All,
Hopefully the mailing list will make it easier for us all to communicate.
As Sean pointed out this group has a lot of work to do and the work is not easy. But that doesn't mean it has to be unpleasant. I hope that we can make it enjoyable for everyone. We are still planning what needs to be done.
The current open items are:
Review ANS1.
Download Cincom non-commercial version when you get a chance.
Wait for response from Mr. Robertson at Cincom about license issues and support.
Thanks again for your participation,
Ron
Regarding Squeak's support for ASN1 DER, if you load the crypto package and then you can
1) browse implementers of #encodeAsnDer for the marshalling side and browse ASN1Value class>>#fromAsnDer: for the unmarshalling side. I used OrderedCollection to represent the SEQUENCE Der object.
2) Take a look at the ASN1TestCase for tests of Null, Integer, Sequence and BitString.
There is also an implementation of DSAPublicKey>>encodeAsnDer which attaches the subOid for just the Public Subject Key structure out of x509. I use this to exchange the public key for Diffie Hellman in the SqueakElib implementation. This is where things fall of the cliff, since I didn't define any other x509 ASN1 structures, for instance a DSA Certificate, which is a superset structure which includes the DSA Public Subject Key structure. Since SqueakElib (Elib) does not use third party Certificate Servers, I don't need the full blown Certificate structure, but this is what I think of when I read you to say we need to look at the ASN1 implementation and support x509.
Regarding the packaging: I am also confused why we have multiple implementations. I like having an external base crypto module, repackaged as a Monticello package, and remove any in-base-image pieces. If we want to deploy the Crypto module in that base image, that's cool, but it should be maintained and developed as a separate package, so we don't duplicate. I also see the base Crypto module as filled with base algorithms, then have separate Monticello modules for each protocol or for advanced ciphers. Then we can leverage the module dependency mechanism. Is there a server where we could store a primary Monticello repository for crypto packages, base and protocol?
thanks for setting this in motion, Robert
Ron Teitelbaum Ron@USMedRec.com wrote:
All,
Hopefully the mailing list will make it easier for us all to communicate.
As Sean pointed out this group has a lot of work to do and the work is not easy. But that doesnt mean it has to be unpleasant. I hope that we can make it enjoyable for everyone. We are still planning what needs to be done.
The current open items are:
Review ANS1.
Download Cincom non-commercial version when you get a chance.
Wait for response from Mr. Robertson at Cincom about license issues and support.
Thanks again for your participation,
Ron
_______________________________________________ Cryptography mailing list Cryptography@lists.squeakfoundation.org http://lists.squeakfoundation.org/cgi-bin/mailman/listinfo/cryptography
Ken, I tried to upload the cs from Rob to the wiki site, this is a temp working package until we get a repository going. Can you give me upload rights to the wiki?
Rob, Thanks for the suggestions. Yes we plan to have a Monticello repository once we get the go ahead for the team. There is already an external package, although as you mentioned we need to covert it. I agree with your suggestion to have a cryptography package (Squeak Map), a cryptography base in the image (removing duplication in package), and a cryptography protocols package. We are still limited to formalities of starting the team.
I started a notes page on the wiki page http://minnow.cc.gatech.edu/squeak/cryptography and added your instructions there. I attached the cs here until we can get it on to the wiki, or into the repository.
Ron
_____
From: cryptography-bounces@lists.squeakfoundation.org [mailto:cryptography-bounces@lists.squeakfoundation.org] On Behalf Of Rob Withers Sent: Thursday, October 20, 2005 2:06 PM To: Cryptography Team Development List Subject: Re: [Cryptography Team] Welcome again to the Cryptography Team
Regarding Squeak's support for ASN1 DER, if you load the crypto package and then you can
1) browse implementers of #encodeAsnDer for the marshalling side and browse ASN1Value class>>#fromAsnDer: for the unmarshalling side. I used OrderedCollection to represent the SEQUENCE Der object.
2) Take a look at the ASN1TestCase for tests of Null, Integer, Sequence and BitString.
