Cypherpunk

A cypherpunk is one who advocates the widespread use of strong cryptography and privacy-enhancing technologies as a means of effecting social and political change. The cypherpunk movement originated with the establishment of an electronic mailing list, through which informal groups sought to achieve privacy and security through proactive use of cryptography. The cypherpunk movement has been active since about 1990 at the latest.^[1]^[2]

History

Before the mailing list

Until about the 1970s, cryptography was mainly practiced in secret by military or spy agencies. However, that changed when two publications brought it into public awareness: the first publicly available work on public-key cryptography, by Whitfield Diffie and Martin Hellman,^[3] and the US government publication of the Data Encryption Standard (DES), a block cipher which became very widely used.

The technical roots of Cypherpunk ideas have been traced back to work by cryptographer David Chaum on topics such as anonymous digital cash and pseudonymous reputation systems, described in his paper "Security without Identification: Transaction Systems to Make Big Brother Obsolete" (1985).^[4]

In the late 1980s, these ideas coalesced into something like a movement.^[4]

Etymology and the Cypherpunks mailing list

In late 1992, Eric Hughes, Timothy C. May, and John Gilmore founded a small group that met monthly at Gilmore's company Cygnus Solutions in the San Francisco Bay Area and was humorously termed cypherpunks by Jude Milhon at one of the first meetings—derived from cipher and cyberpunk.^[5] In November 2006, the word was added to the Oxford English Dictionary.^[6]

The Cypherpunks mailing list was started in 1992, and by 1994 had 700 subscribers.^[5] At its peak, it was a very active forum with technical discussions ranging over mathematics, cryptography, computer science, political and philosophical discussion, personal arguments and attacks, etc., with some spam thrown in. An email from John Gilmore reports an average of 30 messages a day from December 1, 1996, to March 1, 1999, and suggests that the number was probably higher earlier.^[7] The number of subscribers is estimated to have reached 2,000 in the year 1997.^[5]

In early 1997, Jim Choate and Igor Chudov set up the Cypherpunks Distributed Remailer,^[8] a network of independent mailing list nodes intended to eliminate the single point of failure inherent in a centralized list architecture. At its peak, the Cypherpunks Distributed Remailer included at least seven nodes.^[9] By mid-2005, al-qaeda.net ran the only remaining node.^[10] In mid-2013, following a brief outage, the al-qaeda.net node's list software was changed from Majordomo to GNU Mailman,^[11] and subsequently the node was renamed to cpunks.org.^[12] The CDR architecture is now defunct, though the list administrator stated in 2013 that he was exploring a way to integrate this functionality with the new mailing list software.^[11]

For a time, the cypherpunks mailing list was a popular tool with mailbombers,^[13] who would subscribe a victim to the mailing list in order to cause a deluge of messages to be sent to him or her. (This was usually done as a prank, in contrast to the style of terrorist referred to as a mailbomber.) This precipitated the mailing list sysop(s) to institute a reply-to-subscribe system. Approximately two hundred messages a day was typical for the mailing list, divided between personal arguments and attacks, political discussion, technical discussion, and early spam.^[14]^[15]

The cypherpunks mailing list had extensive discussions of the public policy issues related to cryptography and on the politics and philosophy of concepts such as anonymity, pseudonyms, reputation, and privacy. These discussions continue both on the remaining node and elsewhere as the list has become increasingly moribund.^{[citation needed]}

Events such as the GURPS Cyberpunk raid^[16] lent weight to the idea that private individuals needed to take steps to protect their privacy. In its heyday, the list discussed public policy issues related to cryptography, as well as more practical nuts-and-bolts mathematical, computational, technological, and cryptographic matters. The list had a range of viewpoints and there was probably no completely unanimous agreement on anything. The general attitude, though, definitely put personal privacy and personal liberty above all other considerations.^[17]

Early discussion of online privacy

The list was discussing questions about privacy, government monitoring, corporate control of information, and related issues in the early 1990s that did not become major topics for broader discussion until at least ten years later. Some list participants were highly radical on these issues.^{[citation needed]}

