[Cryptography Team] modernizing Cryptography

[Ron Teitelbaum]

Hi Robert!

Hope you are doing well and are happy!  I'm always interested in Crypto!
For the work that I'm doing, we don't use Crypto shipped inside Squeak
instead we use the Cryptographic modules available from the OS to do the
work.  This has a number of really good benefits.  First, it eliminates the
needed to ship cryptography and comply with the US restrictions and second,
it helps to ensure that the modules are as current as possible (they are
updated by the OS Provider (Microsoft, Windows, and Linux Provider).  This
is mainly the reason that I stopped working on the Squeak code.  That being
said the www.squeaksource.com repository is registered with the US
Government as an opensource repository for holding restricted code. I don't
see any reason to not update the code.  (Please be advised that I'm not a
lawyer and if you or anyone contributes to the repository or uses the code
and especially ships a product containing cryptographic code you are
responsible to understand and follow the laws that apply in your country).

I might be interested in implementing SHA512.  I did the SHA256.  What did
you have in mind?  Is there some way that I can help coordinate our efforts?

All the best,

Ron Teitelbaum


On Fri, Jun 21, 2019 at 4:36 PM Robert <robert.withers at protonmail.com>
wrote:

> Is there anyone out there who still finds Squeak/Pharo to be a delight and
> which you wish to have modern facilities and capabilities? Cryptography
> needs some more attention to gain more modern crypto algorithms. I would
> greatly appreciate any further efforts to this end that any of you might
> commit toward delivery. As I said earlier, there is SHA512, some elliptical
> Diffie-Hellman found in TLS 1.3 and some KDF and asymmetric public/private
> keys (ECPublicKey/ECPrivateKey) used in Signal.Also  the Blowfish
> implementation is no0t part of the BlockCipher hierarchy.
>
> I am hoping this request may result in some discussion, here on this
> Crypto list.
>
> Kindly,
> Robert
>
>
> _______________________________________________
> Cryptography mailing list
> Cryptography at lists.squeakfoundation.org
> http://lists.squeakfoundation.org/cgi-bin/mailman/listinfo/cryptography
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.squeakfoundation.org/pipermail/cryptography/attachments/20190621/3d5fd853/attachment.html>