bugWeeChat - Bugs: bug #38749, Reassigned to another tracker...

 
 

bug #38749: Reassigned to another tracker [was: [PATCH] Implement DH-AES SASL encryption method]

Submitter:  None
Submitted:  Tue 16 Apr 2013 06:51:00 AM UTC
   
 
Category:  irc plugin Severity:  3 - Normal
Item Group:  irc protocol Status:  None
Privacy:  Public Assigned to:  None
Originator Name:  Elizabeth Myers Originator Email:  * -email is unavailable-
Open/Closed:  Closed Release:  * other
IRC nick:  Elizacat
* Mandatory Fields

Add a New Comment Rich Markup
   

Tue 16 Apr 2013 07:14:05 AM UTC, comment #1: 

THIS ITEM WAS REASSIGNED TO PATCH #8020


Please, do not post any new comments to this item.

Sebastien Helleu <flashcode>
Group administrator
Tue 16 Apr 2013 06:51:00 AM UTC, original submission:  

THIS ITEM WAS REASSIGNED TO PATCH #8020
Hello,

I have implemented DH-AES (one of the intended successors to DH-BLOWFISH) support in WeeChat. It has been added to Atheme and tested with such.

DH-BLOWFISH is no longer recommended, as Blowfish suffers from certain classes of weak keys and is not exactly easy to mitigate with DH negotiation (it would require verifying that the key is not a weak key and generating a new random value if it is). The original author of Blowfish, Bruce Schneier, also advises against using Blowfish and suggests using a different cipher.

As its initial DH parameters parsing is the same as DH-BLOWFISH, I have separated that into a function to be used as common code in DH-BLOWFISH and DH-AES. However, the padding scheme (16 vs 8 bytes), data encrypted (both username and password rather than just the password), packing scheme (IV is placed where the username used to be, since that is sent encrypted), and obviously cipher (AES-{128,192,256}-CBC), are all totally different.

Services-side reference implementation is at https://github.com/atheme/atheme/blob/master/modules/saslserv/dh-aes.c

Anonymous

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by None (Submitted the item)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.

     

    Follow 2 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2013-04-16 flashcode Reassign ItemWeeChat, bug #38749 WeeChat, patch #8020
    2013-04-16 None Attached File- Added 0001-Implement-DH-AES-encrypted-password-scheme.patch, #27889

    Back to the top

    Powered by Savane 3.13-f8d8.
    Corresponding source code