[Cryptography Team] new Cryptography package,
usable in squeak and pharo (was Re: Announce: whisper updated)
Ron Teitelbaum
ron at usmedrec.com
Tue Oct 18 14:35:26 UTC 2016
Hi Rob!
I’ve uploaded the version you posted to squeak source. Thanks for all your work!
I’m not sure if you can register a new account on squeaksource but if you do I’m happy to add you as admin.
All the best,
Ron
From: cryptography-bounces at lists.squeakfoundation.org [mailto:cryptography-bounces at lists.squeakfoundation.org] On Behalf Of Robert Withers
Sent: Monday, October 17, 2016 9:22 PM
To: Cryptography Mailing List
Subject: [Cryptography Team] new Cryptography package, usable in squeak and pharo (was Re: Announce: whisper updated)
I wanted to give you a heads up about my new effort at SecureSession, below, renamed to whisper from old days. In the course of development, I consolidated the Cryptography package and conformed it to be installable into both squeak or pharo, by ensuring the RandomGenerator class>>#unpredictableStringsDo: works in both environments. In addition, I added a more artifacts I developed in whisper, including RSA <-> Asn1 module definitions, a PBEEncryptor and a PBKDF2WithHmacSHA1 keyy derevation function. A couple of tests were also added.
Unfortunately, I lost my password to the Cryptography squeaksource site and so I am unable to push the new code there. If someone could help me reset that password, that would be quite helpful; I asked on list to no avail and it may not be possible.
The biggest help would be to get this new version in play, if someone could load it: https://jumpshare.com/v/f4HwsX5nzEKQkeSaly7y and push to the canonical Cryptography repo on squeaksource.
Follows is a list of changes made, which does include some protocol changes to ASN1 for marshalling and hydration, conforming to #asAsn1DerBytes and @fromAsn1DerBytes:.
Cryptography is now the shared package between Squeak and Pharo
- RandomGenerator class>>#unpredictableStringsDo: changed details to be squeak/pharo compliant (see comment)
- senders/implementers of #asAsn1Bytes (removed) changed to #asAsn1DerBytes
- senders/implementers of #fromAsn1Bytes: (removed) changed to #fromAsn1DerBytes:
- X509Certificate class>>#fromFile: changed use of #fromBytes: (removed) to #fromAsn1DerBytes:
- X509CertificateDerReader>>#asCertificate changed use of #fromBytes: (removed) to #fromAsn1DerBytes:
- all CryptoX509Test>>#certificateX changed use of #fromBytes: (removed) to #fromAsn1DerBytes:
- moved asn1 module definitions and support accessers for RSA and DSA Keys to Cryptography
- changed DiffieHellman>>sendMessage to use SecureRandom>>#nextBits: to keep bitSize
- added CryptoHashFunctionTest tests for HMAC Specs
- added String>>#padLeftTo:with: for squeak
- fixed padding mode to set and retrieve the IV vector
kind regards,
Rob
On 10/16/2016 7:22 PM, Robert Withers wrote:
Folks, I have updated whisper or SecureSession to provide Java/Squeak/Pharo interoperability. I am no longer able to access the Cryptography repo so I cannot push code, but the squeak/pharo code is in the squeak-pharo directory in the whisper github project. Here is the GitPages link: https://robertwithers.github.io/whisper, with all other links.
whisper is osi Layer 5 SecureSession with modern crypto: Java/Squeak/Pharo interoperability.
* flips normative osi layer 5 and 6 on its head: now, 5 is crypto and 6 is session state resumption
* 3-way DH-2048/RSA-2048/RSAPublicKey ASN1DER encoding
* 256-bit AES/CBC/PKCS7Padding, 128-bit IV, 160-bit SHA1 E&M
* PBEEncryptorAES-256 with PBKDF2WithHmacSHA1
Rob
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.squeakfoundation.org/pipermail/cryptography/attachments/20161018/f177d540/attachment.htm
More information about the Cryptography
mailing list