nettle-bugs

nettle-bugs@lists.lysator.liu.se

3 participants
2194 discussions

Side-channel silet memcmp
by nisse＠lysator.liu.se 28 Apr '14

28 Apr '14

There are lots of authentication functions which end by comparing two digests. The recent ccm_decrypt_message is typical, ending with return (memcmp(tag, src + mlength, tlength) == 0); This can leak information (via cache or timing) on the position of the first difference, which might cause problems in some situations. Would it be a good idea to add a side-channel silent memory comparison function? The hardest question is, as often, how it should be named. But it should be pretty easy to implement, I think int mem_equal (const void *ap, const void *bp, size_t n) { volatile const unsigned char *a = ap; volatile const unsigned char *b = bp volatile unsigned char d; size_t i; for (i = d = 0; i < n; i++) d |= a[i] ^ b[i]; return d == 0; } should do (even if maybe volatile const is an unusual combination of qualifiers). Is this a good name? The nacl library (by djb et al) includes similar functions, see http://nacl.cr.yp.to/verify.html. Regards, /Niels -- Niels Möller. PGP-encrypted email is preferred. Keyid C0B98E26. Internet email is subject to wholesale government surveillance.

3 7

Rename, MD5_DATA_SIZE -> MD5_BLOCK_SIZE, etc ?
by nisse＠lysator.liu.se 25 Apr '14

25 Apr '14

In another forum, it was suggested that UMAC_DATA_SIZE be renamed to UMAC_BLOCK_SIZE, and for consistency one could do the same with, e.g., MD5_DATA_SIZE. For the time being, the old names should be kept for backwards compatibility. Unlike block sizes for ciphers, these *_DATA_SIZE constants are rarely needed by applications; they are in the public headers mainly because they determine the buffer sizes in the context structs, and they are also needed for the HMAC construction. So the naming is not totally illogical, but I think using *_BLOCK_SIZE would be more consistent. What do you think? Regards, /Niels -- Niels Möller. PGP-encrypted email is preferred. Keyid C0B98E26. Internet email is subject to wholesale government surveillance.

1 1

Feature removals
by nisse＠lysator.liu.se 11 Apr '14

11 Apr '14

I'm considering removing the following features: * des-compat.h and all its functions. This provides some level of compatiblity with libdes (and possibly also old versions of openssl/ssleay). I've not heard of anyone actually using this. * rsa-compat.h and all its functions. Compatibility with RSAREF. I've never heard of anyone actually using this either. * The nettle_next_prime function. No longer used internally in Nettle's key generation functions, and applications should use the corresponding GMP function instead. Any objections? If you know of any use of these features, please speak up. (In case a feature is removed and it later turns out to be a mistake, I'm open to reintroduce features in an update, but I believe there's little need to keep these around). And any other cruft which should be removed while we're at it? Regards, /Niels -- Niels Möller. PGP-encrypted email is preferred. Keyid C0B98E26. Internet email is subject to wholesale government surveillance.

3 3

[PATCH] Enabled tests for openssl curves secp256r1 and secp192r1.
by Nikos Mavrogiannopoulos 10 Apr '14

10 Apr '14

This patch allows comparing the performance differences in secp256r1 (the curve mostly used in the web), between nettle and openssl. regards, Nikos

2 1

dsa_generate_keypair
by Nikos Mavrogiannopoulos 28 Mar '14

28 Mar '14

Hello, I tried to switch gnutls to use dsa_generate_keypair() to generate primes for the DH key exchange, but unfortunately this interface has the strict DSS checks for q_bits. Would it be possible to have a dh_generate_keypair() that does the exact same thing without the q_bits and p_bits limitations? regards, Nikos

4 21

[REVISED PATCH] Update of sha2.h to add sha512_224 and sha512_256.
by Joachim Strömbergson 23 Mar '14

23 Mar '14

Aloha! Ok here is a revised patch with defines of update functions like for sha384. This patch is in unified format. -- Med vänlig hälsning, Yours Joachim Strömbergson - Alltid i harmonisk svängning. ======================================================================== Joachim Strömbergson Secworks AB joachim(a)secworks.se ========================================================================

2 3

[REVISED PATCH] Update of sha512.c to add support for sha512_224 and sha512_256.
by Joachim Strömbergson 20 Mar '14

