Cryptography November 2006

cryptography@lists.squeakfoundation.org

8 participants
23 discussions

rsa e=3
by Ron Teitelbaum 22 Nov '06

22 Nov '06

Here is another reference to look at: http://www1.ietf.org/mail-archive/web/cfrg/current/msg01299.html "The draft revision of the US Federal digital signature standard, Draft FIPS 186-3, requires that the RSA public exponent e be an odd positive integer >= 65,537. See Appendix B.3.1 Criteria for IFC Key Pairs on p. 61: (b) The exponent e shall be an odd positive integer such that 65,537 <= e < 2**(nlen - 2*security_strength) where nlen is the length of the modulus n in bits. http://csrc.nist.gov/publications/drafts.html#fips186-3 http://csrc.nist.gov/publications/drafts/fips_186-3/Draft-FIPS-186-3%20_Marc h2006.pdf " Ron Teitelbaum

1 0

FW: Daap Open Source Project for Squeak
by Ron Teitelbaum 07 Nov '06

07 Nov '06

Yann, Unfortunately it appears that Apple does not provide a license for this type of programming. I suggest that you do not do this project and that you do not count on any open source project that provides a DAAP protocol as being truly open source. I'm sorry we can not help you more since it does sound like a cool project. Hopefully Apple will work out a way to engage the OS community in the future. Please feel free to join us on other Cryptography projects. We can use all the help we can get. Ron Teitelbaum Squeak Cryptography Team Leader -----Original Message----- From: Craig Keithley Sent: Tuesday, November 07, 2006 11:58 AM To: Ron(a)USMedRec.com Hello, Ron, > One of the cryptography team members has an interest in developing a package > which includes the DAAP protocol. I'm sorry to say that there isn't any way to approach this that will result in receiving Apple's blessing to do this. The DAAP protocol isn't presently available for license from Apple, and we aren't able to provide a legal release or license for 3rd parties to create open or closed source implementations. So, with regrets, there's no help or direction that I can provide. Best regards, Craig -- Craig Keithley iPod, I/O, & Security Technology Evangelist Worldwide Developer Relations > From: Ron Teitelbaum <Ron(a)USMedRec.com> > Organization: US Medical Records Specialists > Date: Tue, 07 Nov 2006 11:03:26 -0500 > > To Whom It May Concern: > > My name is Ron Teitelbaum and I am the Cryptography Team leader for the open > source project Squeak (www.squeak.org <http://www.squeak.org/> ). One of the > cryptography team members has an interest in developing a package which > includes the DAAP protocol. We found this email address while researching our > options for developing and redistributing the code under an open source > license. > > We would be interested in our options for redistributing a DAAP implementation > under open source licenses. Our preference would be to use the MIT license > http://www.opensource.org/licenses/mit-license.php , but of course we will > review any terms or conditions that you may have. > > Thank you for any help and direction you can give us, > > Ron Teitelbaum > Squeak Cryptography Team Leader >

1 0

Daap Implementation
by Yann Monclair 07 Nov '06

07 Nov '06

(Sorry if this is a resend, it seems I sent the first email before being completely registered to the mailing list, it must have been moderated.) Hello, I just started an implementation of the Digital Audio Access Protocol [1] in Squeak. This protocol is used by Apples iTunes [2] to share music over a lan. I found very little documentation[3] on this protocol, since Apple has decided not to disclose the documentation on its specifics. I have published the little code I wrote so far on SqueakSource [4]. I am stuck after the login request. As I understand it, iTunes doesn't send you the session-id, but an encrypted id, leaving you to decrypt it. Unfortunately, Apple added some byte switching or something to the classic MD5 encryption (I'm far from an expert in crypto, so I might not be using the appropriate vocabulary). I found a c library to connect to daap shares [5], but I didn't really get, even after looking at the code. I would appreciate any help to figure this session-id thing out :) I think having a daap implementation in Squeak, can be really useful for multimedia purposes, and we could probably find cool applications :p Here the code I write in a workspace to get a daapsession DaapSession connectTo: 'localhost'. this will return a DaapSession knowing the server, the content codes (typing info) and a DaapLogin. the encrytped session-id is accessible via DaapSession>>sid (or DaapLogin>>mlid) Thanks, Yann [1] http://en.wikipedia.org/wiki/Digital_Audio_Access_Protocol [2] http://www.apple.com/itunes/overview/ [3] http://tapjam.net/daap/ [4] http://www.squeaksource.com/daap.html [5] http://crazney.net/programs/itunes/authentication.html

2 5

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

Cryptography November 2006