I've written a little GTK+ GUI wrapper for the new CLI clients.
Yesterday I mailed the list about my new version 0.1, but after two of
my attempts the listserv replied "Awaiting moderator approval - size too
big". Apparently my 60k attached tarball was just too massive.

Anyway, since then I've cleaned up the code a bit. Now I think it only
has one really evil kludge! I bumped up the version.

But there are a few issues yet. I am *not* a programmer, at least not in
any hardcore sense of the term. For some inexplicable reason I just
decided four days ago to write a GUI. So here's the catch: a fake like
me has *no* business implementing encryption! I just couldn't help
myself. You know how that is.

Here's the rough picture:

1. User either manually adds or automatically inserts a SSK. We get two
plaintext keys, each with an optional password.

2. I hash the password(s) with SHA-1, yielding 160 bits strings.

3. I break each key into two 256 bit chunks. I pad the chunks with '@'
characters, and add a tag ("@MJR") onto the end of the second chunk so I
know if it decrypted properly.

4. I rijndael encrypt each pair of chunks separately with its respective
hashed password.

5. I write each pair of chunks, in hexadecimal (%02X), to its place in
the configuration file.

Decryption is done as you think it is. Well, it works so it can't be
wrong.

Aside from the whole encryption and SSK management side of it, I've also
written code for concurrent transfers and 'subspace inserts'. There's a
process window that shows the list of current processes and the status
of each--active, done, or failed (thanks Oskar!). You can kill a
specific process and remove all finished processes from the list.

The method for inserting subspaces is interesting. I insert pseudorandom
1k hexadecimal file as an SVK, read the private key, insert another
random file under the SVK, and finally read the public key.

That's about it. Oh, you'll need a new (>1.2.0) version of GTK+. I
recommend 1.2.8.

You can grab a tarball from http://24.131.186.16:976/bakunin-0.2.tar.gz.
Mediaone (now AT&T) is fucking evil, the IP will change (who knows
when). Act fast.


Mark Roberts
mroberts100 at mediaone.net
_______________________________________________
Freenet-dev mailing list
Freenet-dev at lists.sourceforge.net
http://lists.sourceforge.net/mailman/listinfo/freenet-dev

Reply via email to