There is also an implementation of DSAPublicKey>>encodeAsnDer which attaches the subOid for just the Public Subject Key structure out of x509. I use this to exchange the public key for Diffie Hellman in the SqueakElib implementation. This is where things fall of the cliff, since I didn't define any other x509 ASN1 structures, for instance a DSA Certificate, which is a superset structure which includes the DSA Public Subject Key structure. Since SqueakElib (Elib) does not use third party Certificate Servers, I don't need the full blown Certificate structure, but this is what I think of when I read you to say we need to look at the ASN1 implementation and support x509.
Regarding the packaging: I am also confused why we have multiple implementations. I like having an external base crypto module, repackaged as a Monticello package, and remove any in-base-image pieces. If we want to deploy the Crypto module in that base image, that's cool, but it should be maintained and developed as a separate package, so we don't duplicate. I also see the base Crypto module as filled with base algorithms, then have separate Monticello modules for each protocol or for advanced ciphers. Then we can leverage the module dependency mechanism. Is there a server where we could store a primary Monticello repository for crypto packages, base and protocol?
thanks for setting this in motion,
Robert
Ron Teitelbaum Ron@USMedRec.com wrote:
All,
Hopefully the mailing list will make it easier for us all to communicate.
As Sean pointed out this group has a lot of work to do and the work is not easy. But that doesn't mean it has to be unpleasant. I hope that we can make it enjoyable for everyone. We are still planning what needs to be done.
The current open items are:
Review ANS1.
Download Cincom non-commercial version when you get a chance.
Wait for response from Mr. Robertson at Cincom about license issues and support.
Thanks again for your participation,
Ron
_______________________________________________ Cryptography mailing list Cryptography@lists.squeakfoundation.org http://lists.squeakfoundation.org/cgi-bin/mailman/listinfo/cryptography
Rob Withers:
Is there a server where we could store a primary Monticello repository for
crypto packages, base and protocol?
Ok I added repositories for Base, Ciphers, and Protocols. Rob I was able to add you as a developer so you should be set. Hans-Martin and Sean could you go sign up on www.SqueakSource.com http://www.squeaksource.com/ and I will add you also.
We need to decide if cryptography should be included in the base squeak image so that we can make a recommendation to the community. What does everyone think?
I will move the information from the previous wiki link to the base repository wiki. I will send you a link after that is done.
The repositories are at:
MCHttpRepository location: 'http://kilana.unibe.ch:8888/CryptographyBase' user: '<Your Initials on SqueakSource>' password: '<Your Password on SqueakSource>'
MCHttpRepository
location:'http://kilana.unibe.ch:8888/CryptographyCiphers'
user:'<Your Initials on SqueakSource>'
password: '<Your Password On SqueakSource>'
MCHttpRepository
location: 'http://kilana.unibe.ch:8888/CryptographyProtocol'
user:'<Your Initials on SqueakSource>'
password: '<Your Password On SqueakSource>'
Ron
All,
I was reading through documentation on ASN.1 and found this book which is available free at: http://www.oss.com/asn1/dubuisson.html
You do have to register to get it. It looks pretty complete.
I moved the wiki info to the www.squeaksource.com http://www.squeaksource.com/ >>packages >> cryptography base >> wiki
The response we got back from Cincom seemed positive, but no specifics yet.
I still need to review the implementation from Rob, but I wanted to have a better understanding first so I'm researching.
Ron
Hi Ron, I've created a SqueakSource account, so you could add me to the developers list now.
Regarding the OpenPGP stuff: My current code includes implementations for DES, 3DES and CAST5 ciphers. If there is an agreed-upon API for ciphers within our framework, I would like to implement that API for these and publish them over the weekend. Yesterday I have found the original Squeak implementation from which Magnus started, and I have merged some of the stuff I built in VW back into this Squeak version, so it does not looks like it's a complete mess after all...
I'm unsure where the code should be placed with respect to the other crypto stuff. Should this be distributed among the -Base, -Ciphers and -Protocols SqueakSource projects, or should it have its own project? I suppose the PGP packet classes would fall under the -Protocols project, right? As I'm not really fluent with MC and SM, I will probably need some more advice on where to place things, and how to split them....
