[Cryptography Team] new Cryptography package, usable in squeak and pharo (was Re: Announce: whisper updated)

[Robert Withers]

Hey Ron, that's good, thanks. Is there no admin for squeaksource that 
could help me with my password? I am surprised. I took your suggestion 
and I was able to add myself as a new member. Could you add 'rwww' 
please? I want to clean up the mess I left behind in there.

Kind regards,
Rob

On 10/18/2016 10:35 AM, Ron Teitelbaum wrote:
>
> Hi Rob!
>
> I’ve uploaded the version you posted to squeak source.  Thanks for all 
> your work!
>
> I’m not sure if you can register a new account on squeaksource but if 
> you do I’m happy to add you as admin.
>
> All the best,
>
> Ron
>
> *From:*cryptography-bounces at lists.squeakfoundation.org 
> [mailto:cryptography-bounces at lists.squeakfoundation.org] *On Behalf Of 
> *Robert Withers
> *Sent:* Monday, October 17, 2016 9:22 PM
> *To:* Cryptography Mailing List
> *Subject:* [Cryptography Team] new Cryptography package, usable in 
> squeak and pharo (was Re: Announce: whisper updated)
>
> I wanted to give you a heads up about my new effort at SecureSession, 
> below, renamed to whisper from old days. In the course of development, 
> I consolidated the Cryptography package and conformed it to be 
> installable into both squeak or pharo, by ensuring the RandomGenerator 
> class>>#unpredictableStringsDo: works in both environments. In 
> addition, I added a more artifacts I developed in whisper, including 
> RSA <-> Asn1 module definitions, a PBEEncryptor and a 
> PBKDF2WithHmacSHA1 keyy derevation function. A couple of tests were 
> also added.
>
> Unfortunately, I lost my password to the Cryptography squeaksource 
> site and so I am unable to push the new code there. If someone could 
> help me reset that password, that would be quite helpful; I asked on 
> list to no avail and it may not be possible.
>
> The biggest help would be to get this new version in play, if someone 
> could load it: https://jumpshare.com/v/f4HwsX5nzEKQkeSaly7y and push 
> to the canonical Cryptography repo on squeaksource.
>
> Follows is a list of changes made, which does include some protocol 
> changes to ASN1 for marshalling and hydration, conforming to 
> #asAsn1DerBytes and @fromAsn1DerBytes:.
>
> Cryptography is now the shared package between Squeak and Pharo
>
> - RandomGenerator class>>#unpredictableStringsDo: changed details to 
> be squeak/pharo compliant (see comment)
> - senders/implementers of #asAsn1Bytes (removed) changed to 
> #asAsn1DerBytes
> - senders/implementers of #fromAsn1Bytes: (removed) changed to 
> #fromAsn1DerBytes:
> - X509Certificate class>>#fromFile: changed use of #fromBytes: 
> (removed) to #fromAsn1DerBytes:
> - X509CertificateDerReader>>#asCertificate  changed use of #fromBytes: 
> (removed) to #fromAsn1DerBytes:
> - all CryptoX509Test>>#certificateX  changed use of #fromBytes: 
> (removed) to #fromAsn1DerBytes:
> - moved asn1 module definitions and support accessers for RSA and DSA 
> Keys to Cryptography
> - changed DiffieHellman>>sendMessage to use SecureRandom>>#nextBits: 
> to keep bitSize
> - added CryptoHashFunctionTest tests for HMAC Specs
> - added String>>#padLeftTo:with: for squeak
> - fixed padding mode to set and retrieve the IV vector
>
> kind regards,
> Rob
>
> On 10/16/2016 7:22 PM, Robert Withers wrote:
>
>     Folks, I have updated whisper or SecureSession to provide
>     Java/Squeak/Pharo interoperability. I am no longer able to access
>     the Cryptography repo so I cannot push code, but the squeak/pharo
>     code is in the squeak-pharo directory in the whisper github
>     project. Here is the GitPages link:
>     https://robertwithers.github.io/whisper, with all other links.
>
>         whisper is osi Layer 5 SecureSession with modern crypto:
>         Java/Squeak/Pharo interoperability.
>
>           * flips normative osi layer 5 and 6 on its head: now, 5 is
>             crypto and 6 is session state resumption
>           * 3-way DH-2048/RSA-2048/RSAPublicKey ASN1DER encoding
>           * 256-bit AES/CBC/PKCS7Padding, 128-bit IV, 160-bit SHA1 E&M
>           * PBEEncryptorAES-256 with PBKDF2WithHmacSHA1
>
>     Rob
>
>
>
> _______________________________________________
> Cryptography mailing list
> Cryptography at lists.squeakfoundation.org
> http://lists.squeakfoundation.org/cgi-bin/mailman/listinfo/cryptography

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.squeakfoundation.org/pipermail/cryptography/attachments/20161018/27dbdb93/attachment-0001.htm