Cryptome DVDs. Donate $25 for two DVDs of the Cryptome collection of 47,000 files from June 1996 to January 2009 (~6.9 GB). Click Paypal or mail check/MO made out to John Young, 251 West 89th Street, New York, NY 10024. The collection includes all files of,,,, and, and 23,100 (updated) pages of counter-intelligence dossiers declassified by the US Army Information and Security Command, dating from 1945 to 1985.The DVDs will be sent anywhere worldwide without extra cost.

30 August 1997 Add URLs for Snuffle

28 August 1997

Censored by United States Government


26 August 1997
Source: Adam Back <>

See Dan Bernstein's version:

Date: Tue, 26 Aug 1997 23:15:28 +0100
From: Adam Back <>
Subject: snuffle.c (was Re: Reuter on Bernstein Ruling)

snuffle and unsnuffle are only 64 lines each... so here they are.  You
need snefru also (snuffle for those not following is a construction to
convert a hash function into an encryption function ... Bernstein's
example is set up to use snefru ... a hash function).

Hash function seem be generally exportable, though they are several
constructs which allow you to convert a hash function into an
encryption function, so it's not too clear why they should be exempt.

Probably one reason is that hash functions are used to create and
check signatures, and signature checking and making code
(authentication only) also seems to be allowed for export.

I expect you could come up with some creative ways of using
authentication systems to provide encryption too.

We've already got an MD5 and SHA1 in perl, now all we need is a nice
small implementation (probably in perl) of the below which can be used
for a .sig :-)

So I guess you guys are now allowed to talk about snuffle
implementation and it's design... any comments/reposts etc?

Shall we reimplement it in perl?


== snuffle.c =================8<==============================



30 August 1997

Date: Sat, 30 Aug 1997 01:18:02 +0100
From: Adam Back <>
Subject: Re: Snuffle Availability

There's another one which has been at:

for a long time.

Actually if you point a browser at:
you'll find a fine collection of mirrors of whole not-for-export sites
replete with DO_NOT_EXPORT warnings etc, plus many other illegally
exported stuff.

I love the Italians respect for export laws.

Have *you* exported RSA today? -->

print pack"C*",split/\D+/,`echo "16iII*o\U@{$/=$z;[(pop,pop,unpack"H*",<>


Adam confirms non-US access to the US Snuffle source: