Java and Python routers don't get along. :-(

thanks hez, yes, definitely keep posting this stuff to the list.  pointing
out bugs will hopefully shame me into doing more debugging ;)

yes, the destination and a few other data structures were off-spec. 
They've been updated now.

One outstanding thing is the key size - thecrypto has implemented 4096bit
ElGamal, while the spec says the public keys are only 2048bit.  (it also
says the private keys are 2048bit too, which isn't correct for asym).

Does anyone have a good reason to use 4096bit instead of 2048bit for
end to end encryption?  This is used only on the first message in a series
of dest<-->dest messages (later messages are AES'ed only, preceeded with
a unique random session tag). 

If not, I'm going to update the code and spec to reflect PublicKey being
a 2048bit Integer, PrivateKey being a 1024bit Integer, SigningPublicKey
being a 2048bit Integer, and SigningPrivateKey being a 2048bit Integer.
 Signature using DSA for a 2048/1024 public/private keypair is currently
set at 320bits.  Is this correct?  Also, SHA256 is set at 256bits.  Is
this correct, or is it 256bytes?  AES messages are CFB with the IV provided
padded to 16byte blocks.

To be perfectly frank, I'm considering dropping the end to end requirement
and leaving that up to the application or even the api libraries to provide.
 However, specifying a common end to end strategy does allow security
and enables inter-library applications to communicate.  The other side
of the coin is that if we didn't have end to end encryption (but merely
verification), libraries would be able to work out their own interoperability
standard.  [e.g. do kids calling their parents over VOI2P to chat require
the same encryption as a militant contacting other militants to plan
an operation?]

Thoughts?

-jrandom



Concerned about your privacy? Follow this link to get
FREE encrypted email: https://www.hushmail.com/?l=2

Free, ultra-private instant messaging with Hush Messenger
https://www.hushmail.com/services.php?subloc=messenger&l=434

Promote security and make money with the Hushmail Affiliate Program: 
https://www.hushmail.com/about.php?subloc=affiliate&l=427