20 Mar '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Aloha! And here is the patch for sha512.c in unified diff format. Hopfully the attachment will also be signed now. ;-) - -- Med vänlig hälsning, Yours Joachim Strömbergson - Alltid i harmonisk svängning. ======================================================================== Joachim Strömbergson Secworks AB joachim(a)secworks.se ======================================================================== -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.22 (Darwin) Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iQIcBAEBCAAGBQJTKztHAAoJEF3cfFQkIuyNJSkQAM3IkVjah8lotb7aSZ/ubv+C jgLuPwCF1GM0IVZc2HV3fT6IPt2fhUe9rsh5AwX0tEW1zVnMHA2HH6mpgbyrGNds Xnvu8jyJN3XLN+f1OOPp1ulFkbgaK/Nkby7Rg+UHcMOZZ3FKUs/d0r/rEKAunkRL 7OhazSKV/PGxFl7wXUupHv1wOLlZxCyF+FpGr/bG3cM4bf+ep2dgwdMZYcb361H+ DxjbYQBW2Ch5v3dsXrhpz+n0YxjPa8+/9iMyEYeN/+iFU17zAchjCzJOF3RMp2fM +1WHzbikOu5pHZOpei/wBos0tXBhDVfK8wWKf5ziRUV9hnbZKfUM91yqT2CH92qc h8HsjPZrZ13oU73mKA0Hhejt586eBR8eNs3cTIuzAA2puh4m3lnzLNkHgdBPsIo1 wXJtacCGwUwrtum+U1gZASYF/ZKEKP2C/P/4idU+gBC23xBqOhjhrIHzvmkCxOqY 9zSJCvSd1+y2q1k8EL6Xa1TcJFrOOGRiUJPDbQN/sCfRp4i5hzUz7F+q1Fh6dOEi zbL0QarLxkBldr62AUI7y7O784NCGe8WeRN6rM9enHgr63fnqwfjOeIOop/3i4kY NbKG2dp8IokbTaAwjd8G23+ZGs3pPbd7X1z0hoCTwziMyWyIQYQggjrDboy6zAgJ FMnSkNPfKMbK5jR02nvg =Ic5b -----END PGP SIGNATURE-----

1 0

Support for FIPS 180-4 SHA-512/256?
by Joachim Strömbergson 20 Mar '14

20 Mar '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Aloha! Looking at sha2.h it seems that Nettle does not support the truncated SHA-512 versions SHA-512/224 and SHA-512/256 as defined in FIPS 180-4, correct? If not is that something that would be interesting to add? It is not a very big addition - basically add more variants of the H0-constants and then truncate. The benefit for users would be better performance on 64 bit CPUs compared to SHA-256 and SHA-224. - -- Med vänlig hälsning, Yours Joachim Strömbergson - Alltid i harmonisk svängning. ======================================================================== Joachim Strömbergson Secworks AB joachim(a)secworks.se ======================================================================== -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.22 (Darwin) Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iQIcBAEBCAAGBQJTKaL5AAoJEF3cfFQkIuyNZLwP/0W/OFf/wm/ZrWVV33lne8QO gevT3G7sOVEUm7oev4KJdRwtwMIx1NGStkPvAjcWmT6xOk9NluTJvvmJSM9tlP+6 PVDOBwHNruCASygy1aJRya4VrLwWz+PYtzTn4LkgIY1invkVGPs6Lc1KZe/yql7k FL0wygjYGIBK+tjNR0ZVTjoEJwu8qLItL4N4cUVG9tdBQDBRInLpQZDlabDegIwZ rziCFNz3BOo+6dGaF5gwPmyuaPLojneLox4SkWq4FliojMIeDN+qQxy8sD1reRbz a9DuIlo2w1+/9QudtuTRUgIJ+kSfo0RjMTb5Ea2dcfgNgeYf8oty8bUBfgBqEWZe gjGappJd/auE3ScQ8X7Sz/hDp2cT/IBNOSmYmwIl16z7sHRChqXiBYYjw+KDm75a SPdDYkeR9D8gVBDYR+h76IW+rsdEebnqTvOGHsMUYZOL08djhbw1TbVGkCw261dE 4NQjXkJBVXg/t1RPXl5hktOs1fbWHzcEP5DWrdX2yotjLoMZeaJzFP1DECG8Bzpw Cq4TvwPmaamQJlrOc43Le/VERWwZD/mCnQRPGE52kXwDQf2wcfk9m/B6sd6r0EO9 RXeNKJsfd8iLBpKFb9vte0Hi8++zJcXX5WpnmtEYAEylmJhpcErehNS/T3b1eFhi 9k3r19RvKcpJ3EoW2JXA =pUsr -----END PGP SIGNATURE-----

2 4

[PATCH] Add support for SHA-512-224 and SHA-512-256 in sha512.c
by Joachim Strömbergson 20 Mar '14

