Cryptography

cryptography@lists.squeakfoundation.org

364 discussions

PAPAS -ParrotTalk Automated Protocol Analyzer&Selector
by Robert 10 Jun '19

10 Jun '19

Some recent posts to my blog regarding ParrotTalk ::: Thoughts of the great internet war over the right to privacy during data-in-motion encryption http://callistohouse.club/index.php/2019/06/07/the-logic-behind-parrottalk/ http://callistohouse.club/index.php/2019/06/08/redesigning-parrottalk-for-a… http://callistohouse.club/index.php/2019/06/08/thoughts-of-the-great-intern… Kindly, Robert

1 3

Here is the specification for the new version 3.7 of the ParrotTalk protocol
by Robert 20 Nov '18

20 Nov '18

Please read my Facebook post introducing the features of the new version 3.7 protocol of ParrotTalk, now a 5 message handshake, 3 messages like TLS 1.3 and an initial 2 message negotiation to determine which version of the protocol to use. My release of the Squeak/Pharo implementation which is capable of supporting both v3.6 and v3.7 in the same SessionAgent, spawning Sessions with either version, based on the negotiation. The Java version at https://github.com/CallistoHouseLtd/ParrotTalk can only talk v3.6 right now. The interesting feature of the Squeak/Pharo implementation is that it supports version negotiation for either version. Tests are all green. https://www.facebook.com/robert.withers/posts/2245642509052313 cheers, Robert

1 0

new versions of ParrotTalk and Raven in squeak/pharo
by Robert 16 Nov '18

16 Nov '18

Hello everyone, I have just updated the Smalltalk implementation of ParrotTalk and Raven. I thought to share it with youse. Here is what I did.... ParrotTalk: Refactored the stack to use a SendFramesBuffer thunk so mjessages can be sent to the connection immediately and are buffered until connection completes. Due to the possibility that there are thunks above the session, as is now the case with Raven, added behavior to #popStackUpTo: to pop a substack of thunks to a specified thunk, as well as a #pushStack:, using #reverse, to push a substack of thunks onto the receiving stack. This behavior allows a stack gaining crypto thunks to pop stack to the session, then pop the SendFramesBuffer thunk, then add the crypto thunks (immigration, cipher, customs, encoder) then push the substack including session back onto the subject stack and then flush the buffer thunk downcall: through the session. Renamed the FrameBuffer to ReceivingFrameBuffer. Raven: Due to the addition of the SendFramesBuffer, replacing the BufferListLayer, now a fully formed Raven stack can be created on the call side, with the RavenTerminal pushed on top of the Session, still supporting early message sending prior to full connection. On the answer side, the creating of the scope creates the RaveenTerminal but it is not yet pushed. That occurs in reactToSession:, which ensures the head of the stack is not the RavenTerminal thunk, priot to pushing on top of the Session. Here's the new code http://www.squeaksource.com/Cryptography/ParrotTalk-rww.20.mcz http://www.squeaksource.com/Cryptography/Raven-rww.22.mcz Now over to Java to bring it up. Best regards, Robert

1 0

Cryptography package on github
by Norbert Hartl 24 Jul '18

24 Jul '18

Hi, I migrated the cryptography package to github under https://github.com/zweidenker/Cryptography <https://github.com/zweidenker/Cryptography> If there is a better location for the repo I’m open ears. Here is a summary what I did: - researched all authors and used the git migration tool to get the package from smalltalkhub to github - released a version 0.1 that should be exactly the same as the code on smalltalkhub for people that want to change - fixed an occurrence of IfNotNilDo: in the Cryptography package to make it load in pharo7 - added a metacello baseline - added a group „all" that loads everything like it is now with one package - added travis files and enable travis checks for pull requests - released a version 0.2 that contains the original code plus travis and metacello - Started to cut off the ASN1, PKCS12 and X509 classes in separate packages - Added to each new package a -Tests package containing tests - constructed all dependencies in the baseline - added a core group that loads the now slimmed down package solely - added PBKDF2 package from smalltalkhub UdoSchneider I’m writing to you as I will write the gemstone guys to find out what sort of collaboration is possible. If you think this is valuable thing to post on squeak-dev please forward this post. I don’t like to subscribe to a lot of lists just to write this announcement. But I’m happy to add squeak in the travis configuration if anyone is about to maintain it. regards, Norbert

1 0

ptsd rage
by Robert Withers 17 Dec '16

17 Dec '16

I need to apologize for all my dread behavior. Here is the reason, and I am on service-connected disability. Current diagnosis is Complex PTSD. Sorry about all my sturm und drang. http://www.ptsd.va.gov/public/problems/anger-and-trauma.asp Sincerely, Robert

1 0

Re: [Cryptography Team] [Pharo-users] Forgive me
by Robert Withers 06 Nov '16

06 Nov '16

Thank you. It breaks my heart I'm who I am, so at odds with who I wish to be. Cave shadowz and distorted viewpoints. On 11/6/2016 2:56 AM, phil(a)highoctane.be wrote: > You are forgiven. > > Now get back to delivering us awesome features. > > Namaste. > Phil > > On Sun, Nov 6, 2016 at 8:24 AM, Robert Withers > <robert.w.withers(a)gmail.com <mailto:robert.w.withers@gmail.com>> wrote: > > Forgive me for being such a huge unbearable fucking asshole. > > > >

1 0

Forgive me
by Robert Withers 06 Nov '16

06 Nov '16

Forgive me for being such a huge unbearable fucking asshole.

