nettle-bugs

nettle-bugs@lists.lysator.liu.se

3 participants
2194 discussions

RSA-SHA512 interface problem
by nisse＠lysator.liu.se 24 Mar '10

24 Mar '10

I just realized that supporting RSA with SHA-512 leads to an interface problem. For RSA keys to work with PKCS#1 signatures, the modulo n has to be large enough. Up to now, I have used two defines, RSA_MINIMUM_N_OCTETS and RSA_MINIMUM_N_BITS, which are determined so that pkcs#1 works with *all* supported hash function. The rsa_public_key_prepare and rsa_private_key_prepare functions check that n is large enough and returns a success/failure value. Then no other rsa functions are expected to ever fail due to n being too small. With sha256, the minimum was 62 octets or 489 bits. But for sha512, the minimum is 94 octets or 745 bits. So if I just bump the RSA_MINIMUM_N_* accordingly, support for 512 bits RSA keys disappears. (And for comparison, with md5, the minimum is 353 bits). I really hope noone still uses 512 bit RSA for anything important, but I nevertheless don't think it's appropriate to just drop support for it. Some applications may have modest security requirements where small keys are somehow appropriate, and then there are legacy applications and old keys. It should still be *possible* to verify signatures made many years ago, using 512-bit RSA, even though they can no longer be considered very secure. I haven't figured out yet how I want to handle this, and I see no solution without its own problems. Some alternatives: * Discontinue the RSA_MINIMUM_N_*, or use some reasonable value which isn't large enough for rsa-sha512. Let signature functions abort if they encounter a too small key. Possibly define new hash-specific constants, RSA_<hash>_MINIMUM_N_BITS or so. * Add some argument to the rsa_*_key_prepare functions to say what the key is to be used for, so that it can check if the key is large enough. I don't quite like this; it's against the spirit of the rest of the Nettle interface. * Introduce a return value for the signing functions, to let them return a success/failure indication. This is analogous to the rsa_encrypt function, which checks if the key size is large enough for the current message size. If we do this, is the return value from the rsa_*_key_prepare functions still useful? I think it's less of a problem with public key operations, since signature verification and rsa decryption have a return value and for too small keys they can easily return fail for all messages. The problem is the signing functions. No matter how the problem is solved, it will break backwards compatibility in some way. Suggestions? Regards, /Niels -- Niels Möller. PGP-encrypted email is preferred. Keyid C0B98E26. Internet email is subject to wholesale government surveillance.

2 2

nettle bindings for higher-level languages
by Daniel Kahn Gillmor 23 Mar '10

23 Mar '10

I was wondering if there is a catalog somewhere of bindings that exist for nettle for higher-level languages. in particular, i'm interested in perl and python, but i'd be curious to know about the status of other languages as well. Is this documented somewhere? Is there a list of higher-level languages that the nettle author(s) would like to see prioritized? Regards, --dkg

2 2

GNU Nettle cryptographic library
by nisse＠lysator.liu.se 30 Jun '09

30 Jun '09

Nettle-2.0 was released June 8. Since then, Nettle has been dubbed a GNU package, and I'm therefore reannouncing this release here. The original announcement is included below. Future releases will be distributed at ftp.gnu.org, but unfortunately, I haven't been able to set that up before summer vacations (and I leave my signing keys at home). What is Nettle? A quote from the introduction in the Nettle Manual: Nettle is a cryptographic library that is designed to fit easily in more or less any context: In crypto toolkits for object-oriented languages (C++, Python, Pike, ...), in applications like LSH or GNUPG, or even in kernel space. In most contexts, you need more than the basic cryptographic algorithms, you also need some way to keep track of available algorithms, their properties and variants. You often have some algorithm selection process, often dictated by a protocol you want to implement. And as the requirements of applications differ in subtle and not so subtle ways, an API that fits one application well can be a pain to use in a different context. And that is why there are so many different cryptographic libraries around. Nettle tries to avoid this problem by doing one thing, the low-level crypto stuff, and providing a simple but general interface to it. In particular, Nettle doesn't do algorithm selection. It doesn't do memory allocation. It doesn't do any I/O. The idea is that one can build several application and context specific interfaces on top of Nettle, and share the code, test cases, benchmarks, documentation, etc. Examples are the Nettle module for the Pike language, and LSH, which both use an object-oriented abstraction on top of the library. Nettle is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation. See the file COPYING for details. Most, but not all, of Nettle can also be used under the terms of the GNU Lesser General Public License; please read the Copyright section of the manual if you want to exercise this option. The Nettle home page is http://www.lysator.liu.se/~nisse/nettle/. Happy hacking, /Niels Möller Original announcement: NEWS for the 2.0 release This release breaks binary compatibility by splitting the library into two. Some other smaller changes that are not backwards compatible are also done at the same time. * The nettle library is split into two libraries, libnettle and libhogweed. libnettle contains the symmetric crypto algorithms that don't depend on GMP, while libhogweed contains the public key algorithms that depend on GMP. Using a single library worked fine with static linking, but not with dynamic linking. Consider an application that uses nettle and which doesn't use any public key cryptography. If this application is linked dynamically to nettle, it would have to be linked also with GMP if and only if public key support was enabled when the nettle library was installed. The library names are libnettle.so.3.0 and libhogweed.so.1.0, with sonames libnettle.so.3 and libhogweed.so.1. * Function typedefs have been changed to non-pointer types. E.g, the typedef void (nettle_hash_init_func *)(void *ctx); of previous versions is replaced by typedef void (nettle_hash_init_func)(void *ctx); This makes it possible to use the type when declaring functions, like nettle_hash_init_func foo_hash_init; void foo_hash_init(void *ctx) { ... } * Changes to the yarrow256 interface. The automatic seed file generation, and the seed_file member in struct yarrow256_ctx, has been removed. To generate a new seed file, use yarrow256_random. The function yarrow256_force_reseed has been replaced by the two functions yarrow256_fast_reseed and yarrow256_slow_reseed, which were previously static. This interface change makes it easier to mix in the current content of the seed file before overwriting it with newly generated data. Other changes: * Nettle manual now contributed to the public domain, to enable remixing into documentation of programs that use Nettle. * The sexp-conv program preserves comments when using the advanced syntax for output. Optionally locks the output file. * The base64 decoder recognizes ASCII FF (form feed) and VT (vertical tab) as white space. * New x86_64 implementations of AES and SHA1. On a 2.2 GHz opteron, SHA1 was benchmarked at 250 MByte/s, and AES-128 at 110 MByte/s. * Performance of AES increased by 20-30% on x86. * New programs in the examples directory: erathostenes and next-prime. Available at http://www.lysator.liu.se/~nisse/archive/nettle-2.0.tar.gz ftp://ftp.lysator.liu.se/pub/security/lsh/nettle-2.0.tar.gz as usual. Regards, /Niels

