# A cryptoparty at the library, why, for whom and how

Damien Belvèze

► To cite this version:

Damien Belvèze. A cryptoparty at the library, why, for whom and how. Bobcatsss 2016, Jan 2016, Lyon, France., 2016. hal-01266276

HAL Id: hal-01266276

https://hal.science/hal-01266276

Submitted on 8 Apr 2017

HAL is a multi-disciplinary open access
archive for the deposit and dissemination of sci-
entific research documents, whether they are pub-
lished or not. The documents may come from
teaching and research institutions in France or
abroad, or from public or private research centers.

L'archive ouverte pluridisciplinaire HAL, est
destinée au dépôt et à la diffusion de documents
scientifiques de niveau recherche, publiés ou non,
émanant des établissements d'enseignement et de
recherche français ou étrangers, des laboratoires
publics ou privés.

<figure><img src="image_1.png" /></figure>

Distributed under a Creative Commons Attribution 4.0 International License
## WHO SOULD COME?

<figure><img src="image_2.png" /></figure>

### Students

> INSA students involved in privacy challenges (app building, embedded software designing)

> other students (e.g : journalism, politics)

<figure><img src="image_3.png" /></figure>

### Librarians

> provide secured (?) wifi connexions to users

> Sign contracts with 3rd part vendors including user data

> should know a bit more about how DRM managers leak out personal data

<figure><img src="image_4.png" /></figure>

### Concerned citizens

> "And we are all involved" (Pascal)

> want to have control over their own data

> Are usually aware of mass surveillance and tracking by GAFAM

<figure><img src="image_5.png" /></figure>

### Professionnals

Could be for instance :

> Journalists trying to protect themselves and their sources

> Webmasters,

> Researchers esp. on sensitive matters

> policemen. And why not ?

## WHO PERFORMS?

<figure><img src="image_6.png" /></figure>

### Teachers

> teach cryptography

> promote the event among their students

> organize the event with librarians

> manage workshops

<figure><img src="image_7.png" /></figure>

### Students

> study cryptography

> or use Tor or VPN for personal issues

<figure><img src="image_8.png" /></figure>

### Guest expert

> is in charge of the conference

> Could be a prof, senior officer, journalist specialized in security or electronic freedom challenges

<figure><img src="image_9.png" /></figure>

### Librarians

> fight against auto-censorship due to mass surveillance

> try to protect user personal data

> Follow US activists from "Library Freedom project"

> would like to do the same in France. And why not ?

<figure><img src="image_10.png" /></figure>

### (h)ac(k)tivistes

> train attendees to privacy tools

> recruit new partners among students

> love onions

A

<figure><img src="image_11.png" /></figure>

## At the Library

### WHY, FOR WHOM, AND HOW?

## WORKSHOPS & TOOLKITS

<figure><img src="image_12.png" /></figure>

<figure><img src="image_13.png" /></figure>

<figure><img src="image_14.png" /></figure>

Mail encryption

<figure><img src="image_15.png" /></figure>

Data encryption, Integrity, Authentication

<figure><img src="image_16.png" /></figure>

<figure><img src="image_17.png" /></figure>

Anonymity network

<figure><img src="image_18.png" /></figure>

Secure password management

## WHY AT THE LIBRARY?

I have nothing to hide...

Arguing that you don't care about the right to privacy because you have nothing to hide is no different than saying you don't care about free speech because you have nothing to say (E. Snowden)

See the point, but I don't have enough time...

https everywhere takes only 15 secs to set up

CC:by-nc-sa damien.belveze@insa-rennes.fr

<figure><img src="image_19.png" /></figure>

Stated (14th August 2015)

Data protection and privacy protection should be included as a part of the media and information literacy training for library and information service users. This should include training on tools to use to protect their privacy

Library and information services should reject electronic surveillance

Sharing Values

Improving Library System

> Train users to secure communication and browsing

> Care about user data treatments by cloud service providers

> Display Tor on public PCs

> Build a Tor exit node for the library

There's so much to be done...