1 0

Re: Announce: whisper updated
by Robert Withers 27 Oct '16

27 Oct '16

Though the whisper code is currently language inter-inoperable, the latest code is being hosted on gitlab with International Rabbits, as voix-basse-mourde. Here is the code: https://gitlab.com/des-lapins-internationale. If you would like to help, Java could be brought forwards adding PBEReader/PBEWriter, dataEncoding negotiation, SecureSessionSpecification with filtered cryptoProtocolNames, dataEncoderNames, scopeMaker and the traceDomains to parameterize the server behavior. On the Smalltalk side, Whisper_json, Whisper_magma and Whisper_fuel could be implemented. Matching JSON on the Java side. FEC Reed-Solomon could be tested and repaired (it's broken). kerkkutatti is the Java code for remote promises and has the Smalltalk porcini code too. With Whisper's new SecureServerSpecification, the injection of a scopeMaker and encoder is all the config after push into the stack. Lots of work there on both sides, to get them talking. If you want to help, have a beer and I'll match you, let me know what you want to work on and I can add you as a gitlab rabbit. Best, Rob On 10/16/2016 7:22 PM, Robert Withers wrote: > > Folks, I have updated whisper or SecureSession to provide > Java/Squeak/Pharo interoperability. I am no longer able to access the > Cryptography repo so I cannot push code, but the squeak/pharo code is > in the squeak-pharo directory in the whisper github project. Here is > the GitPages link: https://robertwithers.github.io/whisper, with all > other links. > > whisper is osi Layer 5 SecureSession with modern crypto: > Java/Squeak/Pharo interoperability. > > * flips normative osi layer 5 and 6 on its head: now, 5 is > crypto and 6 is session state resumption > * 3-way DH-2048/RSA-2048/RSAPublicKey ASN1DER encoding > * 256-bit AES/CBC/PKCS7Padding, 128-bit IV, 160-bit SHA1 E&M > * PBEEncryptorAES-256 with PBKDF2WithHmacSHA1 > > Rob >

1 1

new Cryptography package, usable in squeak and pharo (was Re: Announce: whisper updated)
by Robert Withers 18 Oct '16

18 Oct '16

I wanted to give you a heads up about my new effort at SecureSession, below, renamed to whisper from old days. In the course of development, I consolidated the Cryptography package and conformed it to be installable into both squeak or pharo, by ensuring the RandomGenerator class>>#unpredictableStringsDo: works in both environments. In addition, I added a more artifacts I developed in whisper, including RSA <-> Asn1 module definitions, a PBEEncryptor and a PBKDF2WithHmacSHA1 keyy derevation function. A couple of tests were also added. Unfortunately, I lost my password to the Cryptography squeaksource site and so I am unable to push the new code there. If someone could help me reset that password, that would be quite helpful; I asked on list to no avail and it may not be possible. The biggest help would be to get this new version in play, if someone could load it: https://jumpshare.com/v/f4HwsX5nzEKQkeSaly7y and push to the canonical Cryptography repo on squeaksource. Follows is a list of changes made, which does include some protocol changes to ASN1 for marshalling and hydration, conforming to #asAsn1DerBytes and @fromAsn1DerBytes:. Cryptography is now the shared package between Squeak and Pharo - RandomGenerator class>>#unpredictableStringsDo: changed details to be squeak/pharo compliant (see comment) - senders/implementers of #asAsn1Bytes (removed) changed to #asAsn1DerBytes - senders/implementers of #fromAsn1Bytes: (removed) changed to #fromAsn1DerBytes: - X509Certificate class>>#fromFile: changed use of #fromBytes: (removed) to #fromAsn1DerBytes: - X509CertificateDerReader>>#asCertificate changed use of #fromBytes: (removed) to #fromAsn1DerBytes: - all CryptoX509Test>>#certificateX changed use of #fromBytes: (removed) to #fromAsn1DerBytes: - moved asn1 module definitions and support accessers for RSA and DSA Keys to Cryptography - changed DiffieHellman>>sendMessage to use SecureRandom>>#nextBits: to keep bitSize - added CryptoHashFunctionTest tests for HMAC Specs - added String>>#padLeftTo:with: for squeak - fixed padding mode to set and retrieve the IV vector kind regards, Rob On 10/16/2016 7:22 PM, Robert Withers wrote: > > Folks, I have updated whisper or SecureSession to provide > Java/Squeak/Pharo interoperability. I am no longer able to access the > Cryptography repo so I cannot push code, but the squeak/pharo code is > in the squeak-pharo directory in the whisper github project. Here is > the GitPages link: https://robertwithers.github.io/whisper, with all > other links. > > whisper is osi Layer 5 SecureSession with modern crypto: > Java/Squeak/Pharo interoperability. > > * flips normative osi layer 5 and 6 on its head: now, 5 is > crypto and 6 is session state resumption > * 3-way DH-2048/RSA-2048/RSAPublicKey ASN1DER encoding > * 256-bit AES/CBC/PKCS7Padding, 128-bit IV, 160-bit SHA1 E&M > * PBEEncryptorAES-256 with PBKDF2WithHmacSHA1 > > Rob >

2 2

v 2.0 SecureSession spec
by Robert Withers 26 May '16

26 May '16

Here's a link to the version 2.0 spec I've put together. It includes v2.0 start-up messages for dataEncoder negotiation (used by presentation layer) and corrections to MessageType assigned numbers for data headers, so impl and spec match. Unfortunately the impl still has a few v2.0 issues, but v1.0 and vintage are still working and will not change in the future, tough perhaps deprecated. I'd welcome any feedback on content or accuracy, if anyone had a few cycles to spare ;) Thank you for your consideration, Robert http://jmp.sh/zASyHlK

1 0

← Newer
1
...
7
8
9
10
11
12
13
...
37
Older →

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

Cryptography