Cryptography March 2007

cryptography@lists.squeakfoundation.org

5 participants
12 discussions

2 failing tests using CBC
by Robert Withers 01 Apr '07

01 Apr '07

I was running the unit tests and I noticed that 2 of my own tests are now failing. This wasn't the case 6 months ago. One test is for DES- CBC and the other is for TripleDES-CBC. Did some code change in this area recently? Here is a little detail for the test #testDESCBC startBuffer = a ByteArray(1 35 69 103 137 171 205 231) 1st encrypt = a ByteArray(157 97 0 32 114 216 222 93) 1st decrypt = a ByteArray(1 50 103 84 205 254 171 144) 2nd encrypt = a ByteArray(14 235 75 121 46 119 224 35) 2nd decrypt = a ByteArray(1 50 103 84 205 254 171 144) What is strange is that while the 1st decrypt is different than the startBuffer, the 2nd decrypt equals the first decrypt. This is true even though the corresponding encrypts are different. Anyway, the 1st decrypt is sufficient to show a problem. Could someone look into this who has DES knowledge? I am away for the next week, so I won't be able to respond. thanks, Robert

2 2

PKCS-12 support in X509
by Robert Withers 30 Mar '07

30 Mar '07

Ron and all, I just published a framework for decoding and decrypting PKCS12 files, in order to gain access t the private key. It is pretty hackish, since I assume encryption algorithms, the private key is RSA and the like, but it works for the example file you gave me, Ron. Load all current packages from the repository and then run: (Pkcs12PrivateKeyFileReader fromFile: pkcs12FileName) asPrivateKey and it will return the RSAPrivateKey. That KDF was a bitch! cheers, Robert

2 5

Reading ssh pub/private keys
by Bert Freudenberg 30 Mar '07

30 Mar '07

Hi folks, I have an ssh-format keypair and would like to extract the (p,q,g,x) and (p,q,g,y) DSA tuples from that. The private key looks like this: -----BEGIN DSA PRIVATE KEY----- MIIBuwIB..............XCIa3cIp -----END DSA PRIVATE KEY----- and the public key: ssh-dss AAAAB3NzaC1k.........nNEnWCasjXraVA== So this looks like Base64-encoded numbers, but how are they encoded? The only reference I found was this: http://www.openssh.com/txt/draft-ietf-secsh-publickeyfile-02.txt But it does not detail how the "binary blob" translates to DSA tuples. - Bert -

2 7

new version of X509 with full CertificateExtension decoding
by Robert Withers 29 Mar '07

