Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
HomeAnnouncementsWhite Papers
Discussion GroupsFirst AidDatabasesJavaBeansGUIJava 3DVirtual MachineCORBASecurityToolsGeneral
Java DirectoryOpen Source ProjectsSample Book ChaptersUser GroupsWeb Resources
Related Topics
Databases.NETMore Topics ...

Java Forum / General / January 2006

Tip: Looking for answers? Try searching our database.

Java Source For Asymmetric Key Ciphers

Thread view: 
Luc The Perverse - 16 Jan 2006 20:39 GMT
Hi - I'm looking for HFE and NTRU java source code.

I don't want to pay for these libraries, because I'm not going to make a
product with them, I only want to read through the algorithms and "play"
with them.  I have trouble understanding the algorithm by reading a pper,
and have a better chance of understanding if reading code.

Are they available anywhere for free?

Signature

LTP

:)
IchBin - 16 Jan 2006 21:02 GMT
> Hi - I'm looking for HFE and NTRU java source code.
>
[quoted text clipped - 4 lines]
>
> Are they available anywhere for free?

http://java.sun.com/developer/JDCTechTips/2004/tt0116.html
Signature


Thanks in Advance...
IchBin, Pocono Lake, Pa, USA
http://weconsultants.servebeer.com/JHackerAppManager
__________________________________________________________________________

'If there is one, Knowledge is the "Fountain of Youth"'
-William E. Taylor,  Regular Guy (1952-)

Luc The Perverse - 16 Jan 2006 22:11 GMT
>> Hi - I'm looking for HFE and NTRU java source code.
>>
[quoted text clipped - 6 lines]
>
> http://java.sun.com/developer/JDCTechTips/2004/tt0116.html

:)

I probably should use RSA if I have no real need to keep the data secure.

--
LTP

:)
Juuso Hukkanen - 16 Jan 2006 22:39 GMT
>Hi - I'm looking for HFE and NTRU java source code.
>
[quoted text clipped - 4 lines]
>
>Are they available anywhere for free?

anywhere...don't know but had fun searching

NTRU java
http://bass.gmu.edu/courses/ECE543/project/reports_2001/dsouza.pdf
http://bass.gmu.edu/courses/ECE543/project/specs-F01/DsouzaThomson.PDF

Apparently NTRU code was not available 2001 so they/ Rodney wrote an
own implementation

Now, where is Rodney... and his code :) Ok Quick googliing find out
what is true...

Possible address 1/2005
rodney.dsouza AT THE gmail.com

News posts IP (202.163.119.98) says he posted to Google group Windows
XP on 1/2005 from Pakistan Lahore, Punjab    
http://groups.google.fi/group/helpwinxp/msg/9664c6184ae15a56?dmode=source&hl=fi

<OT>
In that case the DNS tracer is not mistaking...Hopefully he managed to
avoid being killed in those latest made by USA conducted war-crimes.
(I refer to bombing of a Pakistani village which left 18 civilians
death for no reason. It is interesting to notice that countries are
allowed to try to use large bombs in other countries in order to try
to catch criminals. Let's see that policy allows Russians to launch
cruise missiles to London suburbs in order to 'get' Chechen
politicians/terrorists. In addition that policy would suggest it is ok
for the China to try place a car bomb on a street within the USA, in
order the get their criminals e.g. Falun gong founder, damn Chinese
always trying to kill my religious leaders :)
</OT>

Right address was in 2001
rodney_dsouza@extrahotmail.com
(Remove extra-adjective)

Probably would not hurt to try also

Active 2001 ->?
dsouza    AND
rodney_dsouza AND
rodney.dsouza AT THE veridian.com

In  desperation Who knows maybe still
dsouza AT THE mrj.com WORKS

mars 2005 lists Rodney D'Souza
as mechanical coordinator at Arabian Construction Co's service in
Qatar
but that is propably a not the NTRU Rodney, or has managed to abandon
computers ?:)

Consider whether to ask if Rodney can make the code publicly available
(public domain).

Was fun...sorry no time for better un-intelligence

Juuso Hukkanen
(to reply by e-mail set addresses month and year to correct)
Luc The Perverse - 17 Jan 2006 03:59 GMT
>>Hi - I'm looking for HFE and NTRU java source code.
>>
[quoted text clipped - 6 lines]
>
> anywhere...don't know but had fun searching

Don't take this the wrong way - but that seems like a lot of work - and I
don't even know who this guy is.

My current quest is to find a song "Pallas Athena" by Jay Bolton from a 1996
movie which never released its sound track.  I am calling the musicians
guild (or something) tommorrow and have a few studio phone numbers . . .
Only one quest at a time please!   I'm beginning to think the man and the
song don't exist - they are just myths.

--
LTP

:)
Paul Rubin - 17 Jan 2006 04:13 GMT
> My current quest is to find a song "Pallas Athena" by Jay Bolton from a 1996
> movie which never released its sound track.  I am calling the musicians
> guild (or something) tommorrow and have a few studio phone numbers . . .
> Only one quest at a time please!   I'm beginning to think the man and the
> song don't exist - they are just myths.
> :)

http://www.imdb.com/name/nm0093407/

http://www.imdb.com/title/tt0118904/fullcredits

http://www.rottentomatoes.com/m/macon_county_jail/dvd.php
Luc The Perverse - 17 Jan 2006 10:26 GMT
>> My current quest is to find a song "Pallas Athena" by Jay Bolton from a
>> 1996
[quoted text clipped - 9 lines]
>
> http://www.rottentomatoes.com/m/macon_county_jail/dvd.php

Ah some familiar URLs!

One of the first things I did was sign up for a pro trial account of imdb ;)
That is how I got the name of the composer and the number to the studio.

Thanks for trying though.

