Re: [GNU Crypto] More keyrings, PBE.

[Casey Marshall]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

>>>>> "Raif" == Raif S Naffah <address@hidden> writes:

Raif> On Tue, 21 Oct 2003 09:12 pm, Casey Marshall wrote:
>> >>>>> "Raif" == Raif S Naffah <address@hidden> writes:

Raif> also, is there anything we can do to improve usage of the
Raif> library with Jesse?
>>  The situation I would like best is to have as much crypto code as
>> possible in GNU Crypto. As it stands I have implemented in Jessie:
>> 
>> * Diffie-Hellman (I just need to figure out GNU-Crypto's API to
>> remove this).
>> * Parts of SRP (similar situation as DH).

Raif> if you point me to the class(es) that (is supposed to) use these
Raif> i may be able to help.

These are used in org.metastatic.jessie.SSLSocket, in the
doClientHandshake and doServerHandshake methods.

>> * RSA encryption.

Raif> that's already in the library: gnu.crypto.sig.rsa.RSA.  it
Raif> probably needs some refactoring.  i can do that if again you
Raif> point me to a/the client class.

Same place. The class org.metastatic.jessie.RSA is the implementation
I'm using, which does the PKCS1v1.5 padding scheme.

>> * DSS that takes a pre-computed hash.

Raif> a reference to a paper or a using class can help me refactor/add
Raif> this code.

Look at org.metastatic.jessie.DSS. I use this because a SHA-1 hash is
being computed during the handshake phase anyway, and the DSS
signature is only computed rarely.

>> * MACs and PRNGs that are SSL-specific.

Raif> paper/specs?

<http://wp.netscape.com/eng/ssl3/draft302.txt> and
<http://www.ietf.org/rfc/rfc2246.txt>. These are only used in SSL, so
these are fine to keep in the package, unless you can think of a
compelling reason to include it in GNU Crypto.

- -- 
Casey Marshall || address@hidden
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
Comment: Processed by Mailcrypt 3.5.7 <http://mailcrypt.sourceforge.net/>

iD8DBQE/lgFigAuWMgRGsWsRAgW5AJ0dWJm6WoiupkunR5Jh685kg/nqewCggl7q
qehaBqrbLZ9R7/FZnbjHzmk=
=aQdG
-----END PGP SIGNATURE-----