asciilifeform: lol emerging, kako was doin' it in '16

asciilifeform: ( for all i know, he devised it )

asciilifeform: lolyes

asciilifeform: but funnily enuff that was the only place i ever saw it, prior to mircea_popescu's mention

asciilifeform: mod6: confirmed dead

asciilifeform: meanwhile, asciilifeform has sumthing vehehehery speshul, but aint gonna pons&fleischmann it...

asciilifeform: errybody luvvs surprised tho.

asciilifeform: *surprises

asciilifeform: lol

asciilifeform: http://www.loper-os.org/pub/serpent/serpent_with_reduction.txt << for the impatient.

asciilifeform: folx with their 3rd eye open, can prolly see where this is going.

asciilifeform bbl,meat

asciilifeform: spoiler : http://btcbase.org/log/2018-10-30#1867822 is mistake ☝︎

asciilifeform: lessee if mircea_popescu or diana_coman beat me to the pill, i'ma not spoil the exact algo just yet.

asciilifeform: ohai diana_coman

asciilifeform: diana_coman: serpent lulz make sense thus far ?

asciilifeform: you'll find that it's pretty simple, imho

asciilifeform: hm?

asciilifeform: hey no hurry

asciilifeform: meanwhile , in the world of the c-machine, https://archive.is/e5xD9 >> 'curl contains a heap out of buffer read vulnerability... stderr... formats the output to wrap at 80 columns. The wrap logic is however flawed, so if a single word in the message is itself longer than 80 bytes the buffer arithmetic calculates the remainder wrong and will end up reading behind the end of the buffer' etc

asciilifeform: unrelatedly, had thought, in re 'candidates for asicization', http://btcbase.org/log/2018-10-23#1865459 mechanism prolly oughta be on the list. ☝︎

asciilifeform: i.e., ic that when paired with another of its kind, and rng, saves internally the pad; but won't simply disgorge it unless in a synchronous link with the item it was synced with, as described in the algo.

asciilifeform: hypothetically, it'd be safe to transport, or even mail; it is impractical to capture,saw open,dump contents,bake a substitute with the copied pad,and deliver to unsuspecting counterparty, inside the space of day or two. esp. if you make the pad live in http://btcbase.org/log/2017-05-16#1656777 sram, rather than flash . ☝︎

asciilifeform: nope

asciilifeform: Mocky: if you're speaking of the 'remanence-free sram' -- think of it as a 1950s-style delay line store, with 1 (on-die) delay line per bit ( and not even necessarily, each can store multiple bits )

asciilifeform: thing is powered at all times, so it knows what the relation b/w the primary clock and the phases is.

asciilifeform: but you dun get the charge accumulation that makes for successful 'freeze with ln2 and read' .

asciilifeform: ( and no, you can't buy remanence-free sram, afaik, off-the-shelf, i devised it and it is published only in the l0gz.)

asciilifeform: i suspect it's the closest thing physically possible to saw-proof sram 'safe'.

asciilifeform: cutting into the ic package, probing, etc. will change the capacitance and throw the lines out of phase.

asciilifeform: ( for bonus, sync the units after you've already cast'em into bricks of lead )

asciilifeform: will look 'great' to xray, too.

asciilifeform: ( even answering the q of just where inside the brick the thing is, without heat stress or saw, will be painful )

asciilifeform: naturally this aint exactly commercially-hotstuff, it suffers from same problem as my other items, e.g. FG, namely that there's maybe 100 thinking people alive total, i.e. folx who could reliably distinguish the real thing from 9000x-cheaper imitation liquishit.

asciilifeform: so i have nfi how one'd make it a +ev biznis-proposition.

asciilifeform: it's a (gedanken-)-faberge.

asciilifeform: the problem faced by even fella with a first-class head, when buying 'crypto iron', is a 9000x hypertrophied instance of the http://btcbase.org/log/2018-10-30#1867790 boojum -- to know what he's getting, he is stuck with much ~harder~ problem than even original maker had in making the artifact to begin with ! ☝︎☟︎

asciilifeform: wot/chain-of-custody is the only known pill, and it still comes pretty shaky guarantees.