Call me strange for not wanting to watch a girl get raped every time I want
to hear the song - it just distracts somehow, but as thus far this has been
my only experience with it, perhaps I should be thankful.   **lunacy
emerging . . . ** MUST HAVE SONG!!!! AGGGGGGHHHHHHHHHHHH

I didn't mean to get so sidetracked though - we're we talking about
asymmetric ciphers?

--
LTP

:)
Paul Rubin - 17 Jan 2006 10:42 GMT
> Call me strange for not wanting to watch a girl get raped every time I want
> to hear the song - it just distracts somehow, but as thus far this has been
> my only experience with it, perhaps I should be thankful.   **lunacy
> emerging . . . ** MUST HAVE SONG!!!! AGGGGGGHHHHHHHHHHHH

I think the idea is get the DVD and upload the audio of the song to
your vorbis player or whatever.

> I didn't mean to get so sidetracked though - we're we talking about
> asymmetric ciphers?

Ehh.
wwhyte@gmail.com - 17 Jan 2006 12:41 GMT
You may find the tutorials on the NTRU website helpful --
http://www.ntru.com/cryptolab is the place to start.

Note that we encourage people to develop and play with the algorithms
themselves, but you may not distribute your implementation without a
license from NTRU.

================================

William Whyte,
CTO, NTRU Cryptosystems
Tom St Denis - 17 Jan 2006 14:31 GMT
> You may find the tutorials on the NTRU website helpful --
> http://www.ntru.com/cryptolab is the place to start.
>
> Note that we encourage people to develop and play with the algorithms
> themselves, but you may not distribute your implementation without a
> license from NTRU.

With that final note how many people use NTRU versus says RSA-PKCS or
ECC-X9.6X?  :-)

Patents may make business sense but all they do is take a possibly
valid technology and make it moot.  By time NTRU is available for the
public domain it'll be 2015 or so.  At which point "smart cards" will
be ARM platforms [or other 32-bit platform] and ECC with prime curves
will be more than just fine in software, etc...

Tom
Paul Rubin - 17 Jan 2006 15:41 GMT
> By time NTRU is available for the public domain it'll be 2015 or so.
> At which point "smart cards" will be ARM platforms [or other 32-bit
> platform] and ECC with prime curves will be more than just fine in
> software, etc...

Nah, smart cards will never be more powerful than they need to be.  In
2015 there might be 32-bit smart cards that cost the same 2 or 3
dollars that today's 8-bit smart cards cost, but there will also be
8-bit cards like today's, except they will cost 10 cents instead of 2
or 3 dollars.  If you're shipping millions (maybe even billions) of
cards, a public key algorithm that can run on a 10 cent card instead
of needing a 2 or 3 dollar card is extremely worthwhile.
Tom St Denis - 17 Jan 2006 15:48 GMT
> > By time NTRU is available for the public domain it'll be 2015 or so.
> > At which point "smart cards" will be ARM platforms [or other 32-bit
[quoted text clipped - 8 lines]
> cards, a public key algorithm that can run on a 10 cent card instead
> of needing a 2 or 3 dollar card is extremely worthwhile.

Provided they're still making them.  It may cost 3 cents to make an
8051 but if nobody will license/and/or/use them ... what's the point?

Also I imagine in the next 9 years we'll see more capable RISC
processors ending up on opencores.org.  There are already a few there
now.

So you can use the DW8051 that comes with your cell library ... or
fetch a 32-bit 5-stage MIPS/Mhz processor off opencores and use it for
free as well... etc.  ARM processors are already highly area efficient
and a hell of a lot more efficient in terms of mips/watt than an 8051
or 6805.  I mean you'd have to clock an ARM down around <100Khz to
match the throughput of operations of an 8051.

Point is in the next decade things will only get better.  Making the
"desire" to use lower efficiency 8-bit micros even lower and lower.

Tom
Paul Rubin - 17 Jan 2006 16:02 GMT
> So you can use the DW8051 that comes with your cell library ... or
> fetch a 32-bit 5-stage MIPS/Mhz processor off opencores and use it for
> free as well... etc.  ARM processors are already highly area efficient
> and a hell of a lot more efficient in terms of mips/watt than an 8051
> or 6805.  I mean you'd have to clock an ARM down around <100Khz to
> match the throughput of operations of an 8051.

I think power efficiency isn't a big issue for smart cards.  If you
offer today's smart card buyer a choice between 50% power savings or
2% cost savings, he'll take the 2% cost savings without hesitating for
an instant.  Question is, how many gates (chip area) does an ARM need
compared with the 8 bitter?

> Point is in the next decade things will only get better.  Making the
> "desire" to use lower efficiency 8-bit micros even lower and lower.

The desire to pay as little as possible for any piece of functionality
is as old as history and will always be present.
Tom St Denis - 17 Jan 2006 16:39 GMT
> > So you can use the DW8051 that comes with your cell library ... or
> > fetch a 32-bit 5-stage MIPS/Mhz processor off opencores and use it for
[quoted text clipped - 8 lines]
> an instant.  Question is, how many gates (chip area) does an ARM need
> compared with the 8 bitter?

About 1 or 2 mm^2 in 130nm technology.

10 years from now in 65 or 45nm [when it becomes common for the fabs]
this will be moot.

But you missed the point.  Custom RISC processors will likely be
available to the public [e.g. LGPL or similar license] and it won't
make sense to use the free DW51 when a free RISC core is available that
lets you do so much more.

> > Point is in the next decade things will only get better.  Making the
> > "desire" to use lower efficiency 8-bit micros even lower and lower.
>
> The desire to pay as little as possible for any piece of functionality
> is as old as history and will always be present.

They also compromise.  Why use P-256 it's slow on my 16-bit MCU...
let's use P-160 or lower!  it'll be fast enough!

Tom
Paul Rubin - 17 Jan 2006 16:55 GMT
> About 1 or 2 mm^2 in 130nm technology.
>
> 10 years from now in 65 or 45nm [when it becomes common for the fabs]
> this will be moot.