29 Mar '07

hi all, I just published a new version of X509. This version decodes all CertificateExtensions, using the new ASN.1 Type stream. I defined the ASN.1 in both the X509Certificate and X509CertificateExtension classes. Note that if you are loading the newer version of X509 on top of an older version, you should run the initialize methods of both of those classes by hand, since Monticello doesn't do it for us. Notice below the new #assign:from: method, which allows us to assign one user defined type spec to another, as in: (ASN1Module name: #x509) assign: #CertificateIssuer from: #GeneralNames. Rob And here is the Type Specification for X509, for your pleasure! "-- Certificate --" ((ASN1Module name: #x509) sequence: #Certificate mapping: X509Certificate) add: #tbsCertificate type: #TBSCertificate; add: #signatureAlgorithm type: #AlgorithmIdentifier; add: #signature type: #ASN1BitStringType; yourself. (ASN1Module name: #x509) find: #Certificate. ((ASN1Module name: #x509) sequence: #TBSCertificate mapping: X509TBSCertificate) add: #version type: #Version explicitTag: 0 default: 0; add: #serialNumber type: #CertificateSerialNumber; add: #signature type: #AlgorithmIdentifier; add: #issuer type: #Name; add: #validity type: #Validity; add: #subject type: #Name; add: #subjectPublicKeyInfo type: #SubjectPublicKeyInfo; addOptional: #issuerUniqueID type: #UniqueIdentifier implicitTag: 1; addOptional: #subjectUniqueID type: #UniqueIdentifier implicitTag: 2; addOptional: #extensions type: #Extensions explicitTag: 3; yourself. ((ASN1Module name: #x509) sequence: #AlgorithmIdentifier mapping: X509AlgorithmIdentifier) add: #oid type: #ASN1ObjectIdentifierType; addOptional: #parameters type: #ASN1AnyType; yourself. (ASN1Module name: #x509) integer: #Version. (ASN1Module name: #x509) integer: #CertificateSerialNumber. (ASN1Module name: #x509) bitString: #UniqueIdentifier. (ASN1Module name: #x509) sequence: #Extensions of: #Extension. ((ASN1Module name: #x509) sequence: #SubjectPublicKeyInfo mapping: X509SubjectPublicKeyInfo) add: #algorithm type: #AlgorithmIdentifier; add: #subjectPublicKey type: #ASN1BitStringType; yourself. ((ASN1Module name: #x509) sequence: #Validity mapping: X509Validity) add: #notBefore type: #Time; add: #notAfter type: #Time; yourself. (ASN1Module name: #x509) utcTime: #Time. ((ASN1Module name: #x509) choice: #Name) add: #names type: #RDNSequence. (ASN1Module name: #x509) sequence: #RDNSequence of: #RelativeDistinguishedName. (ASN1Module name: #x509) set: #RelativeDistinguishedName of: #AttributeTypeAndValue. ((ASN1Module name: #x509) sequence: #Extension mapping: X509CertificateExtension) add: #extnId type: #ASN1ObjectIdentifierType; addOptional: #extnCritical type: #ASN1BooleanType default: false; add: #extnValue type: #ASN1ByteArrayType; yourself. ((ASN1Module name: #x509) sequence: #AttributeTypeAndValue mapping: X520Attribute) add: #attrOid type: #AttributeType; add: #attrValue type: #AttributeValue; yourself. ((ASN1Module name: #x509) sequence: #Attribute mapping: X520Attribute) add: #attrOid type: #AttributeType; add: #attrValue type: #AttributeValues; yourself. (ASN1Module name: #x509) set: #AttributeValues of: #AttributeValue. (ASN1Module name: #x509) objectIdentifier: #AttributeType. ((ASN1Module name: #x509) any: #AttributeValue definedBy: #attrOid) at: (ASN1ObjectId fromString: '2.5.4.41') put: #X520Name; at: (ASN1ObjectId fromString: '2.5.4.4') put: #X520Name; at: (ASN1ObjectId fromString: '2.5.4.42') put: #X520Name; at: (ASN1ObjectId fromString: '2.5.4.43') put: #X520Name; at: (ASN1ObjectId fromString: '2.5.4.44') put: #X520Name; at: (ASN1ObjectId fromString: '2.5.4.3') put: #X520CommonName; at: (ASN1ObjectId fromString: '2.5.4.7') put: #X520LocalityName; at: (ASN1ObjectId fromString: '2.5.4.8') put: #X520StateOrProvinceName; at: (ASN1ObjectId fromString: '2.5.4.10') put: #X520OrganizationName; at: (ASN1ObjectId fromString: '2.5.4.11') put: #X520OrganizationalUnitName; at: (ASN1ObjectId fromString: '2.5.4.6') put: #X520CountryName; at: (ASN1ObjectId fromString: '1.2.840.113549.1.9.1') put: #X520Pkcs9EmailAddress; defaultType: #ASN1StringType; yourself. ((ASN1Module name: #x509) choice: #X509StringChoice) add: #teletexString type: #ASN1TeletexStringType; add: #printableString type: #ASN1PrintableStringType; add: #universalString type: #ASN1UniversalStringType; add: #utf8String type: #ASN1StringType; add: #bmpString type: #ASN1BMPStringType; yourself. ((ASN1Module name: #x509) mapped: #X520Name) mapping: X520Name mappingSymbol: #string type: #X509StringChoice. ((ASN1Module name: #x509) mapped: #X520CommonName) mapping: X520CommonName mappingSymbol: #string type: #X509StringChoice. ((ASN1Module name: #x509) mapped: #X520LocalityName) mapping: X520LocalityName mappingSymbol: #string type: #X509StringChoice. ((ASN1Module name: #x509) mapped: #X520StateOrProvinceName) mapping: X520StateOrProvinceName mappingSymbol: #string type: #X509StringChoice. ((ASN1Module name: #x509) mapped: #X520OrganizationName) mapping: X520OrganizationName mappingSymbol: #string type: #X509StringChoice. ((ASN1Module name: #x509) mapped: #X520OrganizationalUnitName) mapping: X520OrganizationalUnitName mappingSymbol: #string type: #X509StringChoice. ((ASN1Module name: #x509) mapped: #X520CountryName) mapping: X520CountryName mappingSymbol: #string type: #ASN1PrintableStringType. ((ASN1Module name: #x509) mapped: #X520Pkcs9EmailAddress) mapping: X520Pkcs9EmailAddress mappingSymbol: #string type: #ASN1IA5StringType. "-- CertificateExtension --" ((ASN1Module name: #x509) sequence: #AuthorityKeyIdentifier mapping: X509AuthorityKeyIdentifier) addOptional: #keyIdentifier type: #KeyIdentifier implicitTag: 0; addOptional: #certIssuer type: #GeneralNames implicitTag: 