From: edgar@spectrx.saigon.com (Edgar W. Swank)
Date: Fri, 14 Jan 94 13:23:34 PST
To: Cypherpunks          <cypherpunks@toad.com>
Subject: Announcing SecureDrive Version 1.2
Message-ID: <9JV6Fc6w165w@spectrx.saigon.com>
MIME-Version: 1.0
Content-Type: text/plain


-----BEGIN PGP SIGNED MESSAGE-----

This is to announce the availability of Version 1.2 of SecureDrive.

This release of Secure Drive is based on release 1.0, mostly
written by

Mike Ingle <mikeingle@delphi.com>

The code which we wrote is not copyrighted, but the program contains GNU
Copylefted code, and therefore may be freely distributed under the terms of
the GNU General Public Licence.

Version 1.2 adds significant new function.

As of Version 1.2, you may use an operand /PGP with LOGIN, either
by itself, or with other operands. By itself,

  LOGIN /PGP

will prompt for a passphrase and set the PGPPASS environment variable with
whatever is entered. If PGPPASS is already set then

  LOGIN D: /PGP

or

  LOGIN /F /PGP

will use whatever PGPPASS is set to as the passphrase. For the hard
disk partition, LOGIN will test the PGPPASS passphrase. If it is incorrect,
then it will prompt you for another passphrase.

If PGPPASS is NOT set when these forms of LOGIN are used, than a passphrase
is prompted for AND PGPPASS is set to this passphrase. This is more
secure than using the SET command since LOGIN only echoes "*"'s when
entering the passphrase.

As of Version 1.2, typing LOGIN /C /PGP will clear the SecureDrive crypto
keys from memory AND clear the PGPPASS environment variable. This is done
in a manner less likely to leave your passphrase in memory than just using
the DOS SET command.  In addition, Version 1.2 clears all the free memory
it can find, which is likely to include some plaintext.  However, if you
want to be absolutely sure all traces of sensitive data are erased from
memory then turning off the computer is still recommended.

As of version 1.2, if PGPPASS is set before you run CRYPTDSK, CRYPTDSK
will ask to use the value of PGPPASS for the passphrase before
prompting you (for encryption), or try PGPPASS (for decryption).
Obviously, if you encrypt or decrypt a lot of diskettes at once, this
feature can save you a lot of typing.

The purpose of these changes is to allow you to enter a single passphrase
only once per boot IF you choose to use the same passphrase for your PGP
secret key, your SecureDrive encrypted hard disk partition, and SecureDrive
encrypted floppies.

Mike Ingle and I have different opinions on the distribution of
SecureDrive.  Under the GNU General License (copyleft) I do not need
Mike's permission to distribute version 1.2 and I have not asked for
same.  My policy on distribution is in the version 1.2 doc:

    Exporting this program.  Cryptography is export controlled, and
    sending this program outside the country may be illegal.  Don't do
    it.

    The "author" of version 1.2, Edgar Swank, says that the export ban
    should not prevent you from placing this program on public BBS's
    and anonymous FTP sites in the US and Canada.  If individuals
    outside the US/Canada use the internet or international long
    distance to obtain copies of the program, THEY may be breaking US
    law.

    Any such foreign individuals should be aware that US law
    enforcement may legally (under US law) apprehend individuals who
    break US laws even if such individuals are not on or even have
    never been on US soil.  Such apprehension may remove such
    individuals directly to US jurisdiction without benefit of
    extradition proceedings in such individuals' home country(ies).
    This has actually happened in at least two cases, Mexico --
    suspect in murder of US drug agent, Panama -- Noriega -- indicted
    in absencia for drug smuggling.  As is well known, after a small
    war with Panama, Noriega was brought to the USA, tried and
    convicted.  He is now a guest of the US Government in a Florida
    prison.

SecureDrive Version 1.2 is already available for download on the
following public BBS's as SECDRV12.ZIP:

  Eagle's Nest         (408)223-9821
  Flying Dutchman      (408)294-3065

I will send a copy via E-mail to any person with a US/Canada net
address who requests a copy and will upload it to a public BBS or
anonymous FTP site. (I don't have access to FTP from my account here).

