[ pycrypto-Patches-700778 ] Added the key as attribute

"SourceForge.net" <[email protected]> Mon, 10 Mar 2003 09:28:16 -0800
Newsgroups gmane.comp.python.cryptography.cvs
Message-ID <[email protected]>
Patches item #700778, was opened at 2003-03-10 12:40
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=320937&aid=700778&group_id=20937

Category: None
Group: None
Status: Open
Resolution: None
Priority: 5
Submitted By: Tage Stabell-Kulø (tagesk)
Assigned to: A.M. Kuchling (akuchling)
Summary: Added the key as attribute

Initial Comment:
We're implementing a server that deals with crypto for many clients.


Some clients need to pass crypto-objects to the server.  When


the server needs to send /the key/ to a peer, there is need to


obtain the original key from an object.


This code adds a new attribut (named key) that holds the original


key as it was used to initialize the object.







----------------------------------------------------------------------

>Comment By: Tage Stabell-Kulø (tagesk)
Date: 2003-03-10 18:28

Message:
Logged In: YES 
user_id=207511

The object contains the key, although in a sligthly different 
representation (installed by block_init).  Hence, the object should be 
treated with the outmost care in any case.  Adding the key should not add 
to the risk.  I try to attach the patch again.


----------------------------------------------------------------------

Comment By: A.M. Kuchling (akuchling)
Date: 2003-03-10 16:05

Message:
Logged In: YES 
user_id=11375

No patch is attached; SF's file uploading is buggy and often fails, so try again.

Why not just pass a string containing the key instead of a crypto object, though?  I dislike the idea of keeping the key around in the object, because a security hole might make it possible to poke around in a process's memory and find the key.


----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=320937&aid=700778&group_id=20937


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf