Cryptography December 2015

cryptography@lists.squeakfoundation.org

6 participants
18 discussions

squeak & pharo versions of crypto and SecureSession
by Robert Withers 12 Dec '15

12 Dec '15

Folks, I cross-tested with Pharo and here are the good versions: Cryptography - squeak: Cryptography-rww.49.mcz - pharo: Cryptography-Pharo-rww.38.mcz SecureSession: - squeak & pharo: SecureSession-RobertWithers.20.mcz I hope this helps, Robert

1 0

The new github team for squeak cryptography documentation
by Robert Withers 11 Dec '15

11 Dec '15

Allow me to welcome you all to join the SqueakCryptographySquad[1] at github. I created this team and added this SecureSession[2] code[3] I've released. Please join this team and if you care to and have the inspired time, document a little of the parts we have here. Thank you for all your dedicated efforts towards excellence. You finished this work 9 years ago! Best regards, Robert --- [1] https://github.com/SqueakCryptographySquad [2] https://github.com/SqueakCryptographySquad/Mushroom/wiki/SecureSession [3] http://www.squeaksource.com/Cryptography.html

2 2

SecureSession version 9 is officially released
by Robert Withers 09 Dec '15

09 Dec '15

Good evening, After some sprints over the past couple of days, the SecureSession project has reached an Official Release. This project implements a Certificateless secure connection, with no third parties. It is a 6 leg handshake. Here is the wiki: https://github.com/SqueakCryptographySquad/Mushroom/wiki/SecureSession thank You, Robert

1 0

Re: [Vm-dev] Re: [squeak-dev] Crypto plugins for ubuntu 32-bits
by Robert Withers 08 Dec '15

08 Dec '15

On 12/05/2015 08:13 PM, David T. Lewis wrote: > > On Sat, Dec 05, 2015 at 07:21:47PM -0500, David T. Lewis wrote: >> >> DSAPlugin class is in VMMaker, and also in the Cryptography repository. The >> one in VMMaker seems to compile cleanly, but the one in Cryptography does not >> (at least not in my trunk VMM / cmake / 64-bit linux environment). I did not >> look closely for the reason, but I want to ask first if the DSAPlugin >> belongs in VMMaker, or should it live in in the Cryptography repository? >> > I need to correct what I said here. The DSAPlugin in Cryptography *does* > compile cleanly, I'm not sure what my earlier problem was. I also did a > closer comparison of the DSAPlugin in VMMaker versus the one one Cryptography, > and they are the same except for method time stamps and a trivial formatting > difference. > > Therefore the open issues I see for DSAPlugin are: > > 1) Which repository/package should DSAPlugin be in? > > 2) Why isn't the cmake build working for generating the plugin? > > Question 1) should be at the discretion of the authors/maintainers of the > Cryptography plugins, and 2) is probably just a glitch in the build configuration. > > FWIW, my personal preference would be to use the plugins directly from the > Cryptography repository, deleting the DSAPlugin in VMMaker (trunk + oscog), > and updating configuration maps or build scripts to point to Cryptography. This is super news, Dave. Thank you for pulling these plugins into the vm. I share your opinion that the DSAPlugin stay in the Cryptography repository. Crypto plugins can be kept together. Since this is no change to the Cryptography setup, I would expect everyone to be happy with this proposal; I added the Cryptography team list for their input. Are you saying the CryptographyPlugins package could stay in the Cryptography repository and the Cryptography package and the CryptographyPlugins package would be automatically pulled into a VMMaker image? That's sweet. If Cryptography were pulled into the base image, there would be no need to load it, just the Plugins package. That is probably a separate discussion, regarding the base image. I have not used CMake, I don't believe - perhaps Pharo uses it - so I can't add to this. It may be that someone on the Cryptography list knows more about this. Another step would be writing a Reed Solomon plugin and getting it included, as well. This pertains to my interest in getting the whole SecureSession pipeline pluginized, once I get the RS encoder working. Robert > > Dave >

4 15

SecureSession published to Cryptography repository
by Robert Withers 08 Dec '15

08 Dec '15

Good morning, I managed to separate the SecureSession code out of Mushroom and I have published it into the SqueakSource Cryptography repository. Version 4 is this release, though I expect name refactoring to occur, so just take the latest. This requires the loading of Cryptography, though I did not set a package dependency in Monticello for SecureSession. Should I? Note to Pharo: Please load version 37 of Cryptography. WARNING: the Performance test will fail without the crypto plugins installed. Resulting performance data, with and without crypto plugins...there is 275% increase in performance with crypto plugins. With crypto plugins: 100 KB data chunks received: 10 send time: 272 ms, rate: 3.676 MB/sec. receive time: 600 ms. rate: 1.667 MB/sec. Without crypto plugins: 100 KB data chunks received: 1 send time: 8469 ms, rate: 0.012 MB/sec. receive time: 17233 ms. rate: 0.006 MB/sec. Regards, Robert

