Re: [zeromq-dev] CURVE security on master

2013-06-21 Thread Shaukat Mahmood Ahmad
Good to know that, is current implementation (of security) stable, I mean can it be used in stable applications? On Thu, Jun 20, 2013 at 9:37 PM, Pieter Hintjens p...@imatix.com wrote: Hi all, A heads-up that we now have CURVE security partially working on libzmq master. This implements

Re: [zeromq-dev] CURVE security on master

2013-06-21 Thread Pieter Hintjens
Stable, yes (at least when we finish it), but not yet recommended for production use because it hasn't been aggressively reviewed by security experts yet. It will be marked as Experimental for at least 6-12 months. The goal of putting this into libzmq is to make it easier for people to critique

Re: [zeromq-dev] CURVE security on master

2013-06-21 Thread Shaukat Mahmood Ahmad
@Pieter: Thanks for the update. On Fri, Jun 21, 2013 at 2:42 PM, Pieter Hintjens p...@imatix.com wrote: Stable, yes (at least when we finish it), but not yet recommended for production use because it hasn't been aggressively reviewed by security experts yet. It will be marked as Experimental

[zeromq-dev] CURVE security on master

2013-06-20 Thread Pieter Hintjens
Hi all, A heads-up that we now have CURVE security partially working on libzmq master. This implements these RFCs: * http://rfc.zeromq.org/spec:25/CURVE mechanism * http://rfc.zeromq.org/spec:26/CurveZMQ * http://rfc.zeromq.org/spec:27/ZAP - ZeroMQ Authentication Protocol Messages are not yet

Re: [zeromq-dev] CURVE security on master

2013-06-20 Thread Ian Barber
Very cool! Great work guys. Ian On Thu, Jun 20, 2013 at 5:37 PM, Pieter Hintjens p...@imatix.com wrote: Hi all, A heads-up that we now have CURVE security partially working on libzmq master. This implements these RFCs: * http://rfc.zeromq.org/spec:25/CURVE mechanism *

Re: [zeromq-dev] CURVE security on master

2013-06-20 Thread Ondrej Kupka
This is really great, thank you! Ondra Kupka On Jun 20, 2013 6:38 PM, Pieter Hintjens p...@imatix.com wrote: Hi all, A heads-up that we now have CURVE security partially working on libzmq master. This implements these RFCs: * http://rfc.zeromq.org/spec:25/CURVE mechanism *

Re: [zeromq-dev] CURVE security on master

2013-06-20 Thread Pieter Hintjens
On Thu, Jun 20, 2013 at 10:58 PM, Ondrej Kupka ondra@gmail.com wrote: This is really great, thank you! It's been fun. The nice thing is how simple it all turns out to be. A huge thanks to Daniel J. Bernstein[1] for making it so. For what it's worth, the 256-bit elliptic curve cryptography