Hi -
I've made a working implementation of the Blowfish algorithm in Pharo, a partially broken implementation of Bcrypt in Pharo, and a reliable way to access the linux crypt library using FFI in Pharo on linux.
At the moment it takes about 25 seconds to hash a password using my Bcrypt implementation in Pharo, which is about 50x too long. So I'm going to try to get a FFI version put together or just use SHA512 from the linux crypt library. I have learned a lot but don't expect to fix the improper hashing as I don't think the fix would cause a massive speed up. I think the hashing error is probably an off-by-one error in an array index in the BCrypt class. Ruby, Python, Lisp, PHP all access a C or Java library for bcrypt which probably should have told me something.
I could either make a SqueakSource repository for all this or put it in the Cryptography package. Or I can email anyone the mcz files off list that would like them.
Let me know how to proceed when you get a chance.
Thanks
Paul
Hi Paul:
Sorry the delayed response, but I miss this mail in the Crypto list.
Having tried the Blowfish implementation, I think is very good and you should publish all the stuff (including Bcrypt) in the squeaksource Cryptography project. Unfortunately I'm only a developer and can't grant permits to you but I think that soon the administrators will do.
In the maintime if you can send me the latest .mcz of the Blowfish to continue playing with it I will appreciate.
Cheers and very good job.
Germán.
2011/4/26 Paul DeBruicker pdebruic@gmail.com:
Hi -
I've made a working implementation of the Blowfish algorithm in Pharo, a partially broken implementation of Bcrypt in Pharo, and a reliable way to access the linux crypt library using FFI in Pharo on linux.
At the moment it takes about 25 seconds to hash a password using my Bcrypt implementation in Pharo, which is about 50x too long. So I'm going to try to get a FFI version put together or just use SHA512 from the linux crypt library. I have learned a lot but don't expect to fix the improper hashing as I don't think the fix would cause a massive speed up. I think the hashing error is probably an off-by-one error in an array index in the BCrypt class. Ruby, Python, Lisp, PHP all access a C or Java library for bcrypt which probably should have told me something.
I could either make a SqueakSource repository for all this or put it in the Cryptography package. Or I can email anyone the mcz files off list that would like them.
Let me know how to proceed when you get a chance.
Thanks
Paul _______________________________________________ Cryptography mailing list Cryptography@lists.squeakfoundation.org http://lists.squeakfoundation.org/cgi-bin/mailman/listinfo/cryptography
Hi Germán and Paul,
I apologize too. I missed the request for Paul to be added. Paul I have added you as a developer on Cryptography.
Germán would you like to be an admin on the group?
Please let me know if you need anything else.
Ron Teitelbaum Cryptography Team Leader
-----Original Message----- From: cryptography-bounces@lists.squeakfoundation.org [mailto:cryptography-bounces@lists.squeakfoundation.org] On Behalf Of Germán Arduino Sent: Tuesday, May 03, 2011 6:31 PM To: Cryptography Team Development List Subject: Re: [Cryptography Team] Blowfish & Bcrypt in Smalltalk +
accessing
crypt(3) through FFI.
Hi Paul:
Sorry the delayed response, but I miss this mail in the Crypto list.
Having tried the Blowfish implementation, I think is very good and you
should
publish all the stuff (including Bcrypt) in the squeaksource Cryptography project. Unfortunately I'm only a developer and can't grant permits to you but I think that soon the administrators will do.
In the maintime if you can send me the latest .mcz of the Blowfish to continue playing with it I will appreciate.
Cheers and very good job.
Germán.
2011/4/26 Paul DeBruicker pdebruic@gmail.com:
Hi -
I've made a working implementation of the Blowfish algorithm in Pharo, a partially broken implementation of Bcrypt in Pharo, and a reliable way to access the linux crypt library using FFI in Pharo on linux.
At the moment it takes about 25 seconds to hash a password using my Bcrypt implementation in Pharo, which is about 50x too long. So I'm going to try to get a FFI version put together or just use SHA512 from the linux crypt library. I have learned a lot but don't expect to fix the improper hashing as I don't think the fix would cause a massive speed up. I think the hashing error is probably an off-by-one error in
an
array index in the BCrypt class.
Ruby, Python, Lisp, PHP all access a C or Java library for bcrypt which probably should have told me something.
I could either make a SqueakSource repository for all this or put it in the Cryptography package. Or I can email anyone the mcz files off list that would like them.
Let me know how to proceed when you get a chance.
Thanks
Paul _______________________________________________ Cryptography mailing list Cryptography@lists.squeakfoundation.org http://lists.squeakfoundation.org/cgi-bin/mailman/listinfo/cryptograph y
Cryptography mailing list Cryptography@lists.squeakfoundation.org http://lists.squeakfoundation.org/cgi-bin/mailman/listinfo/cryptography
Hi Ron:
2011/5/3 Ron Teitelbaum ron@usmedrec.com:
Hi Germán and Paul,
I apologize too. I missed the request for Paul to be added. Paul I have added you as a developer on Cryptography.
Germán would you like to be an admin on the group?
If you think I can help with this task, count me in. No problem at all.
Cheers. Germán.
Hi Germán,
OK I changed you to admin. Use the power carefully!
Ron
-----Original Message----- From: cryptography-bounces@lists.squeakfoundation.org [mailto:cryptography-bounces@lists.squeakfoundation.org] On Behalf Of Germán Arduino Sent: Wednesday, May 04, 2011 7:06 AM To: Cryptography Team Development List Subject: Re: [Cryptography Team] Blowfish & Bcrypt in Smalltalk +
accessing
crypt(3) through FFI.
Hi Ron:
2011/5/3 Ron Teitelbaum ron@usmedrec.com:
Hi Germán and Paul,
I apologize too. I missed the request for Paul to be added. Paul I have added you as a developer on Cryptography.
Germán would you like to be an admin on the group?
If you think I can help with this task, count me in. No problem at all.
Cheers. Germán. _______________________________________________ Cryptography mailing list Cryptography@lists.squeakfoundation.org http://lists.squeakfoundation.org/cgi-bin/mailman/listinfo/cryptography
Thanks Ron.
Don't worry, I will try to help, I think that Cryptography is a topic that is becoming more and more important in any area of software development and we need a good support on Squeak/Pharo.
Cheers.
2011/5/4 Ron Teitelbaum ron@usmedrec.com:
Hi Germán,
OK I changed you to admin. Use the power carefully!
Ron
-----Original Message----- From: cryptography-bounces@lists.squeakfoundation.org [mailto:cryptography-bounces@lists.squeakfoundation.org] On Behalf Of Germán Arduino Sent: Wednesday, May 04, 2011 7:06 AM To: Cryptography Team Development List Subject: Re: [Cryptography Team] Blowfish & Bcrypt in Smalltalk +
accessing
crypt(3) through FFI.
Hi Ron:
2011/5/3 Ron Teitelbaum ron@usmedrec.com:
Hi Germán and Paul,
I apologize too. I missed the request for Paul to be added. Paul I have added you as a developer on Cryptography.
Germán would you like to be an admin on the group?
If you think I can help with this task, count me in. No problem at all.
Cheers. Germán. _______________________________________________ Cryptography mailing list Cryptography@lists.squeakfoundation.org http://lists.squeakfoundation.org/cgi-bin/mailman/listinfo/cryptography
Cryptography mailing list Cryptography@lists.squeakfoundation.org http://lists.squeakfoundation.org/cgi-bin/mailman/listinfo/cryptography
cryptography@lists.squeakfoundation.org
-
Germán Arduino -
Paul DeBruicker -
Ron Teitelbaum