How can you say it will be moot?  What smart cards are made in 130nm
today?  Why would anyone use a 130nm process if they can use 3 microns
for much less cost?

> But you missed the point.  Custom RISC processors will likely be
> available to the public [e.g. LGPL or similar license] and it won't
> make sense to use the free DW51 when a free RISC core is available that
> lets you do so much more.

Sure, there will be high end applications that need a 32 bit card but
the most common applications will still be stuff like SIM phone cards,
that just hold a few account numbers and keys.  Right now I doubt most
of them can even do public key operations.  Public key may become
economically feasible sometime, but remember these things are made by
the billions, so they'll still want to use 8-bit cards if they can.
The difference between a 27 cent, 8-bit card and a 28 cent, 32-bit
card is megabucks in the bank.

> They also compromise.  Why use P-256 it's slow on my 16-bit MCU...
> let's use P-160 or lower!  it'll be fast enough!

I think they're using closer to p-120.  Since they're also using
single-DES....
Tom St Denis - 17 Jan 2006 17:02 GMT
> > About 1 or 2 mm^2 in 130nm technology.
> >
[quoted text clipped - 4 lines]
> today?  Why would anyone use a 130nm process if they can use 3 microns
> for much less cost?

Well the two biggest reasons why full blown processors aren't used.

1.  License cost for the cpu
2.  Area it requires would require package changes [e.g. larger].

I just checked over opencores.org and it's quite slim pickings.  There
are a few MIPS designs but no PPC like designs or ARM...

That said, that can all change in 10 years.  So license issues are
moot.

Now with a process that would take [say] 2mm^2 now ... in 65nm will be
much smaller thus requiring no package changes [at least externally].

It isn't like credit card sized smart cards will be getting smaller.

> > But you missed the point.  Custom RISC processors will likely be
> > available to the public [e.g. LGPL or similar license] and it won't
[quoted text clipped - 9 lines]
> The difference between a 27 cent, 8-bit card and a 28 cent, 32-bit
> card is megabucks in the bank.

Again, that's today.  Even now things are moving to ARM despite the
license costs.  Most people in the BT SIG are ARM users.  So you'd see
things like mice and keyboards with enough power to do ECC P-192 mults
in 1M cycles!!!

An ARM license can run you usually a few dollars per core.  Which slows
adoption rates a bit, specially for smart cards.  But there clearly is
demand for the power.  Just need a public domain core to feed the
engineers.

I really don't see cost being an issue once a 32-bit public domain core
is out there.  Heck if I was an EE I'd probably do it myself just to
stir sh.t up.  But so far I'm 4 years of school and about another 4
years of experience too short to do that :-)

> > They also compromise.  Why use P-256 it's slow on my 16-bit MCU...
> > let's use P-160 or lower!  it'll be fast enough!
>
> I think they're using closer to p-120.  Since they're also using
> single-DES....

My point exactly.  

Tom
wwhyte@gmail.com - 20 Jan 2006 01:21 GMT
> Patents may make business sense but all they do is take a possibly
> valid technology and make it moot.

If the second part is true, then they don't make business sense...

... but there are many factors involved in technology choices.
Licensing terms are only one, and there are plenty of examples
of customers choosing (for example) to pay for Windows rather
than install Linux themselves. Closer to home, remember that
the NSA recently paid Certicom $25 million for a subset of their
ECC patents. I understand that patents are annoying to the
developer who wants to use the patented technology, but I don't
think you can argue (as you seem to be trying to do here) that
they're inherently self-defeating.

William
Luc The Perverse - 20 Jan 2006 02:26 GMT
>> Patents may make business sense but all they do is take a possibly
>> valid technology and make it moot.
[quoted text clipped - 12 lines]
>
> William

That's odd - why did they do that?  Were they afraid of them?  Wanted to use
them theirselves?

Signature

LTP

:)
Tom St Denis - 20 Jan 2006 03:18 GMT
> > Patents may make business sense but all they do is take a possibly
> > valid technology and make it moot.
>
> If the second part is true, then they don't make business sense...

Business sense != common sense.

It makes perfect "business sense" for Intel and Apple to partner.  It
makes no common sense to do so [variety == better chance of
survivability].

> ... but there are many factors involved in technology choices.
> Licensing terms are only one, and there are plenty of examples
[quoted text clipped - 5 lines]
> think you can argue (as you seem to be trying to do here) that
> they're inherently self-defeating.

I don't know what the NSA "licensed".  ECC over prime fields is not
patented.  Things like MQV are but who gives two sh.ts?  Just use DH
with EC-DSA and you're all set, etc...

I've asked a lot of people what they know of the Certicom patents and
the answer I keep getting is "I don't know".  And it's just that, all
hype and little substance.

For instance, I implemented prime curves in LTC for the longest while.
My software is used all over. I have yet to hear from Certicom.  Is
that because I'm still to obscure or that they can't really do sh.t
all?

Patenting a PK algorithm is similar to patenting a block cipher.  Other
choices are available and there isn't enough drive.

Now if you had a patent on fast ECC math you'd stand more chance
because at least people would still be within the realm of standards.
If I go out and license NTRU which ISO, IEEE, ANSI or FIPS standards am
I adhering to?

And this has nothing to do with technical merits.  Do I care that NTRU
is faster?  or more secure  or more suitable for my platform?  Not
really.  If I'm to pick any protocols they have to be something that I
can tell my clients that I'm following a spec.

I *am* for new tech though.  Don't think I'm a traveling NIST monkey or
something.  If you recall I emailed NTRU [I think you replied] a long
while back about me adding NTRU to the library.  You said no.  I said
"ok bye bye" and haven't looked back since.  I'm sure others are the
same.

While you will score enough contracts to stay in business you won't
have a lasting meaningful impact since nobody will inherit from your
work.  Say Gizmo 1000 uses NTRU then gets bought up by another company.
Gizmo 2000 has more cpu or wants to be FIPS compatible.  NTRU gone.