Those wishing to understand the context of the list might refer to the history of cryptography; in the early 1990s, the US government considered cryptography software a munition for export purposes. (PGP source code was published as a paper book to bypass these regulations and demonstrate their futility.) In 1992, a deal between NSA and SPA allowed export of cryptography based on 40-bit RC2 and RC4 which was considered relatively weak (and especially after SSL was created, there were many contests to break it). The US government had also tried to subvert cryptography through schemes such as Skipjack and key escrow. It was also not widely known that all communications were logged by government agencies (which would later be revealed during the NSA and AT&T scandals) though this was taken as an obvious axiom by list members^{[citation needed]}.^[18]

The original cypherpunk mailing list, and the first list spin-off, coderpunks, were originally hosted on John Gilmore's toad.com, but after a falling out with the sysop over moderation, the list was migrated to several cross-linked mail-servers in what was called the "distributed mailing list."^[19]^[20] The coderpunks list, open by invitation only, existed for a time. Coderpunks took up more technical matters and had less discussion of public policy implications. There are several lists today that can trace their lineage directly to the original Cypherpunks list: the cryptography list (cryptography@metzdowd.com), the financial cryptography list (fc-announce@ifca.ai), and a small group of closed (invitation-only) lists as well.^{[citation needed]}

Toad.com continued to run with the existing subscriber list, those that didn't unsubscribe, and was mirrored on the new distributed mailing list, but messages from the distributed list didn't appear on toad.com.^[21] As the list faded in popularity, so too did it fade in the number of cross-linked subscription nodes.^{[citation needed]}

To some extent, the cryptography list^[22] acts as a successor to cypherpunks; it has many of the people and continues some of the same discussions. However, it is a moderated list, considerably less zany and somewhat more technical. A number of current systems in use trace to the mailing list, including Pretty Good Privacy, /dev/random in the Linux kernel (the actual code has been completely reimplemented several times since then) and today's anonymous remailers.^{[citation needed]}

Main principles

The basic ideas can be found in A Cypherpunk's Manifesto (Eric Hughes, 1993): "Privacy is necessary for an open society in the electronic age. ... We cannot expect governments, corporations, or other large, faceless organizations to grant us privacy ... We must defend our own privacy if we expect to have any. ... Cypherpunks write code. We know that someone has to write software to defend privacy, and ... we're going to write it."^[23]

Some are or were senior people at major hi-tech companies and others are well-known researchers (see list with affiliations below).

The first mass media discussion of cypherpunks was in a 1993 Wired article by Steven Levy titled Crypto Rebels:

The people in this room hope for a world where an individual's informational footprints—everything from an opinion on abortion to the medical record of an actual abortion—can be traced only if the individual involved chooses to reveal them; a world where coherent messages shoot around the globe by network and microwave, but intruders and feds trying to pluck them out of the vapor find only gibberish; a world where the tools of prying are transformed into the instruments of privacy. There is only one way this vision will materialize, and that is by widespread use of cryptography. Is this technologically possible? Definitely. The obstacles are political—some of the most powerful forces in government are devoted to the control of these tools. In short, there is a war going on between those who would liberate crypto and those who would suppress it. The seemingly innocuous bunch strewn around this conference room represents the vanguard of the pro-crypto forces. Though the battleground seems remote, the stakes are not: The outcome of this struggle may determine the amount of freedom our society will grant us in the 21st century. To the Cypherpunks, freedom is an issue worth some risk.^[24]

The three masked men on the cover of that edition of Wired were prominent cypherpunks Tim May, Eric Hughes and John Gilmore.

Later, Levy wrote a book, Crypto: How the Code Rebels Beat the Government – Saving Privacy in the Digital Age,^[25] covering the crypto wars of the 1990s in detail. "Code Rebels" in the title is almost synonymous with cypherpunks.

The term cypherpunk is mildly ambiguous. In most contexts it means anyone advocating cryptography as a tool for social change, social impact and expression. However, it can also be used to mean a participant in the Cypherpunks electronic mailing list described below. The two meanings obviously overlap, but they are by no means synonymous.