asciilifeform: for instance, i have here 2 FG units i flew ~back~ from pizarro, they had been pawed by randos when ben_vulpes had his customs debacle. in so far as i can tell , they have orig firmware still, and by erry possible test they are virginal, but even i cannot say whether they're 'still FG' or not !

asciilifeform: some variant of the 'nail polish' trick, would help, but not cure, this headache.

asciilifeform: it's an open problem, and will prolly forever remain, in some sense, open; but afaik the gold standard is still a powered, disturbance-sensitive storage on-die.

asciilifeform: currently i'm not even certain that makes sense to ~sell~ a crypto iron; possibly a truly-serious user ~must~ make 'his own' , out of standardized, exhaustively-testable, and -- most importantly -- mix&match-able, components, from a design he has read & understood.

asciilifeform: wot + hand-delivery cuts, in a way, this knot. but not practical for konsoomer/heathen iron, sadly.

asciilifeform: *that it makes sense

asciilifeform: if somehow FG were to catch on with the http://btcbase.org/log/2018-10-26#1866428 crowd, the situation will not differ so much from the current : coupla 100 people will have the genuine article, and 9,999,999 sad folx will have physically-similar item made in hong kong to washington's specs. and i couldn't do a thing about it. ☝︎

asciilifeform: 'The new Ada code simply reads from a Fuckgoats that it expects to be available at a pre-set path, *already initialised*1 and ready to read from' << ha, nice

asciilifeform: diana_coman: the caveat re my method, is that i do not presently know how to ~portably~ 'lock' the thing ( so >1 process dun eat from it )

asciilifeform: ( it goes straight to the /tmp files horrors )

asciilifeform: the q, i mean.

asciilifeform: 'The "No Implicit Conditionals" restriction for the whole smg comms had to be discarded because of the Keccak...' << this is odd; is there an array concatenation in keccak ?

asciilifeform: cuz that's typically why

asciilifeform: ( using the ada ampersand notation )

asciilifeform: ahahaha it's the implicit div0 check

asciilifeform: can Z_Length be 0 ever, legitimately ?

asciilifeform: if it can't, you can narrow the type and be rid of the implicit 'is-div0?' check ☟︎

asciilifeform: (at least on my old gnat, this worked reliably)

asciilifeform: loox like it's a naked modular type right nao

asciilifeform: Keccak_L: constant := 6; Z_Length: constant := 2**Keccak_L; << so it's 64

asciilifeform: diana_coman: so you aint gotta mod; an integer mod 64 is simply same as & 63 .

asciilifeform: bang, nomoar div0 check.

asciilifeform: and you dun have to hardcoad it; simply replace Output(X, Y) := Rotate_Left(Input(X,Y), ( (T+1)*(T+2)/2) mod Z_Length); with Output(X, Y) := Rotate_Left(Input(X,Y), ( (T+1)*(T+2)/2) and (2**Keccak_L - 1));

asciilifeform: arithmetically same, and nomoar div.

asciilifeform: can define as an inlined op, for clarity, also.

asciilifeform: ada treats any statement that divides by anything other than an immediate constant ( incl. / or mod by a named constant ) as potentially div0-barfing

asciilifeform: and inserts the check

asciilifeform: 'No Implicit Conditionals' bans this, with the result of banning such forms

asciilifeform: ( the only other operation i know to do this, is array concatenation ; hence my earlier suspicion )

asciilifeform: implicit conditionals aint evil per se , tho ; i banned them in ffa specifically as they get in the way of constanttimeism, is all ☟︎

asciilifeform: there is no particular reason why ~erry~ proggy has to have the same pragma fascism as ffa ( and in fact i've written several that cannot function under that set of constraints, e.g. the mmap thing requires System.Address )

asciilifeform: it is one of the reasons why i section my routines into staticlinkable libs , rather than 'take this and cut&paste'

asciilifeform: that way it is possible to write a piece under 1 set of constraints, and then permit it to run in a larger proggy with looser ones

asciilifeform: diana_coman: aha, i use same method

asciilifeform: diana_coman: there's a gnat flag that actually gives you all permissible constraints, whether you knew about them or not, that can be then thrown straight into restrict.adc