1 2

Re: [squeak-dev] Name change: Mushroom ( was Re: evolutions of squeakelib & crypto)
by Robert Withers 07 Dec '15

07 Dec '15

Ben, Huw, Todd and Sven, thank you all for your feedback! I suppose I could call the project "CryptOCaps" but for some reason I glommed onto mushroom as the name. Not grandiose and it is somewhat descriptive...a network of secure sessions, each one a mushroom. Ceps are highly valued. We can tag it for the catalog. For sure, we have Seaside, Morphic, Nebraska, Fuel, Alien, Cog, Monticello and that's just the squeak side of unusual naming of projects. I hope that "mushroom" gains a wide reputation as a solid, reliable, secure and performant session layer under the CryptOCaps presentation...I am thinking of splitting the secure session layer from the ocaps presentation layer, but this would require another name choice, so I hesitate...perhaps "Risotto"? What are your thoughts? Best, Robert On 12/07/2015 10:38 AM, Ben Coman wrote: > I like it, but it seems you missed my point :) > mushroom --> 117,000,000 is two orders of magnitude more hidden. > Anyway, maybe I overplay its significance. > cheers -ben > > On Mon, Dec 7, 2015 at 11:11 PM, Robert Withers > <robert.w.withers(a)gmail.com> wrote: >> I renamed the project to Mushroom and I also dumped the encoding work to >> focus on shutdown, optimization and serialization. Here's the wiki: >> https://github.com/SqueakCryptographySquad/Mushroom/wiki >> >> thanks,Robert >> >> >> On 12/06/2015 01:42 AM, Ben Coman wrote: >>> On Sun, Dec 6, 2015 at 10:42 AM, Robert Withers >>> <robert.w.withers(a)gmail.com> wrote: >>>> On 12/05/2015 09:24 PM, Ben Coman wrote: >>>>> On Fri, Dec 4, 2015 at 11:57 PM, Robert Withers >>>>> <robert.w.withers(a)gmail.com> wrote: >>>>>> Now I think you are right on with your observation. Additionally, the >>>>>> number >>>>>> of dialects could increase further with Fuel serialization, just port >>>>>> SecureSession and bits. >>>>>> >>>>>> Alright, I came up with a name and it may border on the egregious ... >>>>>> presenting ... >>>>>> >>>>>> "Maelstrom" >>>>> Great sounding name. However some general advice for the community, >>>>> since I see a lot of great sounding project names drowned out in the >>>>> noise of our web-search-centric universe. A litmus test for project >>>>> naming is using google search to find which return low search results. >>>>> Today, its more important to be unique than any other attribute of a >>>>> name. So in general, *dictionary* english words are not the best. >>>>> One technique is to intentionally mispell the word you like. Here are >>>>> some comparative examples (note, the surrounding quotes are required >>>>> to avoid google trying to be helpful and correct the spelling)... >>>>> >>>>> "maelstrom" --> 7,480,000 >>>>> "maelstroom" --> 6,200 >>>>> "maelstrum" --> 2,280 >>>>> "maelstruum" --> 7 >>>>> >>>>> Lots of interesting other techniques can be found by searching on: >>>>> techniques to generate brand names or domain names. >>>>> >>>>> cheers -ben >>>> >>>> I would be happy to change the names to something more unique, though it >>>> may >>>> take a few. Are you suggesting "maelstruum"? >>>> >>>> cheers, >>>> Robert >>>> >>>> >>> *Suggesting* yes, but the choice is yours ;) You need to own it. >>> >>> I think maelstruum is certainly memorable with the double "u", but >>> maybe jarring next the the "m". I'm inclined to maelstroom, since I >>> associate it with "zoom". I wouldn't necessarily go for the absolute >>> lowest results. I have an entirely unsubstantiated belief that >>> anything less than 10,000 gives a reasonable chance to compete once a >>> user's browsing history is taken into account. Finally you need to >>> check existing results don't return something abhorrent (I didn't do >>> this). >>> >>> I'd encourage to play around testing on google search. Its quick and >>> easy to generate and test alternatives. I've added a few more below. >>> "maelstra" --> 3,560 >>> "maelstram" --> 504 >>> "maelstrim" --> 1200 >>> "maelstroon" --> 58 >>> "maelstroomi" --> 4 >>> >>> btw, I wouldn't swap the order of the "ae" since that would be >>> susceptible to real typing errors. >>> >>> cheers -ben >>> >>