Or more like say Gizmo 1000 uses NTRU and Gizma 1500 uses something
else, then they merge... etc, etc, etc.

Point is the patents on NTRU basically make it unattractive for most
educated folk and really limit it's exposure.  Which is a shame since
it's a cool protocol...

/rant

Tom
Jean-Luc Cooke - 20 Jan 2006 18:34 GMT
Doesn't NTRU have (or had) security problems in the past?  Their
$100,000 challanges getting solved in record times and the complexity
big-O formula starts getting closer and closer to N rather than N^2.

I never bothered to research it (or even learn it, lattice
reductions...) since it was patented and I spent my time learning
something that had a chance of "making it".

JLC

In sci.crypt Tom St Denis <tomstdenis@gmail.com> wrote:

> > > Patents may make business sense but all they do is take a possibly
> > > valid technology and make it moot.
> >
> > If the second part is true, then they don't make business sense...

> Business sense != common sense.

> It makes perfect "business sense" for Intel and Apple to partner.  It
> makes no common sense to do so [variety == better chance of
> survivability].

> > ... but there are many factors involved in technology choices.
> > Licensing terms are only one, and there are plenty of examples
[quoted text clipped - 5 lines]
> > think you can argue (as you seem to be trying to do here) that
> > they're inherently self-defeating.

> I don't know what the NSA "licensed".  ECC over prime fields is not
> patented.  Things like MQV are but who gives two sh.ts?  Just use DH
> with EC-DSA and you're all set, etc...

> I've asked a lot of people what they know of the Certicom patents and
> the answer I keep getting is "I don't know".  And it's just that, all
> hype and little substance.

> For instance, I implemented prime curves in LTC for the longest while.
> My software is used all over. I have yet to hear from Certicom.  Is
> that because I'm still to obscure or that they can't really do sh.t
> all?

> Patenting a PK algorithm is similar to patenting a block cipher.  Other
> choices are available and there isn't enough drive.

> Now if you had a patent on fast ECC math you'd stand more chance
> because at least people would still be within the realm of standards.
> If I go out and license NTRU which ISO, IEEE, ANSI or FIPS standards am
> I adhering to?

> And this has nothing to do with technical merits.  Do I care that NTRU
> is faster?  or more secure  or more suitable for my platform?  Not
> really.  If I'm to pick any protocols they have to be something that I
> can tell my clients that I'm following a spec.

> I *am* for new tech though.  Don't think I'm a traveling NIST monkey or
> something.  If you recall I emailed NTRU [I think you replied] a long
> while back about me adding NTRU to the library.  You said no.  I said
> "ok bye bye" and haven't looked back since.  I'm sure others are the
> same.

> While you will score enough contracts to stay in business you won't
> have a lasting meaningful impact since nobody will inherit from your
> work.  Say Gizmo 1000 uses NTRU then gets bought up by another company.
>  Gizmo 2000 has more cpu or wants to be FIPS compatible.  NTRU gone.

> Or more like say Gizmo 1000 uses NTRU and Gizma 1500 uses something
> else, then they merge... etc, etc, etc.

> Point is the patents on NTRU basically make it unattractive for most
> educated folk and really limit it's exposure.  Which is a shame since
> it's a cool protocol...

> /rant

> Tom
Tom St Denis - 20 Jan 2006 19:44 GMT
> Doesn't NTRU have (or had) security problems in the past?  Their
> $100,000 challanges getting solved in record times and the complexity
[quoted text clipped - 3 lines]
> reductions...) since it was patented and I spent my time learning
> something that had a chance of "making it".

Bingo.

Last I heard their signatures were weak and you could do attacks using
messages that can't be decrypted.

However, they had some padding or pre-processing tricks to help
there... or something.

I don't think the math is all that bad I just don't care to investigate
further due to the license issues.  I'm trying to avoid making my
contribution to this thread a smear on the smart folk at NTRU and more
so towards the marketting folk who think EVERYTHING has a price.

Tom
William Whyte - 20 Jan 2006 20:50 GMT
Just to respond briefly on this:

- There were attacks based on decryption failures, but they were
eliminated three years ago by appropriate choice of parameters. Our
fault for optimizing for bandwidth rather than security -- the
no-decryption-failure option was always available, we just didn't take
it. See http://www.ntru.com/cryptolab/articles.htm#2003_2,
http://www.ntru.com/cryptolab/articles.htm#2003_3,
http://www.ntru.com/cryptolab/articles.htm#2005_1,

- NTRUSign signatures aren't zero-knowledge, but our best estimates are
that you need at least 2^30 signatures generated with the same key, and
probably many orders of magnitude more, before you can begin to recover
any useful information about the private key. See
http://grouper.ieee.org/groups/1363/lattPK/submissions.html#2005-08.

> Their $100,000 challanges getting solved in record times

I'm not sure what you're thinking of here; we've never had a challenge
problem cracked. (Maybe you were thinking of the recent RSA
factorization? That was solved faster than the previous problem, so
could be counted as "record", but the time confirmed existing security
estimates for keys of a given length rather than reducing them).

> and the complexity
> big-O formula starts getting closer and closer to N rather than N^2.

This is the running time of the algorithm, not the running time to
break it! N^2 wouldn't be a great security level for any algorithm, but
it's a pretty good running time.

I agree with Tom that this isn't the right thread to get into a
discussion of the merits of NTRU; I just wanted to point out that I
disagree with him on whether or not patenting a technology is always
counterproductive.

(BTW, I don't know if I made it clear in my earlier mails, but I'm
currently the CTO of NTRU, so I have a dog in this fight).

Cheers,

William
Tom St Denis - 20 Jan 2006 21:13 GMT
<snip>

Most of that reply is for JL more than for me :-)  so I'll reply to the
last bit.