Documents exemplifying cypherpunk ideas include Timothy C. May's The Crypto Anarchist Manifesto (1992)^[26] and The Cyphernomicon (1994),^[27] A Cypherpunk's Manifesto.^[23]

Privacy of communications

A very basic cypherpunk issue is privacy in communications and data retention. John Gilmore said he wanted "a guarantee -- with physics and mathematics, not with laws -- that we can give ourselves real privacy of personal communications."^[28]

Such guarantees require strong cryptography, so cypherpunks are fundamentally opposed to government policies attempting to control the usage or export of cryptography, which remained an issue throughout the late 1990s. The Cypherpunk Manifesto stated "Cypherpunks deplore regulations on cryptography, for encryption is fundamentally a private act."^[23]

This was a central issue for many cypherpunks. Most were passionately opposed to various government attempts to limit cryptography—export laws, promotion of limited key length ciphers, and especially escrowed encryption.

Anonymity and pseudonyms

The questions of anonymity, pseudonymity and reputation were also extensively discussed.

Arguably, the possibility of anonymous speech, and publication is vital for an open society and genuine freedom of speech—this is the position of most cypherpunks.^[29]

Censorship and monitoring

In general, cypherpunks opposed the censorship and monitoring from government and police.

In particular, the US government's Clipper chip scheme for escrowed encryption of telephone conversations (encryption supposedly secure against most attackers, but breakable by government) was seen as anathema by many on the list. This was an issue that provoked strong opposition and brought many new recruits to the cypherpunk ranks. List participant Matt Blaze found a serious flaw^[30] in the scheme, helping to hasten its demise.

Steven Schear first suggested the warrant canary in 2002 to thwart the secrecy provisions of court orders and national security letters.^[31] As of 2013^[update], warrant canaries are gaining commercial acceptance.^[32]

Hiding the act of hiding

An important set of discussions concerns the use of cryptography in the presence of oppressive authorities. As a result, Cypherpunks have discussed and improved steganographic methods that hide the use of crypto itself, or that allow interrogators to believe that they have forcibly extracted hidden information from a subject. For instance, Rubberhose was a tool that partitioned and intermixed secret data on a drive with fake secret data, each of which accessed via a different password. Interrogators, having extracted a password, are led to believe that they have indeed unlocked the desired secrets, whereas in reality the actual data is still hidden. In other words, even its presence is hidden. Likewise, cypherpunks have also discussed under what conditions encryption may be used without being noticed by network monitoring systems installed by oppressive regimes.

Activities

As the Manifesto says, "Cypherpunks write code";^[23] the notion that good ideas need to be implemented, not just discussed, is very much part of the culture of the mailing list. John Gilmore, whose site hosted the original cypherpunks mailing list, wrote: "We are literally in a race between our ability to build and deploy technology, and their ability to build and deploy laws and treaties. Neither side is likely to back down or wise up until it has definitively lost the race."^[33]

Software projects

Anonymous remailers such as the Mixmaster Remailer were almost entirely a cypherpunk development.^[34] Other cypherpunk-related projects include PGP for email privacy,^[35] FreeS/WAN for opportunistic encryption of the whole net, Off-the-record messaging for privacy in Internet chat, and the Tor project for anonymous web surfing.

Hardware

In 1998, the Electronic Frontier Foundation, with assistance from the mailing list, built a $200,000 machine that could brute-force a Data Encryption Standard key in a few days.^[36] The project demonstrated that DES was, without question, insecure and obsolete, in sharp contrast to the US government's recommendation of the algorithm.

Expert panels

Cypherpunks also participated, along with other experts, in several reports on cryptographic matters.

One such paper was "Minimal Key Lengths for Symmetric Ciphers to Provide Adequate Commercial Security".^[37] It suggested 75 bits was the minimum key size to allow an existing cipher to be considered secure and kept in service. At the time, the Data Encryption Standard with 56-bit keys was still a US government standard, mandatory for some applications.

Other papers were critical analysis of government schemes. "The Risks of Key Recovery, Key Escrow, and Trusted Third-Party Encryption",^[38] evaluated escrowed encryption proposals. Comments on the Carnivore System Technical Review.^[39] looked at an FBI scheme for monitoring email.

Cypherpunks provided significant input to the 1996 National Research Council report on encryption policy, Cryptography's Role In Securing the Information Society (CRISIS).^[40] This report, commissioned by the U.S. Congress in 1993, was developed via extensive hearings across the nation from all interested stakeholders, by a committee of talented people. It recommended a gradual relaxation of the existing U.S. government restrictions on encryption. Like many such study reports, its conclusions were largely ignored by policy-makers. Later events such as the final rulings in the cypherpunks lawsuits forced a more complete relaxation of the unconstitutional controls on encryption software.