asciilifeform: but i dun recall from my head; it is in the logs somewhere

asciilifeform: ( keep in mind that it will give you all the ones that your ~particular~ gnat supports; but nao that we have the makings of a cemented gnat, this is less of a concern )

asciilifeform: diana_coman: https://archive.is/RzmUN#selection-24409.0-24423.146 << found

asciilifeform: diana_coman: re: ToOctets / ToBitstream / etc -- do you know that ada has 'variant records' (similar to ye olde C 'unions' , but with typechecking ) , you could in principle use'em and avoid the conversions, for slightly cleaner proggy

asciilifeform: ( not necessarily worth sweating over given as you already wrote it , but for next time )

asciilifeform: not critical imho

asciilifeform: but pointing out for the l0gz, that there's a 'ecologically clean' variant for those.

asciilifeform: ( c 'unions' are sad cuz c dun give you any portable knob for cementing where the bits actually go; ada's records are sane, you can specify the exact location of erry element, paddings, endianisms, bit orders )

asciilifeform: anyway -- minor nitpick.

asciilifeform: diana_coman: rng.adb / Get_Octets -- you'll prolly want a timeout there

asciilifeform: otherwise the result of a dead/unplugged FG is simply halted box

asciilifeform: diana_coman: metoo, i had to breathe ada for yrs before working all the c sad out of my follicles

asciilifeform: diana_coman: ideally you want to at least know why halted.

asciilifeform: ( and if because fg -- which? fg )

asciilifeform: granted i've yet to witness a dead fg. but i dun have a written guarantee from the gods, that they can never die, no

asciilifeform: fwiw i've witnessed the death of usb ports per se.

asciilifeform: in very other noose, found another http://btcbase.org/log/2018-10-30#1867757 , 27.76.232.151 . making for 4 known shitslingers , of this type , on btc net ☝︎

asciilifeform: http://ossasepia.com/2018/10/31/smg-comms-chapter-5-rsa-with-oaep-from-ada/#selection-155.1206-155.2305 << example of where i'dve used an ada record

asciilifeform: but i'ma stop picking on diana_coman's item for nao

asciilifeform: will note, tho, re fg timeouts -- the most likely waiting-on-fg scenario is starvation, rather than outright hangage , thing shits out 7kB/s per spec, 8 on a good day; i expect it will be the limiting reactant re how many rsa msgs / sec can be produced

asciilifeform: you will want a way to make use of 2+ fg (iirc you already have 2 on ea. machine)

asciilifeform: ( iirc symmetric keys are supplied, per protocol, by client, so not an issue there ) ☟︎

asciilifeform: lol!!

asciilifeform: in other lulz, mircea_popescu , diana_coman , http://www.loper-os.org/pub/holyshit.png << guess what. ☟︎☟︎

asciilifeform: ^ prolly can guess what this is.

asciilifeform: noshit

asciilifeform: it's a matrix of http://www.loper-os.org/pub/serpent/serpent_with_reduction.txt , prepped for gaussian row-reduction ( xor-sat is in p! motherfuckers ) with horiz. axis -- key bitz, vertical -- expansion bits...

asciilifeform: last col. is the constant term of the row.

asciilifeform: for example, 32 lines of the bitmap represent the first 32bit word of the 528-byte inflatolade.

asciilifeform: *top 32

asciilifeform: diana_coman: loox pretty grim, imho

asciilifeform: i expect the gaussation itself could take coupla wks on dulap, once the req'd pieces are cut and glued

asciilifeform: but simply from the pic you can already see, with naked eye , 'floor tiles'

asciilifeform: these , in a hash output, is.. i lack the words

asciilifeform: ( no prizes for guessing why holyshit.png doesn't appear in the orig 'serpent' paper, or the mountain of 'analysis' ... ) ☟︎

asciilifeform: lol

asciilifeform: i'm reminded of the chessboards they used to print in sov newspapers. after a good rain.