> I agree with Tom that this isn't the right thread to get into a
> discussion of the merits of NTRU; I just wanted to point out that I
> disagree with him on whether or not patenting a technology is always
> counterproductive.

I never said it's "always" counterproductive.  I just think this
particular technology doesn't warrant such status.

It's like given the choice of driving to work or ride this patented
space-age two wheel human powered device to work.  Sure the latter is
better for the environment and your health but people have a choice to
take the former.

ECC may be slower, but it *is* part of several standards so while you
bite the bullet on memory and speed you still have something useable
[specially in the presence of 32-bit cores].

So people aren't drawn to NTRU by other means, e.g. because it's way
more secure or because it's part of some lucrative standard worth
supporting.  So why would they license it other than they want to be
different.

You're the Apple of cryptography.

:-)

Rock'On!

Tom
William Whyte - 20 Jan 2006 21:19 GMT
Rock on!</picture of Einstein sticking tongue out>

William
Luc The Perverse - 20 Jan 2006 22:14 GMT
> I'm not sure what you're thinking of here; we've never had a challenge
> problem cracked. (Maybe you were thinking of the recent RSA
> factorization? That was solved faster than the previous problem, so
> could be counted as "record", but the time confirmed existing security
> estimates for keys of a given length rather than reducing them).

You say "we"

Are you in some way affiliated?

--
LTP

:)
William Whyte - 21 Jan 2006 01:34 GMT
Yes, I'm the CTO. I made that clear at the end of the post you
reference, but should have made it clear from the beginning of the
thread. Sorry about that -- I forgot that I was posting from my gmail
account.
Luc The Perverse - 21 Jan 2006 01:44 GMT
> Yes, I'm the CTO. I made that clear at the end of the post you
> reference, but should have made it clear from the beginning of the
> thread. Sorry about that -- I forgot that I was posting from my gmail
> account.

No problem - but as the CTO (a term I had to google define) - you wouldn't
by chance know where I could find some sample Java source to "play around
with" would you?

--
LTP

:)
Roedy Green - 21 Jan 2006 04:44 GMT
On Fri, 20 Jan 2006 18:44:52 -0700, "Luc The Perverse"
<sll_noSpamlicious_z_XXX_m@cc.usu.edu> wrote, quoted or indirectly
quoted someone who said :

>No problem - but as the CTO (a term I had to google define) - you wouldn't
>by chance know where I could find some sample Java source to "play around
>with" would you?

there is a bunch in the Feghi book. See
http://mindprod.com/jgloss/encryption.html
Signature

Canadian Mind Products, Roedy Green.
http://mindprod.com Java custom programming, consulting and coaching.

Tom St Denis - 21 Jan 2006 05:12 GMT
> On Fri, 20 Jan 2006 18:44:52 -0700, "Luc The Perverse"
> <sll_noSpamlicious_z_XXX_m@cc.usu.edu> wrote, quoted or indirectly
[quoted text clipped - 6 lines]
>  there is a bunch in the Feghi book. See
> http://mindprod.com/jgloss/i_is_stupid_spammer.html

I don't see NTRU but I do see ads.  Nice spam.

Tom
Roedy Green - 21 Jan 2006 09:23 GMT
>>  there is a bunch in the Feghi book. See
>> http://mindprod.com/jgloss/i_is_stupid_spammer.html
>
>I don't see NTRU but I do see ads.  Nice spam.

I thought you were asking for coding examples for JCE ciphers.  I
pointed you to them. It may not have been what you asked for, but it
is not spam.  
.
See http://mindprod.com/jgloss/spam.html
Signature

Canadian Mind Products, Roedy Green.
http://mindprod.com Java custom programming, consulting and coaching.

Tom St Denis - 22 Jan 2006 06:20 GMT
> >>  there is a bunch in the Feghi book. See
> >> http://mindprod.com/jgloss/i_is_stupid_spammer.html
[quoted text clipped - 4 lines]
> pointed you to them. It may not have been what you asked for, but it
> is not spam.

He was asking for NTRU in Java not just "any cipher".  If you had
followed the thread you would have realize that wasn't what he was
asking for.

I consider it spam because the page you linked to has been infected
with "I depend on advertisement"-itis and needs to be treated by
someone with a medical degree.

Tom
Roedy Green - 22 Jan 2006 07:59 GMT
>He was asking for NTRU in Java not just "any cipher".  If you had
>followed the thread you would have realize that wasn't what he was
>asking for.

That was not obvious.  He did not start out with that request. It was
just one of the suggestions offered to him.

The subject line does not indicate that restriction either.

But even if I did answer the wrong question I is still not spam. You
are misusing the word.

It is like calling some male you don't like an "old sow".  If you must
insult, at least use correct terminology.
Signature

Canadian Mind Products, Roedy Green.
http://mindprod.com Java custom programming, consulting and coaching.

Paul Rubin - 22 Jan 2006 08:14 GMT
> >He was asking for NTRU in Java not just "any cipher".  If you had
> >followed the thread you would have realize that wasn't what he was
> >asking for.
>
> That was not obvious.  He did not start out with that request. It was
> just one of the suggestions offered to him.

Looks to me like he did:

   Newsgroups: comp.lang.java.programmer,sci.crypt
   Subject: Java Source For Asymmetric Key Ciphers
   Date: Mon, 16 Jan 2006 13:39:38 -0700
   Message-ID: <cuct93x07t.ln2@loki.cmears.id.au>

   Hi - I'm looking for HFE and NTRU java source code.

   I don't want to pay for these libraries, because I'm not going to make a
   product with them, I only want to read through the algorithms and "play"
   with them.  I have trouble understanding the algorithm by reading a pper,
   and have a better chance of understanding if reading code.

   Are they available anywhere for free?
Roedy Green - 22 Jan 2006 08:11 GMT
>I consider it spam because the page you linked to has been infected
>with "I depend on advertisement"-itis and needs to be treated by
>someone with a medical degree.