Lawsuits

Cypherpunks have filed a number of lawsuits, mostly suits against the US government alleging that some government action is unconstitutional.

Phil Karn sued the State Department in 1994 over cryptography export controls^[41] after they ruled that, while the book Applied Cryptography^[42] could legally be exported, a floppy disk containing a verbatim copy of code printed in the book was legally a munition and required an export permit, which they refused to grant. Karn also appeared before both House and Senate committees looking at cryptography issues.

Daniel J. Bernstein, supported by the EFF, also sued over the export restrictions, arguing that preventing publication of cryptographic source code is an unconstitutional restriction on freedom of speech. He won, effectively overturning the export law. See Bernstein v. United States for details.

Peter Junger also sued on similar grounds, and won.^{[citation needed]}^[43]

Civil disobedience

Cypherpunks encouraged civil disobedience, in particular, US law on the export of cryptography.^{[citation needed]} Until 1997, cryptographic code was legally a munition and fell under ITAR, and the key length restrictions in the EAR was not removed until 2000.^[44]

In 1995 Adam Back wrote a version of the RSA algorithm for public-key cryptography in three lines of Perl^[45]^[46] and suggested people use it as an email signature file:

# !/bin/perl -sp0777i<X+d*lMLa^*lN%0]dsXx++lMlN/dsM0<j]dsj
$/=unpack('H*',$_);$_=`echo 16dio\U$k"SK$/SM$n\EsN0p[lN*1
lK[d2%Sa2/d0$^Ixp"|dc`;s/\W//g;$_=pack('H*',/((..)*)$/)

Vince Cate put up a web page that invited anyone to become an international arms trafficker; every time someone clicked on the form, an export-restricted item—originally PGP, later a copy of Back's program—would be mailed from a US server to one in Anguilla.^[47]^[48]^[49]

Cypherpunk fiction

In Neal Stephenson's novel Cryptonomicon many characters are on the "Secret Admirers" mailing list. This is fairly obviously based on the cypherpunks list, and several well-known cypherpunks are mentioned in the acknowledgements. Much of the plot revolves around cypherpunk ideas; the leading characters are building a data haven which will allow anonymous financial transactions, and the book is full of cryptography. But, according to the author^[50] the book's title is—in spite of its similarity—not based on the Cyphernomicon,^[27] an online cypherpunk FAQ document.

Legacy

Cypherpunk achievements would later also be used on the Canadian e-wallet, the MintChip, and the creation of bitcoin. It was an inspiration for CryptoParty decades later to such an extent that A Cypherpunk's Manifesto is quoted at the header of its Wiki,^[51] and Eric Hughes delivered the keynote address at the Amsterdam CryptoParty on 27 August 2012.

Notable cypherpunks

Cypherpunks list participants included many notable computer industry figures. Most were list regulars, although not all would call themselves "cypherpunks".^[52] The following is a list of noteworthy cypherpunks and their achievements:

