Share

Mixmaster

Tracker: Feature Requests

5 Include PGP Comments Header - ID: 1735020
Last Update: Comment added ( rabbi )

Users of Type-I Pseudonyms often terminate them on the Usenet group
alt.anonymous.messages. Many of these are being lost due to news servers
running default Cleanfeed installations that perform 'Fuzzy MD5' to filter
Excessive Multi-Posting.

Cleanfeed's Fuzzy MD5 performs the following filtering prior to hashing the
message payload:
$mbody = lc $hdr{__BODY__};
$mbody =~ s/^(?!http)\S{7,70}\r?$//mg;
$mbody =~ s/\r{3}.*$//mg;
$mbody =~ s/\s+$//;
$mbody =~ s/^[^\n]*\Z//m if $lines > 5;
$mbody =~ tr/a-z0-9//cd;
This results in virtually all PGP encrypted messages having the same MD5
hash and subsequently being dropped.

Resolution:
During encryption, add a PGP Comments header that contains 8 blocks of 6
random a-z characters separated by a whitespace character. This will
ensure that each PGP payload will generate a different Fuzzy MD5 hash.


Steve Crook ( zaxuk ) - 2007-06-11 13:50

5

Closed

None

Len Sassaman

None

None

Public


Comment ( 1 )

Date: 2007-06-11 14:25
Sender: rabbiProject Admin


Cleanfeed's proceedure is the problem here, not Mixmaster's behavior.
Normally I would work around someone else's broken code rather than stick
to principles, but what you're asking for is a wide-open side-channel. I
can't do that.


Attached File

No Files Currently Attached

Changes ( 3 )

Field Old Value Date By
status_id Open 2007-06-11 14:25 rabbi
assigned_to nobody 2007-06-11 14:25 rabbi
close_date - 2007-06-11 14:25 rabbi