I have poured about 10 years into preparing that material based
largely on monitoring the real world problems people post in the
comp.lang.java.* newsgroups.  It barely generates enough revenue to
pay the ISP.  For years it did not even do that.  The website  is a
favour to Java community. It can save you a lot of time if you learn
to use it. I can no longer afford to subsidize it purely on my own.

I have HIV and my time on earth is limited.  I want to contribute
something to the planet before I croak.  Posts like yours really make
my day.

Your contribution to Java appears to be one thread. You have. have
some nerve to stand in judgment.

Signature

Canadian Mind Products, Roedy Green.
http://mindprod.com Java custom programming, consulting and coaching.

Chris Uppal - 22 Jan 2006 10:47 GMT
> Your contribution to Java appears to be one thread. You have. have
> some nerve to stand in judgment.

Tom St Denis isn't a Java programmer (at least not in public ;-).  You
may notice that this thread is cross-posted to sci.crypt.

As for "contribution" see:

   http://libtomcrypt.org/

I'm a bit surprised you that seem not to know it already.

   -- chris
Roedy Green - 22 Jan 2006 11:03 GMT
On 22 Jan 2006 10:47:29 GMT, "Chris Uppal"
<chris.uppal@metagnostic.REMOVE-THIS.org> wrote, quoted or indirectly
quoted someone who said :

>    http://libtomcrypt.org/

what a hypocrite! This guy has even more screen real estate devoted to
ads than I do.  There are none on my home page or the Java glossary
page.
Signature

Canadian Mind Products, Roedy Green.
http://mindprod.com Java custom programming, consulting and coaching.

Tom St Denis - 22 Jan 2006 14:02 GMT
> On 22 Jan 2006 10:47:29 GMT, "Chris Uppal"
> <chris.uppal@metagnostic.REMOVE-THIS.org> wrote, quoted or indirectly
[quoted text clipped - 5 lines]
> ads than I do.  There are none on my home page or the Java glossary
> page.

What ads do I have on my page?  You mean the two static logos one from
my employer who paid for a lot of LTC development and the other from
the guy who actually hosts the website [and he's not a company, I just
link to his personal website].

You'll note I don't have goooooooogle ads sprawled on every page and
it's quite easy from the top of the page to navigate to the
downloads...

pissing contests aside ... Your page you gave us a link for amounts to
one of those "search search" pages you can find in google that are
nothing than "top 10" links with dozen of ads and annoying cookie and
other bugs.  I'm sure "Java JCE" would turn up useful hits, let's
check...

http://www.google.ca/search?hl=en&q=Java+JCE&btnG=Google+Search&meta=

yup.

Tom
Roedy Green - 23 Jan 2006 01:36 GMT
>You'll note I don't have goooooooogle ads sprawled on every page and
>it's quite easy from the top of the page to navigate to the
>downloads...

Yes, yours ARE ads and further irrelevant ads, and further big image
ads.

At least the google ads on my site are usually relevant to the topic
at hand. They are actually often USEFUL. They are just a little text
pushed off in the top left and bottom right so you can more easily
ignore them.

Yours are irrelevant to your users plopped right in the middle of your
home page.  I don't have ads on the home or index pages other than a
comment about the source of the site master image.

Running a website like mine takes huge amounts  of work that nobody
sees, like several hours a day doing the very boring work of
researching and replacing dead links, validating HTML, cross-indexing
etc.

The website now just barely pays its ISP bills.  I don't get any money
for the labour I put into creating the content.  It infuriates me when
you equate me with some spammer. My website is a gift to the Java
community.  

Further your malicious, deliberate and unapologetic butchering of the
English language infuriates me.  You may not like me or my website,
and you may think me an incompetent idiot for answering the wrong
question who is motivated purely by money, or perhaps your vitriol is
inspired by my politics, or you may consider my website worthless, but
that still has nothing to do with spam.

Spammer does not equate to "bad person", or "person whose post I found
useless".

Signature

Canadian Mind Products, Roedy Green.
http://mindprod.com Java custom programming, consulting and coaching.

Tom St Denis - 23 Jan 2006 03:44 GMT
> >You'll note I don't have goooooooogle ads sprawled on every page and
> >it's quite easy from the top of the page to navigate to the
> >downloads...
>
> Yes, yours ARE ads and further irrelevant ads, and further big image
> ads.

First off, once again I'm getting flamed and I didn't even post my url.
Luc did [and note Luc I don't blame you for the result, don't worry].

> At least the google ads on my site are usually relevant to the topic
> at hand. They are actually often USEFUL. They are just a little text
> pushed off in the top left and bottom right so you can more easily
> ignore them.

Still annoying and serve your purpose more than mine.

I don't make money off my static logos.  Sure it may help SSC and Dan
out but they don't pay me to have the logos there.  I do it because
they help me out.  Note for a long while I didn't have any logos there.

> Yours are irrelevant to your users plopped right in the middle of your
> home page.  I don't have ads on the home or index pages other than a
> comment about the source of the site master image.

Um middle of the page?  All the change/features/download links are at
the top of every page before any other content.  Below the "ads" are my
news items.  So if you go there only to read the news [which few people
do] then yeah sorry there are "ads" there.  But most just want the damn
download page.

> Running a website like mine takes huge amounts  of work that nobody
> sees, like several hours a day doing the very boring work of
> researching and replacing dead links, validating HTML, cross-indexing
> etc.

You sir can be replaced by a carefully written shell script.

> The website now just barely pays its ISP bills.  I don't get any money
> for the labour I put into creating the content.  It infuriates me when
> you equate me with some spammer. My website is a gift to the Java
> community.

Probably, I dunno.  All I know is the link you offered had nothing to
do with the OP question and had advertisements on it.

