each&nbsp;5 bytes long;</FONT></DIV>
  <LI>
  <DIV align=3Djustify style=3D"MARGIN-RIGHT: 0px"><FONT face=3DArial =
size=3D2>sort the=20
  keys;</FONT></DIV>
  <LI>
  <DIV align=3Djustify style=3D"MARGIN-RIGHT: 0px"><FONT face=3DArial=20
  size=3D2>generate&nbsp;others 100,000,000&nbsp;keys (5 bytes long)=20
  and&nbsp;verify&nbsp;how many keys are the same&nbsp;to these =
generated=20
  at&nbsp;step 1.</FONT></DIV></LI></OL>
<DIV align=3Djustify style=3D"MARGIN-RIGHT: 0px"><FONT face=3DArial =
size=3D2>The=20
program, obviously,&nbsp;verify&nbsp;that&nbsp;a=20
particular&nbsp;sequence&nbsp;of bits&nbsp;is not repeated&nbsp;often =
(my free=20
program in Borland C++ Builder v1.0 is available on =
request).</FONT></DIV>
<DIV align=3Djustify style=3D"MARGIN-RIGHT: 0px">&nbsp;</DIV>
<DIV align=3Djustify style=3D"MARGIN-RIGHT: 0px"><FONT face=3DArial =
size=3D2>These are=20
the results:</FONT></DIV>
<DIV align=3Djustify style=3D"MARGIN-RIGHT: 0px">&nbsp;</DIV>
<DIV align=3Djustify style=3D"MARGIN-RIGHT: 0px">
<TABLE border=3D1 borderColor=3D#854b00 cellPadding=3D2 cellSpacing=3D2 =
width=3D508>
  <TBODY>
  <TR>
    <TD height=3D20 width=3D"28%"><B><FONT color=3D#666699 face=3DArial =
size=3D2>
      <P align=3Dcenter>test n.</B></FONT></P></TD>
    <TD height=3D20 width=3D"13%"><B><FONT color=3D#008000 face=3DArial =
size=3D2>
      <P align=3Dleft>Mother</B></FONT></P></TD>
    <TD height=3D20 width=3D"31%"><B><FONT color=3D#008000 face=3DArial =
size=3D2>
      <P align=3Dleft>CryptGenRandom</B></FONT></P></TD>
    <TD height=3D20 width=3D"14%"><B><FONT color=3D#008000 face=3DArial =
size=3D2>
      <P align=3Dleft>URAND</B></FONT></P></TD>
    <TD height=3D20 width=3D"14%"><B><FONT color=3D#008000 face=3DArial =
size=3D2>
      <P align=3Dleft>random</B></FONT></P></TD></TR>
  <TR>
    <TD height=3D20 width=3D"28%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dcenter>1</FONT></P></TD>
    <TD height=3D20 width=3D"13%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dright>92</FONT></P></TD>
    <TD height=3D20 width=3D"31%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dright>109</FONT></P></TD>
    <TD height=3D20 width=3D"14%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dright>19</FONT></P></TD>
    <TD height=3D20 width=3D"14%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dright>161</FONT></P></TD></TR>
  <TR>
    <TD height=3D20 width=3D"28%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dcenter>2</FONT></P></TD>
    <TD height=3D20 width=3D"13%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dright>99</FONT></P></TD>
    <TD height=3D20 width=3D"31%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dright>94</FONT></P></TD>
    <TD height=3D20 width=3D"14%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dright>18</FONT></P></TD>
    <TD height=3D20 width=3D"14%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dright>140</FONT></P></TD></TR>
  <TR>
    <TD height=3D20 width=3D"28%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dcenter>3</FONT></P></TD>
    <TD height=3D20 width=3D"13%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dright>110</FONT></P></TD>
    <TD height=3D20 width=3D"31%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dright>91</FONT></P></TD>
    <TD height=3D20 width=3D"14%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dright>29</FONT></P></TD>
    <TD height=3D20 width=3D"14%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dright>159</FONT></P></TD></TR>
  <TR>
    <TD height=3D20 width=3D"28%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dcenter>4</FONT></P></TD>
    <TD height=3D20 width=3D"13%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dright>96</FONT></P></TD>
    <TD height=3D20 width=3D"31%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dright>97</FONT></P></TD>
    <TD height=3D20 width=3D"14%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dright>22</FONT></P></TD>
    <TD height=3D20 width=3D"14%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dright>154</FONT></P></TD></TR>
  <TR>
    <TD height=3D20 width=3D"28%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dcenter>5</FONT></P></TD>
    <TD height=3D20 width=3D"13%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dright>104</FONT></P></TD>
    <TD height=3D20 width=3D"31%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dright>89</FONT></P></TD>
