Re: [freenet-dev] [GSoC 2014 Crypto API] Status Update 4

2014-07-22 Thread xor
On Friday, June 27, 2014 04:25:38 PM Matthew Toseland wrote: > On 27/06/14 16:18, Florent Daigniere wrote: > > On Fri, 2014-06-27 at 16:03 +0100, Matthew Toseland wrote: > >> Re AEAD buckets ... generally authenticated ciphers use a "tag" at the > >> end, equivalent to an HMAC. This means that if t

Re: [freenet-dev] [GSoC 2014 Crypto API] Status Update 4

2014-06-28 Thread Florent Daigniere
On Fri, 2014-06-27 at 13:41 -0400, unixninja92 wrote: > On 06/27/2014 06:31 AM, Steve Dougherty wrote: > >> The next step is to write unit-tests and documentation. I am > >> also planning on submitting a patch for our OCB nonce length > >> problem that will let us upgrade Bouncy Castle to 150, and

Re: [freenet-dev] [GSoC 2014 Crypto API] Status Update 4

2014-06-27 Thread unixninja92
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 06/27/2014 06:31 AM, Steve Dougherty wrote: >> The next step is to write unit-tests and documentation. I am >> also planning on submitting a patch for our OCB nonce length >> problem that will let us upgrade Bouncy Castle to 150, and soon >> 151 whi

Re: [freenet-dev] [GSoC 2014 Crypto API] Status Update 4

2014-06-27 Thread Matthew Toseland
On 27/06/14 16:18, Florent Daigniere wrote: > On Fri, 2014-06-27 at 16:03 +0100, Matthew Toseland wrote: >> Re AEAD buckets ... generally authenticated ciphers use a "tag" at the >> end, equivalent to an HMAC. This means that if there is corruption we >> will only detect it at the end. In turn this

Re: [freenet-dev] [GSoC 2014 Crypto API] Status Update 4

2014-06-27 Thread Florent Daigniere
On Fri, 2014-06-27 at 16:03 +0100, Matthew Toseland wrote: > Re AEAD buckets ... generally authenticated ciphers use a "tag" at the > end, equivalent to an HMAC. This means that if there is corruption we > will only detect it at the end. In turn this means that *we can't use > Closer.close() on aut

Re: [freenet-dev] [GSoC 2014 Crypto API] Status Update 4

2014-06-27 Thread Matthew Toseland
Re AEAD buckets ... generally authenticated ciphers use a "tag" at the end, equivalent to an HMAC. This means that if there is corruption we will only detect it at the end. In turn this means that *we can't use Closer.close() on authenticated temp buckets!* (We do IIRC) Does this require any actio

Re: [freenet-dev] [GSoC 2014 Crypto API] Status Update 4

2014-06-27 Thread Steve Dougherty
On 06/23/2014 03:04 AM, unixninja92 wrote: > Hi all, > > I've had a busy week. The Crypto API now has interfaces with working > with all the most recently used algorithms as well as many of the old > ones meeting my deadline of having the first version of the API done > by 6/24. I have written cla