Cheers, Hans-Martin
(I'm sending this from my mail account at a customer's site. Please answer to my standard account or (preferrably) the mailing list)
Hans-Martin,
I added you as a developer on all the packages. I agree with you the ciphers should go to ciphers, and the PGP should go to protocols.
For Monticello first load it from squeak map, then from the world menu >> open >> Monticello browser.
From the +Packages add your package. Then select that package and press
+Respsitory. Select HTTP and use the string of the repository you need to save in add in your initials and your password from squeakSource. Then having the package selected on the left and the repository selected on the right select save. Add notes regarding the package, it's status . and press accept. That will load it up into the repository for us to use.
Let me know if you need more or have any questions.
Thanks for your work!!
Ron
_____
From: cryptography-bounces@lists.squeakfoundation.org [mailto:cryptography-bounces@lists.squeakfoundation.org] On Behalf Of Hans-Martin Mosner Sent: Friday, October 21, 2005 8:27 AM To: Ron@USMedRec.com; Cryptography Team Development List Subject: Antwort: [Cryptography Team] Repository Locations
Hi Ron, I've created a SqueakSource account, so you could add me to the developers list now.
Regarding the OpenPGP stuff: My current code includes implementations for DES, 3DES and CAST5 ciphers. If there is an agreed-upon API for ciphers within our framework, I would like to implement that API for these and publish them over the weekend. Yesterday I have found the original Squeak implementation from which Magnus started, and I have merged some of the stuff I built in VW back into this Squeak version, so it does not looks like it's a complete mess after all...
I'm unsure where the code should be placed with respect to the other crypto stuff. Should this be distributed among the -Base, -Ciphers and -Protocols SqueakSource projects, or should it have its own project? I suppose the PGP packet classes would fall under the -Protocols project, right? As I'm not really fluent with MC and SM, I will probably need some more advice on where to place things, and how to split them....
Cheers, Hans-Martin
(I'm sending this from my mail account at a customer's site. Please answer to my standard account or (preferrably) the mailing list)
I attempted a conversion of the Cryptography package into a Monitcello package. You can find it through the Monticello Browser under the CryptographyBase repository.
MCHttpRepository location: 'http://kilana.unibe.ch:8888/CryptographyBase' user: '' password: ''
I won't Bless it, someone else will have to do that after a careful review. I had to reassign extension methods to protocol categories starting with '*cryptography', for Monticello to include them. This had the most impact on the ThirtyTwoBitRegister, which is already in the image.
Note that the earlier changeset for asn.1 that I sent was folded into this Cryptography package, and a couple of fixes went in later, so blessing and starting with this Monticello package would be a good way forward.
I found the code I used as a starting point for ASN.1, which was published open source in either the Smalltalk Report or JOOP at some point in 1996 or so. The dates may be in the fileout. This includes the read side of X509 certificates, if I recall correctly. I have attached this zip below.
cheers, Robert
On Oct 20, 2005, at 2:32 PM, Ron Teitelbaum wrote:
Rob Withers:
Is there a server where we could store a primary Monticello
repository for crypto packages, base and protocol? Ok I added repositories for Base, Ciphers, and Protocols. Rob I was able to add you as a developer so you should be set. Hans-Martin and Sean could you go sign up on www.SqueakSource.com and I will add you also. We need to decide if cryptography should be included in the base squeak image so that we can make a recommendation to the community. What does everyone think? I will move the information from the previous wiki link to the base repository wiki. I will send you a link after that is done. The repositories are at: MCHttpRepository location: 'http://kilana.unibe.ch:8888/CryptographyBase' user: '<Your Initials on SqueakSource>' password: '<Your Password on SqueakSource>' MCHttpRepository
location:'http://kilana.unibe.ch:8888/CryptographyCiphers'
user:'<Your Initials on SqueakSource>'
password: '<Your Password On SqueakSource>' MCHttpRepository
location: 'http://kilana.unibe.ch:8888/CryptographyProtocol'
user:'<Your Initials on SqueakSource>'
password: '<Your Password On SqueakSource>' Ron _______________________________________________ Cryptography mailing list Cryptography@lists.squeakfoundation.org http://lists.squeakfoundation.org/cgi-bin/mailman/listinfo/cryptography
Update: There is a new version (CryptographyBase-rww.3) that removes an unused pool dictionary and includes a missed method in SequencableCollection. There is one test failure in the CryptoTest>>#testDSASigningAndVerifying which I couldn't track down right away.