    <TD height=3D20 width=3D"14%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dright>24</FONT></P></TD>
    <TD height=3D20 width=3D"14%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dright>172</FONT></P></TD></TR>
  <TR>
    <TD height=3D20 width=3D"28%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dcenter>6</FONT></P></TD>
    <TD height=3D20 width=3D"13%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dright>71</FONT></P></TD>
    <TD height=3D20 width=3D"31%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dright>105</FONT></P></TD>
    <TD height=3D20 width=3D"14%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dright>19</FONT></P></TD>
    <TD height=3D20 width=3D"14%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dright>170</FONT></P></TD></TR>
  <TR>
    <TD height=3D20 width=3D"28%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dcenter>7</FONT></P></TD>
    <TD height=3D20 width=3D"13%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dright>93</FONT></P></TD>
    <TD height=3D20 width=3D"31%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dright>107</FONT></P></TD>
    <TD height=3D20 width=3D"14%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dright>27</FONT></P></TD>
    <TD height=3D20 width=3D"14%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dright>166</FONT></P></TD></TR>
  <TR>
    <TD height=3D20 width=3D"28%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dcenter>8</FONT></P></TD>
    <TD height=3D20 width=3D"13%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dright>78</FONT></P></TD>
    <TD height=3D20 width=3D"31%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dright>92</FONT></P></TD>
    <TD height=3D20 width=3D"14%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dright>24</FONT></P></TD>
    <TD height=3D20 width=3D"14%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dright>152</FONT></P></TD></TR>
  <TR>
    <TD height=3D20 width=3D"28%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dcenter>9</FONT></P></TD>
    <TD height=3D20 width=3D"13%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dright>83</FONT></P></TD>
    <TD height=3D20 width=3D"31%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dright>83</FONT></P></TD>
    <TD height=3D20 width=3D"14%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dright>24</FONT></P></TD>
    <TD height=3D20 width=3D"14%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dright>139</FONT></P></TD></TR>
  <TR>
    <TD height=3D20 width=3D"28%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dcenter>10</FONT></P></TD>
    <TD height=3D20 width=3D"13%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dright>94</FONT></P></TD>
    <TD height=3D20 width=3D"31%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dright>82</FONT></P></TD>
    <TD height=3D20 width=3D"14%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dright>20</FONT></P></TD>
    <TD height=3D20 width=3D"14%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dright>165</FONT></P></TD></TR>
  <TR>
    <TD height=3D20 width=3D"28%">
      <P></P></TD>
    <TD height=3D20 width=3D"13%">
      <P></P></TD>
    <TD height=3D20 width=3D"31%">
      <P></P></TD>
    <TD height=3D20 width=3D"14%">
      <P></P></TD>
    <TD height=3D20 width=3D"14%">
      <P></P></TD></TR>
  <TR>
    <TD height=3D20 width=3D"28%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dright>mean</FONT></P></TD>
    <TD height=3D20 width=3D"13%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dright>92,00</FONT></P></TD>
    <TD height=3D20 width=3D"31%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dright>94,90</FONT></P></TD>
    <TD height=3D20 width=3D"14%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dright>22,60</FONT></P></TD>
    <TD height=3D20 width=3D"14%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dright>157,80</FONT></P></TD></TR>
  <TR>
    <TD height=3D20 width=3D"28%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dright>standard dev.</FONT></P></TD>
    <TD height=3D20 width=3D"13%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dright>11,81</FONT></P></TD>
    <TD height=3D20 width=3D"31%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dright>9,54</FONT></P></TD>
    <TD height=3D20 width=3D"14%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dright>3,66</FONT></P></TD>
