Cypherpunk

A cypherpunk is someone advocating widespread use of strong cryptography as a route to social and political change, as in this quote from the Cypherpunk Manifesto:

Privacy is necessary for an open society in the electronic age. ...

We cannot expect governments, corporations, or other large, faceless organizations to grant us privacy ...

We must defend our own privacy if we expect to have any. ...

Cypherpunks write code. We know that someone has to write software to defend privacy, and ... we're going to write it. ...

Many cypherpunks are technically quite sophisticated; they do understand ciphers and are capable of writing software. However, the "punk" part of the name indicates an attitude:

We don't much care if you don't approve of the software we write. We know that software can't be destroyed and that a widely dispersed system can't be shut down.

Cypherpunks are fundamentally opposed to government policies attempting to control the usage or export of cryptography. See politics of cryptography for discussion. The same Manifesto has:

Cypherpunks deplore regulations on cryptography, for encryption is fundamentally a private act.

Some cypherpunks make an analogy with gun laws. Widespread use of strong cryptography is desirable for exactly the same reason that an armed citizenry is; it limits the power of a repressive government.

Many cypherpunks were quite active in the intense political and legal controversies around cryptography of the 90s, and most have remained active into the 21st century. Steven Levy's Crypto: How the Code rebels Beat the Government — Saving Privacy in the Digital Age covers the "crypto wars" of the 90s in detail. "Code Rebels" in the title is almost synonymous with "cypherpunks".

Documents exemplifying cypherpunk ideas include the Crypto Anarchist Manifesto , Cypherpunk Manifesto , and the Declaration of the Independence of Cyberspace .

Cypherpunk projects

Cypherpunks are by no means just a bunch of people chatting about ideas. "Cypherpunks write code" ; the notion that good ideas need to be implemented, not just discussed, is very much part of the culture.

John Gilmore, whose site hosted the original cypherpunks mailing list, wrote:

We are literally in a race between our ability to build and deploy technology, and their ability to build and deploy laws and treaties. Neither side is likely to back down or wise up until it has definitively lost the race.

Cypherpunks have built and deployed quite a bit of code. Anonymous remailers such as the Mixmaster Remailer were almost entirely a cypherpunk development. Among the other projects they have been involved in were PGP for email privacy, FreeS/WAN for opportunistic encryption of the whole net, Off-the-record messaging for privacy in Internet chat, and EFF's TOR project for anonymous web surfing.

Cypherpunk history

Until about the 1970s, cryptography was mainly done in secret by military or spy agencies. However, in the 70s, there were two publications that brought it out of the closet, into public awareness. One was the US government publication of the Data Encryption Standard, a block cipher which became very widely used. The other was the publication by Whitfield Diffie and Martin Hellman of the first publicly available work on public key cryptography. From that time on, cryptography was openly discussed and people began to examine its political and social consequences. There are substantial issues there; cryptography can be used to protect personal privacy or corporate secrets, but it can also be used by criminals to hide their schemes. Should strong cryptography be widely used or strictly limited?

From the beginning, some of the speculations and some of the arguments were along lines we would now call cypherpunk. Sometime in the late 80s, these ideas coalesced into something like a movement, and Wired magazine writer Jude Milhon coined the term "cypherpunk", derived from cipher and cyberpunk. The Oxford English Dictionary added "cypherpunk" in 2006, see New York Times article.

The cypherpunks mailing list

Through most of the 90s, cypherpunks communicated largely through the cypherpunks mailing list. There were also cypherpunk "physical meetings" and parties. The term "cypherpunk" is mildly ambiguous. In most contexts in means anyone advocating social change via cryptography. However, it can also be used to mean a participant in the cypherpunks list. The two meanings obviously overlap, but they are by no means synonymous.

The list was set up in 1992 and shut down around 2001; its heyday was in the late 90s. At that time, it was a very active list; for several years traffic averaged about 200 messages a day, divided between personal arguments and attacks, political discussion, and technical discussion ranging over mathematics, cryptography, and computer science, with some spam thrown in. There were well over a thousand subscribers at the peak.

