Cryptography April 2007

cryptography@lists.squeakfoundation.org

4 participants
6 discussions

New Cryptography Team Release on SqueakMap CTeam-1.01
by Ron Teitelbaum 29 Apr '07

29 Apr '07

Hello All, Rob Withers found a critical error in RSA Signatures that required that we release a new version to support SMIME. We released a new version of the Cryptography Team code on SqueakMap - CTeam-1.01. If you are using our code you are encouraged to upgrade. The current package for SMIME is located in a separated package in the Cryptography Repository on www.squeakSource.com. Thanks, Ron Teitelbaum Squeak Cryptography Team Leader

1 0

new version of the Cryptography package needs publishing to SqueakMap
by Robert Withers 28 Apr '07

28 Apr '07

In finally getting SMIME to work, I ran across a bug in the RSA signature code. There is a constructed message which is signed and it needs to be a particular length. I thought that this length was 128, but I learned it is actually 256. I made the changes and tested. Ron, could you please publish this new version to SqueakMap? thanks, Robert

1 0

Cryptography Team Package released on SqueakMap
by Ron Teitelbaum 23 Apr '07

23 Apr '07

All, The cryptography team has released a consolidated package on squeak map. This release is the result of hard work of the Cryptography Team. The latest team was formed in 2005. This release comes on 4/23/2007. Please see the squeak source repository for more cryptography including SSL and SMime. http://www.squeaksource.com/Cryptography.html. If you have an interest please come join the team http://lists.squeakfoundation.org/cgi-bin/mailman/listinfo/cryptography. - Ron Teitelbaum, Squeak Cryptography Team Leader, Ron(a)USMedRec.com The cryptography package provides some basic cryptographic algorithms and protocols. This change set integrates algorithms implemented by several members of the Squeak community, including Ron Teitelbaum, Robert Withers, Chris Muller, Hans-Martin Mosner, Leandro Caniglia, John Maloney, Duane Maxwell, Luciano Notarfrancesco and Carlos Sarraute. There isn't much documentation, but browsing the tests (CryptoTest) will give you a pretty good idea of how to use it. This package includes: . Symmetric key algorithms: DES, 3DES, AES (Rijndael), ARC4, ARC2 . Block cipher modes: CBC, CFB, OFB . Hash functions: MD4, MD5, SHA1, SHA256 . Public key algorithms: DSA, ElGamal, RSA . Other stuff: HMACs, Diffie-Hellman, a random pool, a secure prng, a primes finder . ASN.1 support . X509 v3 certificates . Support for PKCS Files Happy Coding! Ron Teitelbaum Squeak Cryptography Team Leader

1 0

RFC: Consolidating the Cryptography library for a general release
by Robert Withers 22 Apr '07

22 Apr '07

This is a request for comment on consolidating the Cryptography library for a general release. What I mean by that is consolidating to a single Monticello package, that would allow users to one-click load the basic library. Currently there is an implicit load order which most users don't know. We still don't have Configuration support so that isn't a solution right now. If this idea is supported, I suggest we look at all the packages and decide which are "in", then generate the Cryptography package with these packages loaded. Those packages that are not included, like Cryptography-SMIME for instance, should really be renamed to not have the Cryptography- prefix. The old versions can be deleted to keep things clean. Those packages that are selected, and are determined to be complete, could be deleted as independent packages and we would just rely on them being in the consolidated package and develop there when needed. After this first step is completed, we could reassign the classes to a more compact categorization. Below is a list of the packages. Please vote and if your vote is yes, what are your package recommendations as described below. Rob Packages: Those with a '*' in front are my suggestions as to which is to be included in Cryptography. Those with a '!' in front are my suggestions as to which should be renamed away from Cryptography-. Those with a '+++' are candidates for deletion, since they have been superseded. * Cryptography-ARC2 * Cryptography-ASN1 * Cryptography-Core * Cryptography-DES * Cryptography-DSA * Cryptography-ElGamal * Cryptography-MD4 * Cryptography-MD5 * Cryptography-PKCS12 * Cryptography-RC4 * Cryptography-RSA * Cryptography-RandomAndPrime * Cryptography-Rijndael * Cryptography-SHA1 * Cryptography-SHA256 ! Cryptography-SMIME ! Cryptography-SSL * Cryptography-Tests * Cryptography-X509 +++Fortuna (this exists in RandomAndPrime) ! Cryptography-MSCerts +++Cryptography-TLS (this is superseded by SSL) OpenPGP

4 9

aRC2 is done!
by Ron Teitelbaum 06 Apr '07

06 Apr '07

Hello all, We now have an implementation of aRC2 called ARC2. All the tests pass! It turns out that the hardest part was endianess! Once I realized I missed that part it all worked. Ron Teitelbaum Squeak Cryptography Team Leader

1 0

2 failing tests using CBC
by Robert Withers 01 Apr '07

01 Apr '07

I was running the unit tests and I noticed that 2 of my own tests are now failing. This wasn't the case 6 months ago. One test is for DES- CBC and the other is for TripleDES-CBC. Did some code change in this area recently? Here is a little detail for the test #testDESCBC startBuffer = a ByteArray(1 35 69 103 137 171 205 231) 1st encrypt = a ByteArray(157 97 0 32 114 216 222 93) 1st decrypt = a ByteArray(1 50 103 84 205 254 171 144) 2nd encrypt = a ByteArray(14 235 75 121 46 119 224 35) 2nd decrypt = a ByteArray(1 50 103 84 205 254 171 144) What is strange is that while the 1st decrypt is different than the startBuffer, the 2nd decrypt equals the first decrypt. This is true even though the corresponding encrypts are different. Anyway, the 1st decrypt is sufficient to show a problem. Could someone look into this who has DES knowledge? I am away for the next week, so I won't be able to respond. thanks, Robert

2 2

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

Cryptography April 2007