bugWeeChat - Bugs: bug #38749, Reassigned to another tracker...


bug #38749: Reassigned to another tracker [was: [PATCH] Implement DH-AES SASL encryption method]

Submitted by:  None
Submitted on:  Tue 16 Apr 2013 06:51:00 AM UTC  
Category:  irc plugin Severity:  3 - Normal
Item Group:  irc protocol Status:  None
Privacy:  Public Assigned to:  None
Originator Name:  Elizabeth Myers Originator Email:  -email is unavailable-
Open/Closed:  Closed Release:  other
IRC nick:  Elizacat

Add a New Comment (Rich Markup)

You are not logged in

Please log in, so followups can be emailed to you.


Tue 16 Apr 2013 07:14:05 AM UTC, comment #1: 


Please, do not post any new comments to this item.

Sebastien Helleu <flashcode>
Project Administrator
Tue 16 Apr 2013 06:51:00 AM UTC, original submission:  


I have implemented DH-AES (one of the intended successors to DH-BLOWFISH) support in WeeChat. It has been added to Atheme and tested with such.

DH-BLOWFISH is no longer recommended, as Blowfish suffers from certain classes of weak keys and is not exactly easy to mitigate with DH negotiation (it would require verifying that the key is not a weak key and generating a new random value if it is). The original author of Blowfish, Bruce Schneier, also advises against using Blowfish and suggests using a different cipher.

As its initial DH parameters parsing is the same as DH-BLOWFISH, I have separated that into a function to be used as common code in DH-BLOWFISH and DH-AES. However, the padding scheme (16 vs 8 bytes), data encrypted (both username and password rather than just the password), packing scheme (IV is placed where the username used to be, since that is sent encrypted), and obviously cipher (AES-{128,192,256}-CBC), are all totally different.

Services-side reference implementation is at https://github.com/atheme/atheme/blob/master/modules/saslserv/dh-aes.c



(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:

No files currently attached


Depends on the following items: None found

Items that depend on this one: None found


Carbon-Copy List
  • -email is unavailable- added by None (Submitted the item)

    Do you think this task is very important?
    If so, you can add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.




    Follow 2 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2013-04-16 flashcode Reassign ItemWeeChat, bug #38749 => WeeChat, patch #8020
    2013-04-16 None Attached File- => Added 0001-Implement-DH-AES-encrypted-password-scheme.patch, #27889

    Back to the top

    Powered by Savane 3.5