> Further your malicious, deliberate and unapologetic butchering of the
> English language infuriates me.  You may not like me or my website,
> and you may think me an incompetent idiot for answering the wrong
> question who is motivated purely by money, or perhaps your vitriol is
> inspired by my politics, or you may consider my website worthless, but
> that still has nothing to do with spam.

Maybe.  Eitherway I suggest since your site *is* commercial that you
think carefully about linking to it.  

Tom
Luc The Perverse - 23 Jan 2006 04:30 GMT
>> >You'll note I don't have goooooooogle ads sprawled on every page and
>> >it's quite easy from the top of the page to navigate to the
[quoted text clipped - 5 lines]
> First off, once again I'm getting flamed and I didn't even post my url.
> Luc did [and note Luc I don't blame you for the result, don't worry].

Well that is reassuring.

But if you are interested in my opinion - I will say that Roedy is a good
guy and does a lot for comp.lang.java.programmer  - it is another group that
I actively patrol.

Maybe you initially mistook his post for a spam message - because it was not
an answer to the original question - which is understandable.  However - the
fact is that the vast majority of Roedy's posts are helpful - and I
personally welcome links to his site.

You more than anyone should know how frustrating it can be getting flamed
for trying to help someone.

Can't we all just get along?

--
LTP

:)
Juuso Hukkanen - 23 Jan 2006 18:48 GMT
>> Running a website like mine takes huge amounts  of work that nobody
>> sees, like several hours a day doing the very boring work of
>> researching and replacing dead links, validating HTML, cross-indexing
>> etc.
>
>You sir can be replaced by a carefully written shell script.

Tom, you are brainfarting[1].
http://groups.google.fi/groups?enc_author=rO4l2C8AAADMuul5QeR2UJqecwMLSe5B3cESkj
61SW03hNjtg4qiWgu0ccM7HvtkWBcvG3RWw9M&scoring=d


Picture a java-guy coming to sci.crypt shouting David Wagner to be a
troll.

Those who have eaten enough rice might say:
- Select your adversaries with care.
- Choose your fights carefully
- Don't get into a fight unless it is worth it

Be a gentleman and apologize

Juuso

[1]
http://www.urbandictionary.com/define.php?term=Brainfart&defid=548672#548672
Tom St Denis - 23 Jan 2006 19:13 GMT
> Tom, you are brainfarting[1].
> http://groups.google.fi/groups?enc_author=rO4l2C8AAADMuul5QeR2UJqecwMLSe5B3cESkj
61SW03hNjtg4qiWgu0ccM7HvtkWBcvG3RWw9M&scoring=d

Gah?  I post a lot too.  Does that make me smart or otherwise
insightful?  I'd hope not.

> Picture a java-guy coming to sci.crypt shouting David Wagner to be a
> troll.

I didn't start the cross-post flame war, it was always burning ...
[damn 80s!]

> Those who have eaten enough rice might say:
> - Select your adversaries with care.
> - Choose your fights carefully
> - Don't get into a fight unless it is worth it
>
> Be a gentleman and apologize

I say sir, I say sir, I do believe I shan't apologize.

What say you, duel at 10 paces on morrow's eve?

Tom
Juuso Hukkanen - 23 Jan 2006 19:46 GMT
>> Be a gentleman and apologize
>
[quoted text clipped - 3 lines]
>
>Tom

No can do, I just read an another Sun Tzu chapter and find it better
to arrange the duel between those seek a fight.

What say you about a duel Tom Vs. "merits of NTRU" on #sci.crypt at
some planetary time tomorrow.

Namely, I sense William Whyte also to be interested / High lighting /
Advertizing / and discussing the topic. Noticed him saying earlier in
this thread:

>I agree with Tom that this isn't the right thread to get into a
>discussion of the merits of NTRU; I just wanted to point out that I
>disagree with him on whether or not patenting a technology is always
>counterproductive.

In addition NTRU has been advertized on this channel earlier (2000),
in a way which can be seen as "spam"! (But that is understandable
since it was the wild year 2000).
http://groups.google.fi/group/sci.crypt/browse_frm/thread/0d525c00a7d02feb/f5afe
b38f3cfa6f4#f5afeb38f3cfa6f4


So, has something changed, what are the prospects and threads for NTRU
technology (QC - prospects?). Any What are the benefits. What other
vulnerable concerns there are . Who and why should implement NTRU. I
am certain that that many would have interest for that 'duel'. Of
cause the warning notice should be placed, cause the products can be
roughly and even unfairly treated at this channel.

Shall I set the duel ready ? (cheap tickets & popcorns available)

Juuso

ps. did you get my private messages?
Fat Nerd - 23 Jan 2006 20:00 GMT
>>>Running a website like mine takes huge amounts  of work that nobody
>>>sees, like several hours a day doing the very boring work of
[quoted text clipped - 20 lines]
> [1]
> http://www.urbandictionary.com/define.php?term=Brainfart&defid=548672#548672

You want Tom to be a gentleman and apologise?  Impossible.  He is
mentally incapable of such a feat.  He has stated this repeatedly.

He has admitted often that this is part of the reason why he is
overweight, and finds it difficult to make it with the ladies.
Juuso Hukkanen - 23 Jan 2006 20:25 GMT
>> Be a gentleman and apologize
>
>You want Tom to be a gentleman and apologise?  Impossible.  He is
>mentally incapable of such a feat.

You sir, seem like a cheap liar. Tom is well capable for apologizing
Google "I apologize"
http://groups.google.fi/groups?hl=fi&q=%22apologize%22&qt_s=Haku&enc_author=m2VR
9xQAAAD_wLBs_5-bxpZLsupvpyYMOPANdqfI6prRsqjc7uCt1A


In addition if you google him saying sorry:
http://groups.google.fi/groups?hl=fi&q=%22sorry%22&qt_s=Haku&enc_author=m2VR9xQA
AAD_wLBs_5-bxpZLsupvpyYMOPANdqfI6prRsqjc7uCt1A


49 sorry results! (which is about 49 times more than you have ever
posted - isn't it). Are you by any chance one of those numerous
anonymous lurkers who have been following #sci.crypt for a long time
and feel angered by Toms and Joe posting critical comments.

