From: "Kent Hastings" <kent_hastings@qmail2.aero.org>
Date: Mon, 23 Aug 93 13:51:38 PDT
To: cypherpunks@toad.com
Subject: Chaum criticism
Message-ID: <199308232050.AA12556@aerospace.aero.org>
MIME-Version: 1.0
Content-Type: text/plain


                      Chaum criticism#000#
Hal Finney writes:

> ... I think that Chaum has gone off in the wrong direction 
> in the last few years [by] concentrating on protocols which rely
> on a tamper-proof, hardware ... "observer"... chip ... etc. 
Amen.

> ... it seems that many of the papers out of his group are designed 
> to explore observer-based protocols.  

I am trying to read and understand the Niels Ferguson "Off-line Coins"
article, the "Efficient Off-line Digital Cash" paper also from CWI and 
the Netcash paper. Were you the one critical of the Netcash paper 
because it didn't offer unconditional untraceability? Do the papers I
just listed require observer chips, or are they OK for software-only?

> This means that these ideas are not useful for software-only
> implementations.  One of the (relatively few) strengths that we 
> and the forces we represent have is that free software can be 
> spread very far and very fast, making it hard for those opposed 
> to privacy to successfully stop our efforts.  Any technology based 
> on special chips is going to lose these advantages.

We have PageMaker, CAD ware, someday we may have "ChipMaker"
to create "chipscript" robotic control files to make our own
monolithic IC's. In the short term, perhaps we can distribute
shareware hardware designs using low-cost components to 
avoid back doors in manufactured comm gear.

> ... people may still feel uncomfortable about having a 
> mechanical "conscience" in their pocket ... there have already 
> been comparisons on sci.crypt between Chaum's observers and 
> the Clipper chip ...

In other words, if we can't see the "source code" for the 
hardware design, or "compile" it ourselves, maybe we shouldn't
really trust it. 

> I think that a realistic appraisal of the pros and cons 
> suggests that non-observer protocols are more likely to 
> further our ultimate goal of personal privacy.

What particular design would you like to see widely 
implemented now given these objections to observer chips?
Is there software we can use NOW for ATM's and banks?

Kent - jkhastings@aol.com