    <TD height=3D20 width=3D"14%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dright>11,55</FONT></P></TD></TR>
  <TR>
    <TD height=3D20 width=3D"28%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dright>std. dev./mean %</FONT></P></TD>
    <TD height=3D20 width=3D"13%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dright>12,84</FONT></P></TD>
    <TD height=3D20 width=3D"31%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dright>10,05</FONT></P></TD>
    <TD height=3D20 width=3D"14%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dright>16,18</FONT></P></TD>
    <TD height=3D20 width=3D"14%"><FONT color=3D#000000 face=3DArial =
size=3D2>
      <P align=3Dright>7,32</FONT></P></TD></TR></TBODY></TABLE></DIV>
<DIV align=3Djustify style=3D"MARGIN-RIGHT: 0px">&nbsp;</DIV>
<DIV align=3Djustify style=3D"MARGIN-RIGHT: 0px"><FONT face=3DArial=20
size=3D2>Explanation: </FONT></DIV>
<BLOCKQUOTE style=3D"MARGIN-RIGHT: 0px">
  <DIV align=3Djustify style=3D"MARGIN-RIGHT: 0px"><FONT face=3DArial =
size=3D2><FONT=20
  color=3D#008000><STRONG>Mother</STRONG></FONT>: George Marsaglia's The =
mother of=20
  all random number generators producing uniformly distributed pseudo =
random 32=20
  bit values with period about 2^250.</FONT></DIV>
  <DIV align=3Djustify style=3D"MARGIN-RIGHT: 0px"><FONT face=3DArial=20
  size=3D2><STRONG><FONT =
color=3D#008000></FONT></STRONG></FONT>&nbsp;</DIV>
  <DIV align=3Djustify style=3D"MARGIN-RIGHT: 0px"><FONT face=3DArial=20
  size=3D2><STRONG><FONT color=3D#008000>CryptGenRandom</FONT></STRONG>: =
Windows=20
  95/98 CryptoAPI 1.0 (criptographically secure =
<STRONG>software</STRONG>=20
  PRNG).</FONT></DIV>
  <DIV align=3Djustify style=3D"MARGIN-RIGHT: 0px"><FONT face=3DArial =
size=3D2><FONT=20
  color=3D#008000><STRONG></STRONG></FONT></FONT>&nbsp;</DIV>
  <DIV align=3Djustify style=3D"MARGIN-RIGHT: 0px"><FONT face=3DArial =
size=3D2><FONT=20
  color=3D#008000><STRONG>URAND</STRONG></FONT>: Porting of a FORTRAN =
generators=20
  producing uniformly distributed pseudorandom 32 bit =
values.</FONT></DIV>
  <DIV align=3Djustify style=3D"MARGIN-RIGHT: 0px"><FONT face=3DArial =
size=3D2><FONT=20
  color=3D#008000><STRONG></STRONG></FONT></FONT>&nbsp;</DIV>
  <DIV align=3Djustify style=3D"MARGIN-RIGHT: 0px"><FONT face=3DArial =
size=3D2><FONT=20
  color=3D#008000><STRONG>random</STRONG></FONT>: standard c =
library.</FONT></DIV>
  <DIV align=3Djustify style=3D"MARGIN-RIGHT: 0px">&nbsp;</DIV>
  <DIV align=3Djustify style=3D"MARGIN-RIGHT: 0px">For example with =
Mother, in=20
  100,000,000 keys,&nbsp;92&nbsp;keys are the same =
as&nbsp;these&nbsp;generated=20
  in the fisrt 1,000,000 keys&nbsp;in the first sequence (n=B0 1), =
99&nbsp;keys in=20
  the second seuence, and so on.</DIV></BLOCKQUOTE>
<DIV align=3Djustify style=3D"MARGIN-RIGHT: 0px"><FONT face=3DArial =
size=3D2>With my=20
test, the best&nbsp;generator is "URAND"&nbsp;(few repetitions) =
while&nbsp;the=20
worst is "random" (many keys are the same).</FONT></DIV>
<DIV align=3Djustify style=3D"MARGIN-RIGHT: 0px">&nbsp;</DIV>
<DIV align=3Djustify style=3D"MARGIN-RIGHT: 0px"><FONT face=3DArial=20
size=3D2>Other&nbsp;generators (Mersenne Twister, ranmar, etc.) are =
about the=20
same&nbsp;as Mother (or a little bit better).</FONT></DIV>
<DIV align=3Djustify style=3D"MARGIN-RIGHT: 0px">&nbsp;</DIV>
<DIV align=3Djustify style=3D"MARGIN-RIGHT: 0px"><FONT face=3DArial =
size=3D2>The=20
differences in the table above are not&nbsp;detected by any statistical =
test=20
used in my program (FIPS PUB 140-2, Diehard, Maurer&#8217;s universal =
statistical test=20
and others).</FONT></DIV>
<DIV align=3Djustify style=3D"MARGIN-RIGHT: 0px">&nbsp;</DIV>
<DIV align=3Djustify style=3D"MARGIN-RIGHT: 0px"><FONT face=3DArial =
size=3D2>Can anybody=20
say me if my test is right? Why the statistical tests doesn't detect =
these=20
differences?</FONT></DIV>
<DIV align=3Djustify style=3D"MARGIN-RIGHT: 0px">&nbsp;</DIV>
<DIV align=3Djustify style=3D"MARGIN-RIGHT: 0px"><FONT face=3DArial =
size=3D2>Tank you=20
very much.</FONT></DIV>
<DIV align=3Djustify style=3D"MARGIN-RIGHT: 0px"><FONT face=3DArial=20
size=3D2></FONT>&nbsp;</DIV>
<DIV align=3Djustify style=3D"MARGIN-RIGHT: 0px"><FONT face=3DArial=20
size=3D2>Ciao</FONT></DIV>
<DIV align=3Djustify style=3D"MARGIN-RIGHT: 0px"><FONT face=3DArial=20
size=3D2>Cristiano</FONT></DIV></FONT></DIV></BODY></HTML>