1 0

Name change: Mushroom ( was Re: evolutions of squeakelib & crypto)
by Robert Withers 07 Dec '15

07 Dec '15

I renamed the project to Mushroom and I also dumped the encoding work to focus on shutdown, optimization and serialization. Here's the wiki: https://github.com/SqueakCryptographySquad/Mushroom/wiki thanks,Robert On 12/06/2015 01:42 AM, Ben Coman wrote: > On Sun, Dec 6, 2015 at 10:42 AM, Robert Withers > <robert.w.withers(a)gmail.com> wrote: >> On 12/05/2015 09:24 PM, Ben Coman wrote: >>> On Fri, Dec 4, 2015 at 11:57 PM, Robert Withers >>> <robert.w.withers(a)gmail.com> wrote: >>>> Now I think you are right on with your observation. Additionally, the >>>> number >>>> of dialects could increase further with Fuel serialization, just port >>>> SecureSession and bits. >>>> >>>> Alright, I came up with a name and it may border on the egregious ... >>>> presenting ... >>>> >>>> "Maelstrom" >>> Great sounding name. However some general advice for the community, >>> since I see a lot of great sounding project names drowned out in the >>> noise of our web-search-centric universe. A litmus test for project >>> naming is using google search to find which return low search results. >>> Today, its more important to be unique than any other attribute of a >>> name. So in general, *dictionary* english words are not the best. >>> One technique is to intentionally mispell the word you like. Here are >>> some comparative examples (note, the surrounding quotes are required >>> to avoid google trying to be helpful and correct the spelling)... >>> >>> "maelstrom" --> 7,480,000 >>> "maelstroom" --> 6,200 >>> "maelstrum" --> 2,280 >>> "maelstruum" --> 7 >>> >>> Lots of interesting other techniques can be found by searching on: >>> techniques to generate brand names or domain names. >>> >>> cheers -ben >> >> I would be happy to change the names to something more unique, though it may >> take a few. Are you suggesting "maelstruum"? >> >> cheers, >> Robert >> >> > *Suggesting* yes, but the choice is yours ;) You need to own it. > > I think maelstruum is certainly memorable with the double "u", but > maybe jarring next the the "m". I'm inclined to maelstroom, since I > associate it with "zoom". I wouldn't necessarily go for the absolute > lowest results. I have an entirely unsubstantiated belief that > anything less than 10,000 gives a reasonable chance to compete once a > user's browsing history is taken into account. Finally you need to > check existing results don't return something abhorrent (I didn't do > this). > > I'd encourage to play around testing on google search. Its quick and > easy to generate and test alternatives. I've added a few more below. > "maelstra" --> 3,560 > "maelstram" --> 504 > "maelstrim" --> 1200 > "maelstroon" --> 58 > "maelstroomi" --> 4 > > btw, I wouldn't swap the order of the "ae" since that would be > susceptible to real typing errors. > > cheers -ben >

1 0

Reed Solomon Blues
by Robert Withers 07 Dec '15

07 Dec '15

Hi Good morning, I am trying to port java code implementing Reed-Solomon encoding with a GaloisField and polynomial system. I am currently testing the easiest Mode, which is 9 data symbols, 15 code symbols and 3 symbols of error. Theer's 2 nibbles to a byte, so a split and join is needed. This all has to do with iteration where the base indexing changes from 0 to 1. I screwed it up in there somewhere and I am struggling to find teh issue. It looks like a complete code review... Since this is core crypto code, it would be an extra blessing if someone else's eyes were on this code in detail.More tests always help too. Would someone be willing to crawl into the java and squeak code to review, learn and qualify/validate? Also, you would be helping me understand all this polynomial math and where my indexing issue may be. The failure in Squeak is in the GenericGFPoly>>#divide: method. It runs forever and the quotient/remainder never reduces it's degree. So one of teh math operations is broken & failing. You can run the EncodingTests I am including a zip of the Java classes I use. This core Reed-Solomon code was written at Google and released open-source. I wrote a test and they pass, so code is working. The latest Cryptography package in the crypto repo is version 48. Please load that and run the CryptoReedSolomonTest to see the infiniteLoop of the polynomial divide. Let me know if you can help. Thanks, Robert

1 1

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

Cryptography December 2015