1; addOptional: #certSerialNumber type: #CertificateSerialNumber implicitTag: 2; yourself. (ASN1Module name: #x509) byteArray: #KeyIdentifier. (ASN1Module name: #x509) sequence: #GeneralNames of: #GeneralName. ((ASN1Module name: #x509) choice: #GeneralName) add: #otherName type: #AnotherName implicitTag: 0; add: #rfc822Name type: #ASN1IA5StringType implicitTag: 1; add: #dNSName type: #ASN1IA5StringType implicitTag: 2; " add: #x400Address type: #ORAddress implicitTag: 3;" add: #directoryName type: #Name explicitTag: 4; add: #ediPartyName type: #EDIPartyName implicitTag: 5; add: #uniformResourceIdenifier type: #ASN1IA5StringType implicitTag: 6; add: #iPAddress type: #ASN1ByteArrayType implicitTag: 7; add: #registeredID type: #ASN1ObjectIdentifierType implicitTag: 8; yourself. ((ASN1Module name: #x509) sequence: #AnotherName mapping: X509AnotherName) add: #typeId type: #ASN1ObjectIdentifierType; add: #value type: #ASN1AnyType explicitTag: 0; yourself. ((ASN1Module name: #x509) sequence: #EDIPartyName mapping: X509EDIPartyName) addOptional: #nameAssigner type: #X509StringChoice implicitTag: 0; add: #partyName type: #X509StringChoice implicitTag: 1; yourself. (ASN1Module name: #x509) bitString: #KeyUsage. ((ASN1Module name: #x509) sequence: #PrivateKeyUsagePeriod mapping: X509Validity) addOptional: #notBefore type: #ASN1UTCTimeType implicitTag: 0; addOptional: #notAfter type: #ASN1UTCTimeType implicitTag: 1; yourself. (ASN1Module name: #x509) sequence: #CertificatePolicies of: #PolicyInformation. ((ASN1Module name: #x509) sequence: #PolicyInformation mapping: X509PolicyInformation) add: #id type: #CertPolicyId; addOptional: #qualifiers type: #PolicyQualifierInfos; yourself. (ASN1Module name: #x509) objectIdentifier: #CertPolicyId. (ASN1Module name: #x509) sequence: #PolicyQualifierInfos of: #PolicyQualifierInfo. ((ASN1Module name: #x509) sequence: #PolicyQualifierInfo mapping: X509PolicyQualifierInfo) add: #id type: #ASN1ObjectIdentifierType; add: #qualifier type: #ANS1AnyType; yourself. (ASN1Module name: #x509) sequence: #PolicyMappings of: #PolicyMapping. ((ASN1Module name: #x509) sequence: #PolicyMapping mapping: X509PolicyMapping) add: #issuerDomainPolicy type: #CertPolicyId; add: #subjectDomainPolicy type: #CertPolicyId; yourself. (ASN1Module name: #x509) assign: #SubjectAltName from: #GeneralNames. (ASN1Module name: #x509) assign: #IssuerAltName from: #GeneralNames. (ASN1Module name: #x509) sequence: #SubjectDirectoryAttributes of: #Attribute. ((ASN1Module name: #x509) sequence: #BasicConstraints mapping: X509BasicConstraints) add: #ca type: #ASN1BooleanType default: false; addOptional: #pathLengthConstraint type: #ASN1IntegerType; yourself. ((ASN1Module name: #x509) sequence: #NameConstraints mapping: X509NameConstraints) addOptional: #permittedSubtrees type: #GeneralSubtrees implicitTag: 0; addOptional: #excludedSubtrees type: #GeneralSubtrees implicitTag: 1; yourself. (ASN1Module name: #x509) sequence: #GeneralSubtrees of: #GeneralSubtree. ((ASN1Module name: #x509) sequence: #GeneralSubtree mapping: X509GeneralSubtree) add: #base type: #GeneralName; add: #minimum type: #BaseDistance implicitTag: 0 default: 0; addOptional: #maximum type: #BaseDistance implicitTag: 1; yourself. (ASN1Module name: #x509) integer: #BaseDistance. ((ASN1Module name: #x509) sequence: #PolicyConstraints mapping: X509PolicyConstraints) addOptional: #requireExplicitPolicy type: #SkipCerts implicitTag: 0; addOptional: #inhibitPolicyMapping type: #SkipCerts implicitTag: 1; yourself. (ASN1Module name: #x509) integer: #SkipCerts. (ASN1Module name: #x509) sequence: #CRLDistributionPoints of: #DistributionPoint. ((ASN1Module name: #x509) sequence: #DistributionPoint mapping: X509DistributionPoint) addOptional: #distributionPoint type: #DistributionPointName explicitTag: 0; addOptional: #reasons type: #ReasonFlags implicitTag: 1; addOptional: #cRLIssuer type: #GeneralNames implicitTag: 2; yourself. ((ASN1Module name: #x509) choice: #DistributionPointName) add: #fullName type: #GeneralNames implicitTag: 0; add: #nameRelativeToCRLIssuer type: #RelativeDistinguishedName implicitTag: 1; yourself. (ASN1Module name: #x509) bitString: #ReasonFlags. (ASN1Module name: #x509) sequence: #ExtKeyUsageSyntax of: #KeyPurposeId. (ASN1Module name: #x509) objectIdentifier: #KeyPurposeId. (ASN1Module name: #x509) assign: #InhibitAnyPolicy from: #SkipCerts. (ASN1Module name: #x509) assign: #FreshestCRL from: #CRLDistributionPoints. (ASN1Module name: #x509) sequence: #AuthorityInfoAccessSyntax of: #AccessDescription. ((ASN1Module name: #x509) sequence: #AccessDescription mapping: X509AccessDescription) add: #accessMethod type: #ASN1ObjectIdentifierType; add: #accessLocation type: #GeneralName; yourself. (ASN1Module name: #x509) sequence: #SubjectInfoAccessSyntax of: #AccessDescription. (ASN1Module name: #x509) integer: #CRLNumber. ((ASN1Module name: #x509) sequence: #IssuingDistributionPoint mapping: X509IssuingDistributionPoint) addOptional: #distributionPoint type: #DistributionPointName explicitTag: 0; add: #onlyContainsUserCerts type: #ASN1BooleanType implicitTag: 1 default: false; add: #onlyContainsCACerts type: #ASN1BooleanType implicitTag: 2 default: false; addOptional: #onlySomeReasons type: #ReasonFlags implicitTag: 3; add: #indirectCRL type: #ASN1BooleanType implicitTag: 4 default: false; add: #onlyContainsAttributeCerts type: #ASN1BooleanType implicitTag: 5 default: false; yourself. (ASN1Module name: #x509) assign: #BaseCRLNumber from: #CRLNumber. " (ASN1Module name: #x509) enumerated: #CRLReason." (ASN1Module name: #x509) assign: #CertificateIssuer from: #GeneralNames. (ASN1Module name: #x509) objectIdentifier: #HoldInstructionCode. (ASN1Module name: #x509) utcTime: #InvalidityDate.

