[117364] in Cypherpunks
RE: PGP security hole ?
daemon@ATHENA.MIT.EDU (Reese)
Wed Sep 1 06:51:49 1999
Message-Id: <3.0.5.32.19990901003028.00967b40@flex.com>
Date: Wed, 01 Sep 1999 00:30:28 -1000
To: "Lucky Green" <shamrock@cypherpunks.to>, "SEMYAZA" <vecna@iquebec.com>,
<cypherpunks@toad.com>
From: Reese <reeza@flex.com>
In-Reply-To: <NDBBIFGOKODBCKDGJDKLMEPKCEAA.shamrock@cypherpunks.to>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Reply-To: Reese <reeza@flex.com>
By my massive powers of deductive logic, I've concluded that:
a.) the nym "lucky green" has been taken over by little green men from mars
b.) who thereafter replaced his computer and his person with an implant
c.) who uses outlook
d.) set for html mail
Turk182Monger
At 11:18 PM 31-08-99 -0700, Lucky Green wrote:
>>>>
Absolutely. In fact, my PGPKRAQ program was able to determine not just the
session key, but also your private key from the subliminal channel exposed
by your signature. Not only that, but your .sig also contained the last
URL's you visited. Hmm, you are interested in *what*? That's pretty sick...
--Lucky, who can't help but notice that these kind of questions are almost
always posted to <mailto:cypherpunks@toad.com>cypherpunks@toad.com.
--Lucky Green <shamrock@cypherpunks.to>
-----Original Message-----
From: owner-cypherpunks@Algebra.COM
[mailto:owner-cypherpunks@Algebra.COM]On Behalf Of SEMYAZA
Sent: Tuesday, August 31, 1999 22:07
To: cypherpunks@toad.com
Subject: PGP security hole ?
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
It is true that PGP 6.5.1 leaks random session key bits in the SHA
signature? Big Brother inside?
-----BEGIN PGP SIGNATURE-----
Version: PGPfreeware 6.5.1 for non-commercial use
<<http://www.pgp.com>http://www.pgp.com>
iQA/AwUBN8xD5cZ4RS2SUi9OEQISQgCeLpSHG9tx7QLVnhGZsolWXx2fONkAoJJH
aNiYH2bL+Hh3auukO4ChJwhn
=tU0f
-----END PGP SIGNATURE-----
<<<<
"All men that are fittinge to beare armes, shall bring their
pieces to church . . . for drill and target practice."
- a 1631 Virginia law