Here is the contents of SECDRV12.ZIP:

  Searching ZIP: E:/TLXD/ZIP/SECDRV12.ZIP

   Length  Method   Size  Ratio   Date    Time    CRC-32  Attr  Name
   ------  ------   ----- -----   ----    ----   -------- ----  ----
     1632  DeflatX   1260  23%  12-04-93  00:43  980125ec --w-  KEY.ASC
    19664  DeflatX   4183  79%  11-19-93  21:42  22c2502c --w-  CRYPT2.ASM
     8027  DeflatX   2244  73%  01-06-94  21:42  801b1439 --w-  CRYPTDSK.C
      152  Stored     152   0%  01-09-94  00:38  96da6ef2 --w-  SECTSR.SIG
      152  Stored     152   0%  01-09-94  00:39  61d155dc --w-  LOGIN.SIG
     1632  DeflatX   1082  34%  01-09-94  00:15  90d6bca6 --w-  SECTSR.COM
      152  Stored     152   0%  01-09-94  00:39  8e8cc6c4 --w-  CRYPTDSK.SIG
     6320  DeflatX   1990  69%  01-07-94  11:44  a7faa9a8 --w-  LOGIN.C
    29800  DeflatX  14644  51%  01-09-94  00:14  e4b79fe7 --w-  CRYPTDSK.EXE
       33  Stored      33   0%  07-16-93  06:09  aa6151a5 --w-  M.BAT
     1252  DeflatX    502  60%  01-09-94  00:07  24a04819 --w-  MAKEFILE
    11557  DeflatX   3277  72%  05-09-93  19:38  e71f3eea --w-  MD5.C
     3407  DeflatX   1097  68%  05-11-93  12:49  f1f58517 --w-  MD5.H
     6190  DeflatX   2081  67%  01-04-94  16:21  38e843f7 --w-  SDCOMMON.C
    18346  DeflatN   6680  64%  01-13-94  15:17  94491e3e --w-  SECDRV.DOC
     2019  DeflatX    664  68%  01-04-94  17:03  cc63f413 --w-  SECDRV.H
    28336  DeflatX   7336  75%  11-19-93  20:45  790c6e41 --w-  SECTSR.ASM
     7507  DeflatX   2581  66%  12-29-93  21:15  ceda9b20 --w-  SETENV.ASM
     1254  DeflatX    541  57%  05-09-93  19:39  182978aa --w-  USUALS.H
    29482  DeflatX  14440  52%  01-09-94  00:15  2e2202bb --w-  LOGIN.EXE
   ------          ------  ---                                  -------
   176914           65091  64%                                       20

Also note that the ZIP file contains PGP detached signatures (*.SIG)
for the executable files.  Finally here is my public key, also
available on many public keyservers; note who has signed it.

Type bits/keyID   Date       User ID
pub  1024/87C0C7 1992/10/17  Edgar W. Swank <edgar@spectrx.saigon.com>
- -----BEGIN PGP PUBLIC KEY BLOCK-----
Version: 2.3a
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=4fGE
- -----END PGP PUBLIC KEY BLOCK-----

-----BEGIN PGP SIGNATURE-----
Version: 2.3a

iQCVAgUBLTXdxN4nNf3ah8DHAQFFMwP/Uv1qYwds9Yl7dmMYchKdHMKaHbztog66
x2bf9kTnfCOiRPnIjMmMPOlbnFe7mm/v214iMkRE1WGuQcMS34P/zGuWG0zsBbjG
EbJg6bL/8F3QPx8HapX2JAi8dF7xrVgL9fGvmRjmv6TSOI/PnLGpXYx9L8wRPhwh
y/uQA1bGyT8=
=pfy8
-----END PGP SIGNATURE-----

--
edgar@spectrx.saigon.com (Edgar W. Swank)
SPECTROX SYSTEMS +1.408.252.1005  Cupertino, Ca