=======_NextPart_000_0022_01C00ED1.BC689C60==


------------------------------

From: Francois Grieu <[EMAIL PROTECTED]>
Subject: Re: SHA-1 program, wrongo !
Date: Fri, 25 Aug 2000 20:32:39 +0200

[EMAIL PROTECTED] (S. T. L.) wrote an SHA1 implementation,
available at <http://members.aol.com/stl137/download.html>
from which I extract :

#define MASK32 0xFFFFFFFFUL

   h[0] = (h[0] + a) % MASK32;


Can you spot the error ?
Hint: on 32 bit machines the result is correct 99.99999997% of the time.

 Francois Grieu

Spoiler: creprag cresbezf zbqhyb, juvpu erfhyg vf nyjnlf ng yrnfg bar 
yrff guna gur zbqhyhf. nzcrefnaq qbrf n ovgjvfr naq, juvpu vf jung vf 
zrnag urer.

------------------------------

From: Mok-Kong Shen <[EMAIL PROTECTED]>
Crossposted-To: alt.security.pgp,comp.security.pgp.discuss
Subject: Re: Serious PGP v5 & v6 bug!
Date: Fri, 25 Aug 2000 20:47:10 +0200



Eric Smith wrote:
> 
> Mok-Kong Shen <[EMAIL PROTECTED]> writes:
> > Did I say one has to do everyting oneself? My point it
> > that it is dangerous to entirely rely on others, no
> > matter how big names these specialists or organisations
> > have.
> 
> Well, it's dangerous to rely on others, and it's dangerous to
> rely on one's self, so where does that leave us?  Apparently
> the universe is just a dangerous place.

To be too anxious of every potential risks is useless and
doesn't help. But to be blind of potential risks simply
because some big names 'guarantee' that things are o.k.
is naive. In fact, one gambles in all non-trivial
circumstances in life, because the outcomes are hardly 
ever known for sure. Whether one can or needs or is 
reasonable or cares to do something additional to reduce 
the potential risks in ANY issue depends very much on 
the environment one is in and of course also on one's 
(subjective) evaluations. It is important to realize, 
though, that one is alone responsible for one's decisions. 
(The experts who have given advices don't carry 
responsibilities for you in case things happen to come 
out other than in ways prophesied by them.)