Robert
On Oct 21, 2005, at 5:40 AM, Robert Withers wrote:
I attempted a conversion of the Cryptography package into a Monitcello package. You can find it through the Monticello Browser under the CryptographyBase repository.
MCHttpRepository location: 'http://kilana.unibe.ch:8888/CryptographyBase' user: '' password: ''
I won't Bless it, someone else will have to do that after a careful review. I had to reassign extension methods to protocol categories starting with '*cryptography', for Monticello to include them. This had the most impact on the ThirtyTwoBitRegister, which is already in the image.
Note that the earlier changeset for asn.1 that I sent was folded into this Cryptography package, and a couple of fixes went in later, so blessing and starting with this Monticello package would be a good way forward.
I found the code I used as a starting point for ASN.1, which was published open source in either the Smalltalk Report or JOOP at some point in 1996 or so. The dates may be in the fileout. This includes the read side of X509 certificates, if I recall correctly. I have attached this zip below.
cheers, Robert
<x509.zip>
On Oct 20, 2005, at 2:32 PM, Ron Teitelbaum wrote:
Rob Withers:
Is there a server where we could store a primary Monticello
repository for crypto packages, base and protocol? Ok I added repositories for Base, Ciphers, and Protocols. Rob I was able to add you as a developer so you should be set. Hans-Martin and Sean could you go sign up on www.SqueakSource.com and I will add you also. We need to decide if cryptography should be included in the base squeak image so that we can make a recommendation to the community. What does everyone think? I will move the information from the previous wiki link to the base repository wiki. I will send you a link after that is done. The repositories are at: MCHttpRepository location: 'http://kilana.unibe.ch:8888/CryptographyBase' user: '<Your Initials on SqueakSource>' password: '<Your Password on SqueakSource>' MCHttpRepository
location:'http://kilana.unibe.ch:8888/CryptographyCiphers'
user:'<Your Initials on SqueakSource>'
password: '<Your Password On SqueakSource>' MCHttpRepository
location: 'http://kilana.unibe.ch:8888/CryptographyProtocol'
user:'<Your Initials on SqueakSource>'
password: '<Your Password On SqueakSource>' Ron _______________________________________________ Cryptography mailing list Cryptography@lists.squeakfoundation.org http://lists.squeakfoundation.org/cgi-bin/mailman/listinfo/ cryptography
Cryptography mailing list Cryptography@lists.squeakfoundation.org http://lists.squeakfoundation.org/cgi-bin/mailman/listinfo/cryptography
It has been a while since I used squeak. 1. where should I get the lastest and greatest from and how does one use the repositories. I am used to using Store in VisualWorks so I am going to have to get used to using the squeak UI etc.
Also. We will need to get some of our current builds. We are 2 weeks away from code freeze so we can get our latest ASN1 and crypto stuff. Not everything is there. there is stuff still in development and I have a store repository here that I can have people access that is out side of Cincom so everyone can log in and get the latest and greatest builds.
So I am waiting for some go ahead with Jim but in the meantime I can brush on on things I need to get productive in squeak. IF I could have some pointers that would be great. I need the download point for the latest build and how to update to the current packages etc. Since you have more experience if you could point me in the direction that would be great.
Sean
_____
From: cryptography-bounces@lists.squeakfoundation.org [mailto:cryptography-bounces@lists.squeakfoundation.org] On Behalf Of Ron Teitelbaum Sent: Thursday, October 20, 2005 5:32 PM To: 'Cryptography Team Development List' Subject: [Cryptography Team] Repository Locations
Rob Withers:
Is there a server where we could store a primary Monticello repository for
crypto packages, base and protocol?
Ok I added repositories for Base, Ciphers, and Protocols. Rob I was able to add you as a developer so you should be set. Hans-Martin and Sean could you go sign up on www.SqueakSource.com http://www.squeaksource.com/ and I will add you also.