20 Mar '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Aloha! Note that this patch also adds zero extension to a few of the constants in the K constant table to fix the layout. Does not affect the functionality per se. - -- Med vänlig hälsning, Yours Joachim Strömbergson - Alltid i harmonisk svängning. ======================================================================== Joachim Strömbergson Secworks AB joachim(a)secworks.se ======================================================================== -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.22 (Darwin) Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iQIcBAEBCAAGBQJTKyQuAAoJEF3cfFQkIuyNpeQQAIeF2/kDteUTwIEcqzwPWhUu 1oC/2vMHG12jqE+mTZ40wNB9/u62u29s4e3X7qpVbrYhtERKgtXAzze3WlOI72Rf oS5X1Vnaik8z3/qHkzfFAqxh2jkanRIlUhhayriw5kb3I2jd05P69VJ0cbgZ+sKO AQMQFaxIUhzTr9EuEKhyaGYpJnU10VcFB8X0JIvMW/QA/YzAvhNAuU1OlZxtuQB/ irdikcQ6qc0Rb4ynqLbZ+4NTXwQ3384TPni6sDpCsXqUi5HX3WV54HCyis8jBROe 1ZlrhkziECZBRUklXPpzDl36rYibUvyo5L2Smx4SMAg7/ScDTyo/vLbbfT3X6p16 hjwknhvgvpStcbMmDnumshgQ1Z5h2hhN4E+R2Mx9DNpScFpDC5PxMAqwPFP8LLow fUwSoq+0oUZOdH/3+frMuEDyQQTpQ/EWRbEtZ5X7P6AFV/8ylP+TJ5zSPBXv7GNR n9crvdsxdSAEkmhJoU+8O7uSX2okYXHvIDliQkXxi2ABk98YZycopJURWUTx7iKp O7LsWwiYfmArf/JR+eqxfbv9TP+qYod8h9LVt+IDSqX4IW6bAGaggnZEGK6yLDpP 1BLdDzdUYEIgluv2KS6+tB0Gv8S8TSv0Zu+GfmUsTmLEj5jKNTUR1WgzEGkNBD7t W/nWBSwClSeNzUEHBqeH =z0eH -----END PGP SIGNATURE-----

1 0

[PATCH] Add support for SHA-512-224 and SHA-512-256 in sha2.h
by Joachim Strömbergson 20 Mar '14

20 Mar '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Aloha! - -- Med vänlig hälsning, Yours Joachim Strömbergson - Alltid i harmonisk svängning. ======================================================================== Joachim Strömbergson Secworks AB joachim(a)secworks.se ======================================================================== -----BEGIN PGP SIGNATURE----- Version: GnuPG/MacGPG2 v2.0.22 (Darwin) Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iQIcBAEBCAAGBQJTKyOmAAoJEF3cfFQkIuyN5vUQALrR22ghkKs0KW4+oqD1z8iQ +VHXY/wyKpgXXVHvklcfRakmmMC/TcTF4NVbhCZhd/htvISOuCo/UAohUjA9p3Q7 m2nX9Xs9Wo1h0Ysj9LSZNYjEAx74+zqauMPZ9btZcIiAh4jdjKYb0TZJq47Tuots DY6am6rQF+yATk+SwxDSxxXdfB64wG5w+MSC/Hbb5snpa4T1mZheJ7AIt14icOBx U5E60k3GrTmw7zpBN0MUg68Ex9gxtyePxFlsTasy7C/bzFXPXbkcZaaLndvaznCe lUy0w7NNXQZJdzEdzmF6eVzZB7stTVffK8eC7mbEbmTBJYg9tHvelmPJeRw1+oeT WNYAOxkX6I61B+OF7WvLwT0x0QgD6Y6QpYoyRzuYyKKsHTSo+qH0C0LaMdX0YJfB ynxc7mrdPHXFS/OrEPRNzKrbwcGYchXDctH0bb8NuQ56w9ZyP6/MxfublSbAIlXU jj6FUtTIQvTinI/P8FCS0pzGGuNfyjZOF4Ur73DMll5nATqMeQ0Oot1FXq56sz4a GkAgdNp+Ehq13ezaWbUz8aBs/kYIMT7tyuK6hMuqbkYPw9FuG4cBCyVne47GOjGC pTJp2HWKLYiKgpUNd0Vb2NFXDIZb+Psy0YcuuWFchWWm9PxvGoYba3qDvZDtkuOU X+Y5NpECTZQ8iePlhq+u =E9gN -----END PGP SIGNATURE-----

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

nettle-bugs