1 0

セフレ急募です！！私達は社宅住まいの仲良し奥様５人組みです。
by ★最新メール★ 11 Jun '09

11 Jun '09

シン様 http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ご利用いただき誠にありがとうございます。社宅奥様５人組みさんより、新着メッセージが届いています。 ★一言コメント『セフレ急募です！！私達は社宅住まいの仲良し奥様５人組みです。』全文確認⇒返信は↓ http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ------------------------------ 他の女性を探される場合はこちら http://hero-ine.net/w/login.asp?um=nettle-bugs%40lists.lysator.liu.se

1 0

やはりこういったサイトでは金額を明確にするお誘いが普通なんでしょうか？50万で納得してもらえますか？
by ★最新メール★ 11 Jun '09

11 Jun '09

シン様 http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ご利用いただき誠にありがとうございます。理恵さんより、新着メッセージが届いています。 ★一言コメント『やはりこういったサイトでは金額を明確にするお誘いが普通なんでしょうか？50万で納得してもらえますか？』全文確認⇒返信は↓ http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ------------------------------ 他の女性を探される場合はこちら http://hero-ine.net/w/login.asp?um=nettle-bugs%40lists.lysator.liu.se

1 0

シン様だけに絞ってお誘いします。詳細をこの一通に凝縮しました。総合病院勤務、看護部長の鈴木茜です。
by ★最新メール★ 11 Jun '09

11 Jun '09

シン様 http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ご利用いただき誠にありがとうございます。鈴木茜、看護部長55歳さんより、新着メッセージが届いています。 ★一言コメント『シン様だけに絞ってお誘いします。詳細をこの一通に凝縮しました。総合病院勤務、看護部長の鈴木茜です。』全文確認⇒返信は↓ http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ------------------------------ 他の女性を探される場合はこちら http://hero-ine.net/w/login.asp?um=nettle-bugs%40lists.lysator.liu.se

1 0

来週の頭から主人が海外出張の為時間の融通は利きます。月末まで帰ってこないので、焦る必要もないですし、
by ★最新メール★ 11 Jun '09

11 Jun '09

シン様 http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ご利用いただき誠にありがとうございます。理恵さんより、新着メッセージが届いています。 ★一言コメント『来週の頭から主人が海外出張の為時間の融通は利きます。月末まで帰ってこないので、焦る必要もないですし、』全文確認⇒返信は↓ http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ------------------------------ 他の女性を探される場合はこちら http://hero-ine.net/w/login.asp?um=nettle-bugs%40lists.lysator.liu.se

1 0

秘密逆援割切りのお付き合い希望の55歳です。シンさんが興味が有ればメールを読んで下さい。
by ★最新メール★ 11 Jun '09

11 Jun '09

シン様 http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ご利用いただき誠にありがとうございます。喜世子さんより、新着メッセージが届いています。 ★一言コメント『秘密逆援割切りのお付き合い希望の55歳です。シンさんが興味が有ればメールを読んで下さい。』全文確認⇒返信は↓ http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ------------------------------ 他の女性を探される場合はこちら http://hero-ine.net/w/login.asp?um=nettle-bugs%40lists.lysator.liu.se

1 0

オナニーしてる写真自分で撮ってみました。鏡で写して撮ったんで解りにくいかもしれませんが見てくださいね
by ★最新メール★ 10 Jun '09

10 Jun '09

シン様 http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ご利用いただき誠にありがとうございます。倫子さんより、新着メッセージが届いています。 ★一言コメント『オナニーしてる写真自分で撮ってみました。鏡で写して撮ったんで解りにくいかもしれませんが見てくださいね』全文確認⇒返信は↓ http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ------------------------------ 他の女性を探される場合はこちら http://hero-ine.net/w/login.asp?um=nettle-bugs%40lists.lysator.liu.se

1 0

あのシンさんだよね？私だよ私。約束の物まだとってあるから、渡したい。そしてホテルで
by ★最新メール★ 10 Jun '09

10 Jun '09

シン様 http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ご利用いただき誠にありがとうございます。再登録しました。さんより、新着メッセージが届いています。 ★一言コメント『あのシンさんだよね？私だよ私。約束の物まだとってあるから、渡したい。そしてホテルで』全文確認⇒返信は↓ http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ------------------------------ 他の女性を探される場合はこちら http://hero-ine.net/w/login.asp?um=nettle-bugs%40lists.lysator.liu.se

1 0

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

nettle-bugs