M. K. Shen

------------------------------

From: Mok-Kong Shen <[EMAIL PROTECTED]>
Subject: Re: Looking for link
Date: Fri, 25 Aug 2000 20:54:37 +0200



Ryan Phillips wrote:
> 
> I've been looking for a link for days now and cannot find it.  There is
> a German computer security company that has created a "new" IP security
> scheme and they also specialize in network security.  Does anyone know
> what company it is?  The guy who owns it also has a personal web page (a
> .com I think); his name might be kenneth or kenny - he's a professional
> hacker.  Any help would be appreciated.

For security issues the German newsgroup de.comp.security
is quite active. You would have a better chance of getting 
an answer to your question, if you post to that group.

M. K. Shen

------------------------------

From: Pertti Lounesto <[EMAIL PROTECTED]>
Crossposted-To: sci.math,sci.physics
Subject: Re: My unprovability madness.
Date: Fri, 25 Aug 2000 21:41:07 +0300

"Douglas A. Gwyn" wrote:

> >   The difference between statements in logic which ARE false, and
> > statements which are "merely" DEEMED to be false, is nothing but a foot
> > stomp.  For all statements in logic which ARE false, are merely "false"
> > by definition of your particular construction of "false." How else?
>
> Presumably he meant that for any given well-formed statement,
> either it or its negation, but never both, can be proven.
> That provides an unambiguous classification into "true",
> "false", and "not well-formed".

On the contrary.  Advanced statements at the forefront of
research are under debate.  As such they are both false and
true, simultaneously, in the minds of well-informed experts.
In the page http://www.hit.fi/~lounesto/counterexamples.htm,
I falsify theorems by counterexamples, which satisfy all the
assumptions of the theorems, without the conclusions being
valid.  Those theorems are at a transition from true to false.




------------------------------

From: [EMAIL PROTECTED] (Just Another Deckchair on the Titanic)
Crossposted-To: sci.math,sci.physics,sci.optics
Subject: Re: My unprovability madness.
Date: 25 Aug 2000 18:47:21 GMT

In article <[EMAIL PROTECTED]>,
Future Beacon  <[EMAIL PROTECTED]> wrote:
>
>
>If you want me to respond with information, answers, or my slant on
>things, this is not a constructive message.  You may believe that
>there is no possible mathematical system that meets my requirements,
>but a question about that would have been much more profitable than
>this mean attack.  Dealing with this kind of discourteousness is
>too high a price to pay for your conversation.

You've been politely asked several times now for details of what
you're proposing, but as with this message, you seem to evade the
question and come back with ad-hominems.

So, for the last time, what are the details of the math you are
proposing (note: I'm entirely neutral on the math here -- I'm just
watching from the sidelines).

>When you find out what systems I use, I hope you remember what you
>have said to me today.  I also hope you are young enough to recover
>from you anti-social personality disorder.

Your hypocritical ad-hominem attack is noted.

        Hamish

------------------------------

From: Eriavierta <[EMAIL PROTECTED]>
Subject: PROMIS-software for worldwide spy network by US/Isreal
Date: Fri, 25 Aug 2000 13:49:13 -0500

Here is the link from Reuters:

http://news.excite.com/news/r/000825/11/canada-spying

Here are some more interesting links I found for this amazing spy
network:

http://www.federal.com/inslawsc.html
http://www.eff.org/pub/Legal/Cases/INSLAW/
http://www.wwfreepress.com/inslaw.html
http://www.sonic.net/sentinel/gvcon7.html
http://www.wired.com/wired/archive/1.01/inslaw.html


------------------------------

From: Mok-Kong Shen <[EMAIL PROTECTED]>
Subject: Re: Test on pseudorandom number generator.
Date: Fri, 25 Aug 2000 21:12:35 +0200


Is it right that each call of the generators gives you
a 5*8=40 bit integer? What are the moduli of the
generators? You examined sequences that are repeated.
Did you examine repetition of sequences of certain
given fixed length (what is that?) in the concatenation 
of the said integers (resulting in a big bit sequence)
or what did you do? Without these informations it seems 
difficult to understand the meaning of your table.

M. K. Shen

------------------------------


** FOR YOUR REFERENCE **

The service address, to which questions about the list itself and requests
to be added to or deleted from it should be directed, is:

    Internet: [EMAIL PROTECTED]

You can send mail to the entire list (and sci.crypt) via:

    Internet: [EMAIL PROTECTED]

End of Cryptography-Digest Digest
******************************

Reply via email to