We need to decide if cryptography should be included in the base squeak image so that we can make a recommendation to the community. What does everyone think?
I will move the information from the previous wiki link to the base repository wiki. I will send you a link after that is done.
The repositories are at:
MCHttpRepository location: 'http://kilana.unibe.ch:8888/CryptographyBase' user: '<Your Initials on SqueakSource>' password: '<Your Password on SqueakSource>'
MCHttpRepository
location:'http://kilana.unibe.ch:8888/CryptographyCiphers'
user:'<Your Initials on SqueakSource>'
password: '<Your Password On SqueakSource>'
MCHttpRepository
location: 'http://kilana.unibe.ch:8888/CryptographyProtocol'
user:'<Your Initials on SqueakSource>'
password: '<Your Password On SqueakSource>'
Ron
OK found the ftp site and got 3.9 which I take is the version we are going to work from my last version I have installed is 3.8. and I finally figured out the squeak repository sign in process. Initials can be duplicates duh.
Sean
_____
From: cryptography-bounces@lists.squeakfoundation.org [mailto:cryptography-bounces@lists.squeakfoundation.org] On Behalf Of Sean Glazier Sent: Friday, October 21, 2005 11:16 AM To: Ron@USMedRec.com; 'Cryptography Team Development List' Subject: RE: [Cryptography Team] Repository Locations
It has been a while since I used squeak. 1. where should I get the lastest and greatest from and how does one use the repositories. I am used to using Store in VisualWorks so I am going to have to get used to using the squeak UI etc.
Also. We will need to get some of our current builds. We are 2 weeks away from code freeze so we can get our latest ASN1 and crypto stuff. Not everything is there. there is stuff still in development and I have a store repository here that I can have people access that is out side of Cincom so everyone can log in and get the latest and greatest builds.
So I am waiting for some go ahead with Jim but in the meantime I can brush on on things I need to get productive in squeak. IF I could have some pointers that would be great. I need the download point for the latest build and how to update to the current packages etc. Since you have more experience if you could point me in the direction that would be great.
Sean
_____
From: cryptography-bounces@lists.squeakfoundation.org [mailto:cryptography-bounces@lists.squeakfoundation.org] On Behalf Of Ron Teitelbaum Sent: Thursday, October 20, 2005 5:32 PM To: 'Cryptography Team Development List' Subject: [Cryptography Team] Repository Locations
Rob Withers:
Is there a server where we could store a primary Monticello repository for
crypto packages, base and protocol?
Ok I added repositories for Base, Ciphers, and Protocols. Rob I was able to add you as a developer so you should be set. Hans-Martin and Sean could you go sign up on www.SqueakSource.com http://www.squeaksource.com/ and I will add you also.
We need to decide if cryptography should be included in the base squeak image so that we can make a recommendation to the community. What does everyone think?
I will move the information from the previous wiki link to the base repository wiki. I will send you a link after that is done.
The repositories are at:
MCHttpRepository location: 'http://kilana.unibe.ch:8888/CryptographyBase' user: '<Your Initials on SqueakSource>' password: '<Your Password on SqueakSource>'
MCHttpRepository
location:'http://kilana.unibe.ch:8888/CryptographyCiphers'
user:'<Your Initials on SqueakSource>'
password: '<Your Password On SqueakSource>'
MCHttpRepository
location: 'http://kilana.unibe.ch:8888/CryptographyProtocol'
user:'<Your Initials on SqueakSource>'
password: '<Your Password On SqueakSource>'
Ron
Sean,
See the note I sent to Hans-Martin. Let me know if you need more help.
You can get the image from http://ftp.squeak.org/3.9alpha/
You can get our code by signing up at www.squeakSource.com when you do I will add you as a developer. Then you can access the repositories.
Let me know if you need more help. I'm not sure about the format for store but I'm guessing that a file out from store will file in ok. You can add a new package file in your classes, then save them to our shared repository. Let me know how it goes.