1 0

the new Type-based ASN1 Stream implementation
by Robert Withers 26 Mar '07

26 Mar '07

With inspiration from VW, I've implemented a new ASN1 Stream and associated Type hierarchy. I briefly explain the new system below. This has been published alongside the existing ASN1Value implementation, in the Cryptography repository, so that users of ASN1Value won't currently be impacted. However, I would like to deprecate the old implementation this week, so this is a call to port uses of ASN1Value to ASN1DERStream. Please contact me if you are a user and I will help you port your code. I will be porting the X509 Certificate implementation over the next few days, so users of this framework should also contact me, as the public api will change. The new ASN1 framework has a Type hierarchy that supports both basic types and user-defined types. The support for basic types is sufficient to replace the current ASN1Value impl. Below are the replacements. ASN1Value fromAsnDer: stream. becomes (ASN1DERStream onStream: stream) decode. and anASN1Value encodeAsnDer becomes ASN1DERStream new encode: anASN1Value. The user-defined types are stored in an instance of an ASN1Module, for each module defined in the image. For instance, the X509 Module is registered as #x509. To access the forthcoming Certificate type definition in the X509 Module (I have to port X509 first), you would write: type := (ASN1Module name: #x509) find: #Certificate. In defining a type, you can specify a base type with an new name, or you can specify sequences and other constructs. With sequences, you can add a mapping class, so the elements of the sequence will be set to various ivars. You can add elements with optional, default or explicit and implicit tagging. Here is a sample of a user-defined type, a sequence, mapped to an ASN1TestModel, and a Boolean element mapped to the #testSlot1 ivar: ((ASN1Module name: #test) sequence: #TestSequence) add: #testSlot1 type: #ASN1BooleanType; mapping: ASN1TestModel; yourself. Now you can encode and decode using the defined Type, and this will marshal all values into ivars defined on various mapping classes. Here is the corresponding code: type := (ASN1Module name: #test) find: #TestSequence. obj := (ASN1DERStream onBytes: bytes) decodeWithType: type. and type := (ASN1Module name: #test) find: #TestSequence. bytes := ASN1DERStream new encode: obj withType: type. Additional examples, especially of the variety of basic types and user-defined type specifications, can be found in the CryptoASN1Test, once you have loaded the latest Cryptography-ASN1 and Cryptography- Tests. enjoy!