Marc Andreessen: co-founder of Netscape which invented SSL
Jacob Appelbaum: Former Tor Project employee, political advocate
Julian Assange: WikiLeaks founder, deniable cryptography inventor, journalist; co-author of Underground; author of Cypherpunks: Freedom and the Future of the Internet; member of the International Subversives. Assange has stated that he joined the list in late 1993 or early 1994.^[5] An archive of his cypherpunks mailing list posts^[53] is at the Mailing List Archives.
Derek Atkins: computer scientist, computer security expert, and one of the people who factored RSA-129
Adam Back: inventor of Hashcash and of NNTP-based Eternity networks; co-founder of Blockstream
Jim Bell: author of "Assassination Politics"
Steven Bellovin: Bell Labs researcher; later Columbia professor; Chief Technologist for the US Federal Trade Commission in 2012
Matt Blaze: Bell Labs researcher; later professor at University of Pennsylvania; found flaws in the Clipper Chip^[54]
Eric Blossom: designer of the Starium cryptographically secured mobile phone; founder of the GNU Radio project
Jon Callas: technical lead on OpenPGP specification; co-founder and Chief Technical Officer of PGP Corporation; co-founder with Philip Zimmermann of Silent Circle
Bram Cohen: creator of BitTorrent
Matt Curtin: founder of Interhack Corporation; first faculty advisor of the Ohio State University Open Source Club;^[55] lecturer at Ohio State University
Hugh Daniel (deceased): former Sun Microsystems employee; manager of the FreeS/WAN project (an early and important freeware IPsec implementation)
Suelette Dreyfus: deniable cryptography co-inventor, journalist, co-author of Underground
Hal Finney (deceased): cryptographer; main author of PGP 2.0 and the core crypto libraries of later versions of PGP; designer of RPOW
Eva Galperin: malware researcher and security advocate; Electronic Frontier Foundation activist^[56]
John Gilmore*: Sun Microsystems' fifth employee; co-founder of the Cypherpunks and the Electronic Frontier Foundation; project leader for FreeS/WAN
Mike Godwin: Electronic Frontier Foundation lawyer; electronic rights advocate
Ian Goldberg*: professor at University of Waterloo; co-designer of the off-the-record messaging protocol
Rop Gonggrijp: founder of XS4ALL; co-creator of the Cryptophone
Matthew D. Green, influential in the development of the Zcash system^[57]
Sean Hastings: founding CEO of Havenco; co-author of the book God Wants You Dead^[58]
Johan Helsingius: creator and operator of Penet remailer
Nadia Heninger: assistant professor at University of Pennsylvania; security researcher^[59]
Robert Hettinga: founder of the International Conference on Financial Cryptography; originator of the idea of Financial cryptography as an applied subset of cryptography^[60]
Mark Horowitz: author of the first PGP key server
Tim Hudson: co-author of SSLeay, the precursor to OpenSSL
Eric Hughes: founding member of Cypherpunks; author of A Cypherpunk's Manifesto
Peter Junger (deceased): law professor at Case Western Reserve University
Paul Kocher: president of Cryptography Research, Inc.; co-author of the SSL 3.0 protocol
Ryan Lackey: co-founder of HavenCo, the world's first data haven
Brian LaMacchia: designer of XKMS; research head at Microsoft Research
Ben Laurie: founder of The Bunker, core OpenSSL team member, Google engineer.
Jameson Lopp: software engineer, CTO of Casa
Morgan Marquis-Boire: researcher, security engineer, and privacy activist
Matt Thomlinson (phantom): security engineer, leader of Microsoft's security efforts on Windows, Azure and Trustworthy Computing, CISO at Electronic Arts
Timothy C. May (deceased): former Assistant Chief Scientist at Intel; author of A Crypto Anarchist Manifesto and the Cyphernomicon; a founding member of the Cypherpunks mailing list
Jude Milhon (deceased; aka "St. Jude"): a founding member of the Cypherpunks mailing list, credited with naming the group; co-creator of Mondo 2000 magazine
Satoshi Nakamoto: Pseudonym for the inventor(s) of Bitcoin.
Sameer Parekh: former CEO of C2Net and co-founder of the CryptoRights Foundation human rights non-profit
Vipul Ved Prakash: co-founder of Sense/Net; author of Vipul's Razor; founder of Cloudmark
Runa Sandvik: Tor developer, political advocate
Len Sassaman (deceased): maintainer of the Mixmaster Remailer software; researcher at Katholieke Universiteit Leuven; biopunk
Steven Schear: creator of the warrant canary; street performer protocol; founding member of the International Financial Cryptographer's Association^[61] and GNURadio; team member at Counterpane; former Director at data security company Cylink and MojoNation
Bruce Schneier*: well-known security author; founder of Counterpane
Richard Stallman: founder of Free Software Foundation, privacy advocate
Nick Szabo: inventor of smart contracts; designer of bit gold, a precursor to Bitcoin
Wei Dai: Created b-money; cryptocurrency system and co-proposed the VMAC message authentication algorithm. The smallest subunit of Ether, the wei, is named after him.
Zooko Wilcox-O'Hearn: DigiCash and MojoNation developer; founder of Zcash; co-designer of Tahoe-LAFS
Jillian C. York: Director of International Freedom of Expression at the Electronic Frontier Foundation (EFF)^[62]
John Young: anti-secrecy activist and co-founder of Cryptome
Philip Zimmermann: original creator of PGP v1.0 (1991); co-founder of PGP Inc. (1996); co-founder with Jon Callas of Silent Circle

* indicates someone mentioned in the acknowledgements of Stephenson's Cryptonomicon.