An obituary written when the list shut down summarised:

for all the irrelevant comments, vicious infighting and radical libertarian politics that flourish on the list, Cypherpunks has chronicled every important event in the short history of modern cryptography, as well as the cyber-rights movement that grew out of it. ... Seemingly every major figure in cryptography and computer security has passed through the list from time to time.

The original cypherpunks list, and the spin-off coderpunks, were hosted on John Gilmore's toad.com. Later there was a distributed cypherpunks list, hosted on several sites.

A coderpunks list, open by invitation only, existed for a time. Coderpunks took up more technical matters and had less discussion of public policy implications.

To some extent, the cryptography list is a successor to cypherpunks; it has many of the people and continues some of the same discussions. However, it is a moderated list, considerably less zany and somewhat more technical.

Well-known list participants

Cypherpunks list subscribers included many notable computer industry figures. Not all would call themselves "cypherpunks".

• Steven Bellovin (Bell Labs researcher, later Columbia professor)
• Jon Callas (Technical lead on Open PGP specification and Chief Technical Officer of PGP Corporation)
• Hugh Daniel (Former Sun Microsystems' employee, manager of the FreeS/WAN project)
• John Gilmore (Sun Microsystems' fifth employee, one of the founders of the Electronic Frontier Foundation, project leader for FreeS/WAN) *
• Mike Godwin (EFF lawyer)
• Ian Goldberg (Assistant Professor, University of Waterloo, designer of the Off-the-record messaging protocol) *
• Lucky Green (Author of first free software implementation of ring signatures)
• Eric Hughes (Author of A Cypherpunk's Manifesto) *
• Tim May (Former chief scientist at Intel, author of A Crypto Anarchist Manifesto )
• Jude Milhon (A founding member of the cypherpunks)
• Sameer Parekh (former CEO of C2Net)
• Len Sassaman (Current maintainer of the Mixmaster Remailer software)
• Peter Shipley (A founding member of the cypherpunks)
• Bruce Schneier (well-known security author) *
• Philip Zimmermann (Creator of PGP)

* indicates someone mentioned in the acknowledgements of Stephenson's Cryptonomicon (see next section).

Cypherpunk fiction

In Neal Stephenson's novel Cryptonomicon many characters are on the "Secret Admirers" mailing list. This is fairly obviously based on the cypherpunks list, and several well-known cypherpunks are mentioned in the acknowledgements. Much of the plot revolves around cypherpunk ideas; the leading characters are building a data haven which will allow anonymous financial transactions, and the book is full of cryptography.

There was a pornographic cypherpunk movie called Cryptic Seduction, produced by someone using the pseudonym Randy French. It caused great amusement in cypherpunk circles, but did not make money. At one point the copyright for it was up for auction.

Jim Bell and "Assassination Politics"

Jim Bell took the general cypherpunk tendencies toward anarchism or libertaranism farther in an essay titled "Assassination Politics" :

Imagine for a moment that as ordinary citizens ... see an act by a government employee or officeholder that they feel violates their rights ... If only 0.1% of the population, or one person in a thousand, was willing to pay $1 to see some government slimeball dead, that would be, in effect, a $250,000 bounty on his head. Further, imagine that anyone considering collecting that bounty could do so with the mathematical certainty that he could not be identified, ... Perfect anonymity, perfect secrecy, and perfect security.

He worked out the mechanisms for this in considerable detail, and speculated extensively on the political consequences. Naturally, the discussion on the list was intense.

Later, Bell was arrested and convicted [1] for tax evasion, with accusations of attempts to intimidate IRS agents. Still later, another case was brought against him, alleging "stalking and intimidating local agents of the IRS, Treasury Department and BATF" [2]. Another list subscriber, Carl Johnson, was also convicted [3] of sending threatening emails. Discussion of Bell's essay played a prominent part in all three trials.

Log in as "cypherpunk?"

Cypherpunk, cypherpunks or cpunks are sometimes used as a username and password on websites which require registration, for users who do not wish to reveal information about themselves. The account is left for later users. Many such accounts were publicly announced on the list.