2 1

Chris Muller has a new e-mail address
by Chris Muller 23 Mar '07

23 Mar '07

My old e-mail address has been having problems, my new address is: ma.chris.m (at) gmail.com Please send all future e-mail correspondence to this address. If you've sent something to my old address in the last month or so, I may not have received it. If you are obliged, I would be happy to read it at my new address. Thank you. - Chris Muller

1 0

Re: [Cryptography Team] Debugging SSL on Linux
by Robert Withers 22 Mar '07

22 Mar '07

On Mar 21, 2007, at 10:15 AM, Ron Teitelbaum wrote: > What do you think? Does changing 160 to > ANS1ExplicitContextValueConstructed fix things? I suppose that we > could also, if it makes sense, extend the ECV functionality to > include handling multiple values if bit 6 = 1 and eliminate some > duplication of code (i.e. isPrimitive, but does isPrimitive make > sense for ECVC?) I am trying to find out the intersection of Explicit/Implicit and Primitive/Constructed. I think what I am learning is that the Primitive/Constructed is represented in the tag of a Triplet, but the Explicit/Implicit is a property of the Type Module defining user types. We don't have any representation of that, since we are wrapping it all in an ASN1ExplicitContextValue. I am still wrapping both Primitive and Constructed, but I took you advice and allowed Constructed types to have more than one value - i.e. an Implicit Sequence We really need to do what you were working on it seems with your ASN1DefinitionModel. We need to be able to provide the Type definition to the parser, which is just the #fromAsnDer: method, and allow the BER to be mapped to user classes. Big job. Rob

2 2

Debugging SSL on Linux
by Ron Teitelbaum 21 Mar '07

21 Mar '07

Hello everyone, Can anyone help debugging SSL on Linux? This is from Norbert: I'm using it on linux with squeak vm 3.9-8 #5 Tue Oct 10 11:56:09 PDT 2006 gcc 4.0.3 Squeak3.9alpha of 4 July 2005 [latest update: #7021] Linux ubuntu 2.6.15-27-386 #1 PREEMPT Sat Sep 16 01:51:59 UTC 2006 i686 GNU/Linux default plugin location: /usr/local/lib/squeak/3.9-8/*.so and a stock 3.9 7067 image. I tried using a fresh copy of the image but the errors stay the same errors. I tried using the url that Norbert gave and it worked fine on Windows. 'https://home.selfish.org <https://home.selfish.org/> ' asUrl retrieveContents. Could someone try this on Linux and see if they can help provide info as to what is going wrong. I suspect that the client hello is causing the server to disconnect. Maybe an Endian issue? Thanks, Ron Teitelbaum Squeak Cryptography Team Leader

2 8

SSL.RJT.113
by Ron Teitelbaum 21 Mar '07

21 Mar '07

All, I figured out why I was on the wrong version, I made some small changes and released them locally instead of to the repository. I added SSLSendError in SSL.113. Ron Teitelbaum

1 0

Re: [Cryptography Team] Debugging SSL on Linux
by Robert Withers 21 Mar '07

21 Mar '07

That's great Norbert. Could you also test with: ASN.27 SSL.111 X509.33 I fixed a bug and turned off a feature that were causing problems. I have been unable to connect to your server in all cases. thanks, Robert On Mar 21, 2007, at 1:23 AM, Norbert Hartl wrote: > On Tue, 2007-03-20 at 15:25 -0700, Robert Withers wrote: >> Hey Ron, >> >> >> You are back on the SSL version. The latest is SSL.111. You are >> missing all of the Certificate validation code that I put in and this >> is why you are able to connect, since all of the problems in this >> case >> are with validation. Since you have the latest X509, you are >> decoding >> the CertificateExtensions, which would expose problems 2 and 3, but >> you aren't encoding them for signature validation, per the above >> reason, so you never have a problem. >> >> >> Norbert, if you load SSL.109 it should work, while we get this issue >> fixed. This is just missing a lot of security. >> >> > Yes, with 109 I can connect to my server and retrieve a document. > > Thanks very much, > > Norbert >

1 0

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

Cryptography March 2007