References

This article incorporates material from the Citizendium article "Cypherpunk", which is licensed under the Creative Commons Attribution-ShareAlike 3.0 Unported License but not under the GFDL.

^ Jarvis, Craig (2022). "Cypherpunk ideology: objectives, profiles, and influences (1992–1998)". Internet Histories. 6 (3): 315–342. doi:10.1080/24701475.2021.1935547.
^ Beltramini, Enrico (2021). "Against technocratic authoritarianism. A short intellectual history of the cypherpunk movement". Internet Histories. 5 (2): 101–118. doi:10.1080/24701475.2020.1731249.
^ "A Patent Falls, and the Internet Dances". archive.nytimes.com. Archived from the original on 2021-03-12. Retrieved 2020-02-04.
^ ^a ^b Arvind Narayanan: What Happened to the Crypto Dream?, Part 1 Archived 2019-10-29 at the Wayback Machine. IEEE Security & Privacy. Volume 11, Issue 2, March–April 2013, pages 75-76, ISSN 1540-7993
^ ^a ^b ^c ^d Robert Manne: The Cypherpunk Revolutionary - Julian Assange Archived 2021-03-29 at the Wayback Machine. The Monthly March, 2011, No. 65
^ "ResourceBlog Article: Oxford English Dictionary Updates Some Entries & Adds New Words; Bada-Bing, Cypherpunk, and Wi-Fi Now in the OED". 21 May 2011. Archived from the original on 2011-05-21. Retrieved 5 September 2020.
^ Gilmore, John (13 April 1999). "Summary of cypherpunks discussion volume and participants". cypherpunks (Mailing list). Archived from the original on 4 March 2016. Retrieved 5 September 2020 – via Cryptome.org.
^ Jim Choate: "Cypherpunks Distributed Remailer Archived 2007-10-29 at the Wayback Machine". Cypherpunks mailing list. February 1997.
^ "Cypherpunk Mailing List Information". Archived from the original on 2016-03-05.
^ "Setting up a filtering CDR node for Cypherpunks". 5 December 2014. Archived from the original on 2014-12-05. Retrieved 5 September 2020.
^ ^a ^b Riad S. Wahby: "back on the airwaves Archived 2016-04-22 at the Wayback Machine". Cypherpunks mailing list. July 2013.
^ Riad S. Wahby: "domain change Archived 2016-04-22 at the Wayback Machine". Cypherpunks mailing list. July 2013.
^ "Re: POST: The Frightening Dangers of Moderation". 30 October 2007. Archived from the original on 2007-10-30. Retrieved 5 September 2020.
^ "Re: Re: Add To Your Monthly Income!!". 22 August 2008. Archived from the original on 2008-08-22. Retrieved 5 September 2020.
^ "Cypherpunks Date Index for 1997 04". 21 October 2006. Archived from the original on 2006-10-21. Retrieved 5 September 2020.
^ Macgregor, Jody (10 February 2020). "That time the US Secret Service mistook a cyberpunk RPG for a hacker's handbook". Dicebreaker. Archived from the original on 25 March 2023. Retrieved 28 June 2023.
^ Pagliery, Jose (2014). Bitcoin and the Future of Money. Triumph Books. p. 9. ISBN 978-1-62937-036-1.
^ "Clipper Chip: How the Government Wanted to Put a Backdoor in Your Phone". Exabeam. April 2, 2019. Archived from the original on January 25, 2021. Retrieved December 6, 2020.
^ "Re: Sandy and the Doc". Cypherpunks.venona.com. Archived from the original on 3 March 2016. Retrieved 5 September 2020.
^ "Newgroup -- distributed mailing list on the way?". Cypherpunks.venona.com. Archived from the original on 30 October 2007. Retrieved 5 September 2020.
^ "Switching to full traffic mode". Cypherpunks.venona.com. Archived from the original on 30 October 2007. Retrieved 5 September 2020.
^ "Cryptography". Mail-archive.com. Archived from the original on 2021-03-23. Retrieved 2010-08-15.
^ ^a ^b ^c ^d Hughes, Eric (1993), A Cypherpunk's Manifesto, archived from the original on 2021-03-24, retrieved 2002-02-25