Juuso
Chris Uppal - 23 Jan 2006 21:13 GMT
> First off, once again I'm getting flamed and I didn't even post my url.
>  Luc did [and note Luc I don't blame you for the result, don't worry].

For the sake of completeness I should point out that it was I who posted the
URL.

I wish I hadn't now.  In fact I wish I had never become even peripherally
involved in what appears to be yet another Usenet cesspit.

   -- chris
Juuso Hukkanen - 23 Jan 2006 21:39 GMT
>> First off, once again I'm getting flamed and I didn't even post my url.
>>  Luc did [and note Luc I don't blame you for the result, don't worry].
[quoted text clipped - 6 lines]
>
>    -- chris

Cesspit, (thanks for that word). No... no way If you refer to my
proposal of a discussion duel about Tom Vs. "merits of the NTRU", the
idea is not to degrade or glorify a product - just to discuss.  NTRU
has vountarely attempted to gain publicity using #sci.crypt and Dr.
Whyte is a worthy representer of their technology. However since NTRU
is a commercial product they can't use newsgroups for advertizing a
product in a way businesses often would like. On the other hand
regulars have expressed interest and opinions about NTRU... Solution
is to invite a discussion. Ok, #sci.crypt is the second most hostile
place on earth, so it is bit risky. Also, if NTRU dares to accept the
invitation, I will bonus-post a "patent spoiler", which the company
might find highly amusing.

Juuso Hukkanen
(to reply by e-mail set addresses month and year to correct)

ps. No, the "patent spoiler" is not about the NTRU ;-)
Luc The Perverse - 22 Jan 2006 22:01 GMT
>> Your contribution to Java appears to be one thread. You have. have
>> some nerve to stand in judgment.
[quoted text clipped - 7 lines]
>
> I'm a bit surprised you that seem not to know it already.

I didn't mean to be starting something.  This was actually quite unexpected.

Signature

LTP

:)
stan - 23 Jan 2006 00:16 GMT
>>I consider it spam because the page you linked to has been infected
>>with "I depend on advertisement"-itis and needs to be treated by
[quoted text clipped - 13 lines]
>Your contribution to Java appears to be one thread. You have. have
>some nerve to stand in judgment.

Take it easy, Roedy.

It is well-known in sci.crypt that Tom is a bully and that his very
first knee-jerk reaction is always to attack *anyone* offering to help
folks in sci.crypt with programming code of any kind.

So, even though a lot of people are not telling him publicly to shut
up, they are likely thinking it.

Your offer appears to be generous, and I think most will appreciate it
for what it is.

OT, but regarding your condition:
It is my belief the good things you do in this world will serve you
well in your next experience, and bring you closer to the destination
we all will eventually get to.  Some of us will make it quickly, and
some of us have a really long journey due to a basic refusal to
embrace certain truths.  I'll leave it at that.

Anyway, try and rest easy that a lot of folks appreciate your efforts.
Tom St Denis - 23 Jan 2006 02:46 GMT
> It is well-known in sci.crypt that Tom is a bully and that his very
> first knee-jerk reaction is always to attack *anyone* offering to help
> folks in sci.crypt with programming code of any kind.

Spamervisement websites are not "help".  If you can't afford to run a
static html page without google ads ... you need to get a better job.

> So, even though a lot of people are not telling him publicly to shut
> up, they are likely thinking it.

Funny Stan, how many of the recent posts have you answered with your
insightful and deeply knowledgeable information base?

Just wondering because there have been dozens of threads since you last
posted and you only seem to chime in when you want to bad mouth others.

Can you say Brat?  I know you can.

BTW How's the eight grade anyways?  I remember when I was in it.  Tough
times man!  Good luck!

Tom
stan - 23 Jan 2006 08:07 GMT
>> It is well-known in sci.crypt that Tom is a bully and that his very
>> first knee-jerk reaction is always to attack *anyone* offering to help
>> folks in sci.crypt with programming code of any kind.
>
>Spamervisement websites are not "help".  If you can't afford to run a
>static html page without google ads ... you need to get a better job.

You're an idiot and a bully and there is nothing wrong with Roedy's
site http://mindprod.com/jgloss/jgloss.html

He offers a lot of helpful things pertaining to Java and a lot of
other things that are related.

There is actually more ad space on your ugly site than his, which is
not particularly surprising you lard-assed hypocrite.

Even if there wasn't, he has a couple of tiny non-obtrusive ads that
are completely tolerable.  When you take into consideration all of the
good stuff inside his site, it is quite an accomplishment, really.

You yelling at Roedy Green about his site is like a turd yelling at a
beautiful sunset.
William Whyte - 21 Jan 2006 12:45 GMT
I'm afraid I don't. But, seriously, the core algorithm is way easier to
implement from scratch than RSA or ECC -- check out the tutorials on
our website. http://www.ntru.com/cryptolab/tutorials.htm.
William Whyte - 23 Jan 2006 19:01 GMT
I feel like I should apologise for the on-topic post...
Tom St Denis - 23 Jan 2006 19:10 GMT
> I feel like I should apologise for the on-topic post...

This is sci.crypt at it's best.  Feuding and fighting because everyone
is so sensitive that their "feelings" might be hurt.  Gotta tip-toe
around and watch out for their "feelings" wouldn't want to hurt their
"feelings".  Gotta make sure their "feelings" are ok.

:-)

Ohhhhhh yeah!

Tom


Free Magazines

Get these publications absolutely FREE for up to 12 months. There are no hidden fees and no obligation. Simply choose a title, complete the application form and submit it. Read more ...

Oracle MagazineNetwork ComputingComputer WorldBio-IT WorldeWeekInformation WeekInfosecurity
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2009 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.