Ron
_____
From: cryptography-bounces@lists.squeakfoundation.org [mailto:cryptography-bounces@lists.squeakfoundation.org] On Behalf Of Sean Glazier Sent: Friday, October 21, 2005 11:16 AM To: Ron@USMedRec.com; 'Cryptography Team Development List' Subject: RE: [Cryptography Team] Repository Locations
It has been a while since I used squeak. 1. where should I get the lastest and greatest from and how does one use the repositories. I am used to using Store in VisualWorks so I am going to have to get used to using the squeak UI etc.
Also. We will need to get some of our current builds. We are 2 weeks away from code freeze so we can get our latest ASN1 and crypto stuff. Not everything is there. there is stuff still in development and I have a store repository here that I can have people access that is out side of Cincom so everyone can log in and get the latest and greatest builds.
So I am waiting for some go ahead with Jim but in the meantime I can brush on on things I need to get productive in squeak. IF I could have some pointers that would be great. I need the download point for the latest build and how to update to the current packages etc. Since you have more experience if you could point me in the direction that would be great.
Sean
_____
From: cryptography-bounces@lists.squeakfoundation.org [mailto:cryptography-bounces@lists.squeakfoundation.org] On Behalf Of Ron Teitelbaum Sent: Thursday, October 20, 2005 5:32 PM To: 'Cryptography Team Development List' Subject: [Cryptography Team] Repository Locations
Rob Withers:
Is there a server where we could store a primary Monticello repository for
crypto packages, base and protocol?
Ok I added repositories for Base, Ciphers, and Protocols. Rob I was able to add you as a developer so you should be set. Hans-Martin and Sean could you go sign up on www.SqueakSource.com http://www.squeaksource.com/ and I will add you also.
We need to decide if cryptography should be included in the base squeak image so that we can make a recommendation to the community. What does everyone think?
I will move the information from the previous wiki link to the base repository wiki. I will send you a link after that is done.
The repositories are at:
MCHttpRepository location: 'http://kilana.unibe.ch:8888/CryptographyBase' user: '<Your Initials on SqueakSource>' password: '<Your Password on SqueakSource>'
MCHttpRepository
location:'http://kilana.unibe.ch:8888/CryptographyCiphers'
user:'<Your Initials on SqueakSource>'
password: '<Your Password On SqueakSource>'
MCHttpRepository
location: 'http://kilana.unibe.ch:8888/CryptographyProtocol'
user:'<Your Initials on SqueakSource>'
password: '<Your Password On SqueakSource>'
Ron
I tired to enter in my initial s and name etc and they say they already exist. So I am a bit confused I don't remember signing up on this one before. In anycase my standard password is not in effect.
_____
From: cryptography-bounces@lists.squeakfoundation.org [mailto:cryptography-bounces@lists.squeakfoundation.org] On Behalf Of Ron Teitelbaum Sent: Thursday, October 20, 2005 5:32 PM To: 'Cryptography Team Development List' Subject: [Cryptography Team] Repository Locations
Rob Withers:
Is there a server where we could store a primary Monticello repository for
crypto packages, base and protocol?
Ok I added repositories for Base, Ciphers, and Protocols. Rob I was able to add you as a developer so you should be set. Hans-Martin and Sean could you go sign up on www.SqueakSource.com http://www.squeaksource.com/ and I will add you also.
We need to decide if cryptography should be included in the base squeak image so that we can make a recommendation to the community. What does everyone think?
I will move the information from the previous wiki link to the base repository wiki. I will send you a link after that is done.
The repositories are at:
MCHttpRepository location: 'http://kilana.unibe.ch:8888/CryptographyBase' user: '<Your Initials on SqueakSource>' password: '<Your Password on SqueakSource>'
MCHttpRepository
location:'http://kilana.unibe.ch:8888/CryptographyCiphers'
user:'<Your Initials on SqueakSource>'
password: '<Your Password On SqueakSource>'
MCHttpRepository
location: 'http://kilana.unibe.ch:8888/CryptographyProtocol'
user:'<Your Initials on SqueakSource>'
password: '<Your Password On SqueakSource>'
Ron
cryptography@lists.squeakfoundation.org
-
Hans-Martin Mosner -
Rob Withers -
Robert Withers
-
Ron Teitelbaum -
Sean Glazier