^ Levy, Steven (May 1993). "Crypto Rebels". Wired. Archived from the original on 2014-03-01. Retrieved 2017-03-06.
^ Levy, Steven (2001). Crypto: How the Code Rebels Beat the Government – Saving Privacy in the Digital Age. Penguin. ISBN 0-14-024432-8.
^ Timothy C. May (1992), The Crypto Anarchist Manifesto, archived from the original on 2021-02-24, retrieved 2021-02-27
^ ^a ^b May, Timothy C. (September 10, 1994). "The Cyphernomicon: Cypherpunks FAQ and More, Version 0.666". Cypherpunks.to. Archived from the original on 2018-06-12. Retrieved June 12, 2018. as well as Hughes's
^ John Gilmore, home page, archived from the original on 2010-04-27, retrieved 2010-08-15
^ Emphasis on the word possibility; as Sarah Smith notes, even cypherpunks recognize the impossibility of absolute anonymity. For a range of discussion on the complexities of defending anonymity within maintaining security (against terrorism e.g.), see Sarah E. Smith, "Threading the First Amendment Needle: Anonymous Speech, Online Harassment, and Washington's Cyberstalking Statute", Washington Law Review 93/3 (Oct. 2018): 1563-1608; Julian Assange, Jacob Appelbaum, Andy Muller-Maguhn, and Jérémie Zimmermann, Cypherpunks: Freedom and the Future of the Internet (OR Books, 2012/2016). ISBN 978-1-939293-00-8, Ebook ISBN 978-1-939293-01-5; Dennis Bailey, The Open Society Paradox : Why the 21st Century Calls for More Openness — Not Less (Dulles VA: Potomac, 2004), 28-29; and Eric Hughes <hughes@soda.berkeley.edu>, "A Cypherpunk's Manifesto" (9 March 1993): https://www.activism.net/cypherpunk/manifesto.html Archived 2021-03-24 at the Wayback Machine
^ Matt Blaze (1994), "Protocol failure in the escrowed encryption standard", Proceedings of the 2nd ACM Conference on Computer and communications security - CCS '94, pp. 59–67, doi:10.1145/191177.191193, ISBN 0897917324, S2CID 14602435
^ "Yahoo! Groups". groups.yahoo.com. 2002-10-31. Archived from the original on 2019-02-25. Retrieved 2019-02-25.
^ "Apple takes strong privacy stance in new report, publishes rare "warrant canary"". Ars Technica. 2013. Archived from the original on 2021-03-08. Retrieved 2017-06-14.
^ "Cryptography Export Restrictions". www.freeswan.org. Archived from the original on 2018-09-11. Retrieved 2020-12-06.
^ Greenberg, Andy. "FBI Seizes Activists' Anonymizing Server In Probe Of Pittsburgh's Bomb Threats". Forbes. Archived from the original on 2023-04-06. Retrieved 2023-04-06.
^ Halfacree, Gareth. "Cryptography whizz Phil Zimmermann looks back at 30 years of Pretty Good Privacy". www.theregister.com. Archived from the original on 2023-04-06. Retrieved 2023-04-06.
^ Electronic Frontier Foundation (1998), Cracking DES: Secrets of Encryption Research, Wiretap Politics, and Chip Design, Electronic Frontier Foundation, ISBN 1-56592-520-3
^ Matt Blaze; Whitfield Diffie; Ronald L. Rivest; Bruce Schneier; Tsutomu Shimomura; Eric Thompson & MichaelWiener (1996). "Minimal Key Lengths for Symmetric Ciphers to Provide Adequate Commercial Security - Schneier on Security". Schneier on Security. Archived from the original on 2015-09-07. Retrieved 2010-08-15.
^ Hal Abelson; Ross Anderson; Steven M. Bellovin; Josh Benaloh; Matt Blaze; Whitfield Diffie; John Gilmore; Peter G. Neumann; Ronald L. Rivest; Jeffrey I. Schiller & Bruce Schneier (1998), The Risks of Key Recovery, Key Escrow, and Trusted Third-Party Encryption, archived from the original on 2015-09-08, retrieved 2010-08-15
