bugWeeChat - Bugs: bug #38749, Reassigned to another tracker...

 
 

bug #38749: Reassigned to another tracker [was: [PATCH] Implement DH-AES SASL encryption method]

Submitted by:  None
Submitted on:  Tue 16 Apr 2013 06:51:00 AM UTC  
 
Category: irc pluginSeverity: 3 - Normal
Item Group: irc protocolStatus: None
Privacy: PublicAssigned to: None
Originator Name: Elizabeth MyersOriginator Email: -unavailable-
Open/Closed: ClosedRelease: other
IRC nick: Elizacat

Add a New Comment (Rich MarkupRich Markup):
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Tue 16 Apr 2013 07:14:05 AM UTC, comment #1:

THIS ITEM WAS REASSIGNED TO PATCH #8020


Please, do not post any new comments to this item.

Sebastien Helleu <flashcode>
Project Administrator
Tue 16 Apr 2013 06:51:00 AM UTC, original submission:

THIS ITEM WAS REASSIGNED TO PATCH #8020
Hello,

I have implemented DH-AES (one of the intended successors to DH-BLOWFISH) support in WeeChat. It has been added to Atheme and tested with such.

DH-BLOWFISH is no longer recommended, as Blowfish suffers from certain classes of weak keys and is not exactly easy to mitigate with DH negotiation (it would require verifying that the key is not a weak key and generating a new random value if it is). The original author of Blowfish, Bruce Schneier, also advises against using Blowfish and suggests using a different cipher.

As its initial DH parameters parsing is the same as DH-BLOWFISH, I have separated that into a function to be used as common code in DH-BLOWFISH and DH-AES. However, the padding scheme (16 vs 8 bytes), data encrypted (both username and password rather than just the password), packing scheme (IV is placed where the username used to be, since that is sent encrypted), and obviously cipher (AES-{128,192,256}-CBC), are all totally different.

Services-side reference implementation is at https://github.com/atheme/atheme/blob/master/modules/saslserv/dh-aes.c

Anonymous

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by None (Submitted the item)
  •  

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follow 2 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    Tue 16 Apr 2013 07:14:05 AM UTCflashcodeReassign ItemWeeChat, bug #38749=>WeeChat, patch #8020
    Tue 16 Apr 2013 06:51:00 AM UTCNoneAttached File-=>Added 0001-Implement-DH-AES-encrypted-password-scheme.patch, #27889

    Back to the top


    Powered by Savane 3.1-cleanup