asciilifeform: it's funny, if only to me -- if author wanted to make the keyspace == 2**256, all he would have had to do is to drop a copy of the 256bit key into the expansion. but i can already picture the fatlogic, 'oh noez, that wouldn't do, will leak key via plaintext cuz not whitened'

asciilifeform: btw if it aint obvious -- the denser the horiz. path across the pic, the ~easier~ it is to find alt-solutions to that line of the expansion (i.e. rearrangements of the input key that yield the same mod-2 summation when multiplied with that row of the matrix )

asciilifeform: so for bit 0 of w, h21 ^ f21 ^ d21 ^ a21 ^ 1 == w0, and if you want that w0 they gotta sum to same thing mod-2 , no matter what. but for the ~last~ bit of W, you have 79 whole slots ! that still only gotta add up to same thing mod-2 ! many more variants .

asciilifeform: hm trinque is Mocky currently in the deedbot rotation ? i missed his last 2 posts apparently

asciilifeform: 'First of all you can’t get power to charge your laptop. Anywhere. Electrical outlets in customer areas: it’s just not done here' << sounds like the ultimate trial for us x60 folk ☟︎

asciilifeform: trinque: wb. yer in for some pretty lulzy l0gz, imho

asciilifeform: trinque: http://mocky.org/feed.xml loox like

asciilifeform also bbl

asciilifeform: meanwhile, in detritus from asciilifeform's torture room, 'În această lucrare se prezintă o metodă eficientă de implementare a eliminării Gaussiene pentru o matrice de dimensiuni n·m (m≥n), folosind o arhitectură SIMD ce constă dintr-o matrice de n·m procesoare.' (U.P.B. Sci. Bull., Series C, Vol. 71, Iss. 4, 2009)

asciilifeform: ( by a certain mugurel.andreica<at>cs.pub.ro . wonder if spyked et al know the fella ) ☟︎

asciilifeform: ikr?

asciilifeform: i still dun know what the actual keyspace is, just yet

asciilifeform: loox like finding answer might add up to costing some penies ( or not, lessee, if dulap dun suffice, i'ma lease some cycles on lulazon cluster )

asciilifeform: my current guess is , north of 64bit, but south of 80

asciilifeform: ( and dollars to doughnuts , can be narrowed substantially using what leaks out into ciphertext, but that's ~entirely~ separate bag of lulz )

asciilifeform: noshit

asciilifeform: sad, but better to learn this nao than after gluing it in eulora, or baking asics, etc

asciilifeform: mircea_popescu: the bigger saddity, is that i dun have anything to offer to plug-in replace 'serpent', nao just as in '16 when mircea_popescu was offering prizes

asciilifeform: ( the prng stuff is even easier to demolish, imho it's not worth anyffing )

asciilifeform: i had an automata thing, but found that i could not in good conscience play it for the prize, i never found any approach to a proof that it dun have ( as mircea_popescu called ) 'kek state'

asciilifeform: ( in general asciilifeform eschews wasting folx's time with questionable algos for which there is no approach to fix )

asciilifeform: the fundamental problem with 'i'ma use turing-complete automaton as hash!' is that ~specifically~ the aspect that makes it seem appealing to begin with, is the very same thing that kills you, it is impossible to prove non-cyclicity

asciilifeform: ( reduces to halting problem )

asciilifeform: there's a quite tall pile of pointlessly murdered trees behind ' asciilifeform never brought us a nice symm cipher ! '

asciilifeform: hey, it remains theoretically possible that asciilifeform somehow is mistaken and the gauss-reduced matrix has unique solution...

asciilifeform: at least until i actually do it and it spews forth the pill eqn.

asciilifeform: ( i.e. transformator for 256b K that produces K1,...Kn that go to equiv. end states )

asciilifeform: only then, imho, can properly pour cement, put the cross on the tomb.

asciilifeform: ohai mod6

asciilifeform: '0x012: pete_dushenski's [R.07] nodes were found to be dead, and thus removed from the list of Advertised Republican Nodes' << ha

asciilifeform: seems like there's a roughly 6 mo. lifetime for folx who fall into 'man alone', sorta how there is 6 mo. ramp-up for n00bz

asciilifeform: iirc shinohai also started prb approx 6mo after his 'what am i doing here' monologue