From: crunch@netcom.com (John Draper)
Date: Thu, 26 Nov 92 01:37:40 PST
To: cypherpunks@toad.com
Subject: Mac PGP report and Rander progress
Message-ID: <9211260933.AA04417@netcom2.netcom.com>
MIME-Version: 1.0
Content-Type: text/plain


Mac PGP effort:

   After talking with Phil Zimmerman,   we decided to break the
MacPGP effort into two teams.   A short term team as it currently
stands now,  with the origional members,   and a long term team to
change PGP into a set of C Libraries that can be used with ANY
platform or API.   The short term team consists of its current
members who are doing current work on the Mac implementation.

   Next week,  perhaps on Wednesday Evening at 7 pm,  we will be
setting up a conference call to talk about all of the details,
and introduce each other.    My role in this currently will be
that of Email coordinator between the Mac PGP effort and the
other platforms.

   It is obviously clear that there is still a lot of mis-trust
that people have in me.     I guess it's still very hard to ditch
that "Once a criminal- always a criminal" attitude.

Phil Karn says:

>John Draper was proposing to manufacture rs232 random number
>generators -- would you buy a used random number from this man?

   This is EXACTLY my point.   So I WILL be publishing the schematic
and I expect the Rander box will be put through it's paces.   I have
simplified the circuit immensly,  and even eliminated the AD converter,
but not sure the design works,  but want to run the design by a few
other HW types before I "breadboard" it.    I think I got it down to
3 chips including the UART.   Two CMOS chips,  a Latch and a gate I'm
using as a comparitor,  and the UART plus a noise source.    Gack!!
All these years I try and ELIMINATE noise,  and now I am LOOKING
for noise.   By biasing one of the gates,  into the linear mode,  it
doubles as the amplifier for the noise source.   I've gone eligantly
simple with the design,   I just hope it works.   Perhaps this circuit
can be integrated into Yanek's Dongle.

Phil K. writes:
>>My thinking is to limit the external "dongle" to the one function that
>>is truly sensitive and worthy of special protection: RSA secret key
>>operations.

Eric Hughes replies:
>Phil's comment are right on.  There is a need for you secret keys
>to be easily and physically relocatable.

The Obvious,  cheapest,  but perhaps not the best way,  is to keep
your key on a floppie.


More later ....