^ Steven Bellovin; Matt Blaze; David Farber; Peter Neumann; Eugene Spafford, Comments on the Carnivore System Technical Review, archived from the original on 2010-06-18, retrieved 2010-08-15
^ Kenneth W. Dam; Herbert S. Lin, eds. (1996). Cryptography's Role In Securing the Information Society. Washington, D.C.: National Research Council. p. 688. ISBN 0-309-05475-3. LCCN 96-68943. Archived from the original on September 28, 2011.
^ "The Applied Cryptography Case: Only Americans Can Type!". Archived from the original on 2020-06-16. Retrieved 2010-08-15.
^ Schneier, Bruce (1996). Applied Cryptography (2nd ed.). John Wiley & Sons. ISBN 0-471-11709-9.
^ Junger v. Daley, (6th Cir. 2000).
^ "Revised U.S. Encryption Export Control Regulations (1/12/00)". archive.epic.org. Retrieved 2024-09-17.
^ Adam Back, export-a-crypto-system sig, web page, archived from the original on 2021-02-24, retrieved 2010-08-15
^ Adam Back, post to cypherpunks list, RSA in six lines of Perl, archived from the original on 2020-02-22, retrieved 2010-08-15
^ Vince Cate, ITAR Civil Disobedience (International Arms Trafficker Training Page), archived from the original on 2021-03-18, retrieved 2010-08-15
^ Zurko, Marie Ellen (1998-10-07). "Crypto policy costs the US a citizen". Electronic CIPHER: Newsletter of the IEEE Computer Society's TC on Security and Privacy. No. 29. Archived from the original on 2017-01-12. Retrieved 2013-10-11.
^ Dawson, Keith (1996-05-05). "Become an international arms trafficker in one click". Tasty Bits from the Technology Front. Archived from the original on 1997-01-16. Retrieved 2013-10-11.
^ Neal Stephenson, Cryptonomicon cypher-FAQ, archived from the original on May 28, 2010
^ "cryptoparty.org - cryptoparty Resources and Information". Cryptoparty.org. Archived from the original on 12 September 2012. Retrieved 5 September 2020.
^ "Warm Party for a Code Group". Wired. September 13, 2002. Archived from the original on March 5, 2009.
^ "'Julian Assange ' posts - MARC". Archived from the original on 2016-01-01. Retrieved 2015-10-04.
^ Rodger, Will (30 November 2001). "Cypherpunks RIP". The Register. Archived from the original on 13 July 2019. Retrieved 13 July 2016.
^ "Officers - Open Source Club at Ohio State University". Archived from the original on 2016-03-04. Retrieved 2011-07-01.
^ Franchesci-Bicchierai, Lorenzo (20 September 2014). "Egypt's New Internet Surveillance System Remains Shrouded in Mystery". Archived from the original on 5 December 2020. Retrieved 23 September 2014.
^ Matthew Green. "The pragmatist in me says "who cares, this will obviously work better if it has a few big nodes". The cypherpunk in me says "F that"". Twitter. Archived from the original on 2021-08-24. Retrieved 2021-08-24.
^ Hastings, Sean (2007). God Wants You Dead (1st ed.). Vera Verba. ISBN 978-0979601118.
^ Evans, Jon (13 January 2013). "Nadia Heninger Is Watching You". Archived from the original on 23 June 2020. Retrieved 23 September 2014.
^ Grigg, Ian (2001). "Financial Cryptography in 7 Layers". In Frankel, Yair (ed.). Financial Cryptography. 4th International Conference on Financial Cryptography, FC 2000 Anguilla, British West Indies, February 20–24, 2000. Lecture Notes in Computer Science. Vol. 1962. Berlin, Heidelberg: Springer. pp. 332–348. doi:10.1007/3-540-45472-1_23. ISBN 978-3-540-45472-4. Archived from the original on 2020-10-26. Retrieved 2020-10-23.
^ "IFCA". Ifca.ai. Archived from the original on 2021-03-20. Retrieved 2013-11-20.
^ "Jillian York". Electronic Frontier Foundation. 2011-10-07. Archived from the original on 2021-04-11. Retrieved 2014-09-23.