Re: GSoC 2018 - Modern cryptographic algorithms to netpgp, netpgpverify

Hubert Feyrer <[email protected]> Tue, 27 Mar 2018 08:30:21 +0200
Newsgroups gmane.os.netbsd.devel.crypto
Message-ID <[email protected]>
--Apple-Mail-189E25D8-A361-4FF0-9659-FCC49B67712E
Content-Type: text/plain;
	charset=us-ascii
Content-Transfer-Encoding: quoted-printable

Hi,
Is the project a port of software, or a rewrite? (remember: No GPL in the Ne=
tBSD kernel!)
No. But it will use already existing algorithms and implementation of those a=
lgorithms.
what existing implementation do you intend to use?


-Hubert=20




> Am 26.03.2018 um 20:36 schrieb Harsh Khatore <[email protected]=
om>:
>=20
> Hi Alistair,
>=20
> Please go through the proposal for GSoC project. Here is the link: GSoC pr=
oposal
>=20
> Please provide your valuable comments, as to how can I be selected as I re=
ally want to be a part of this experience.
>=20
> Formatting is not quite good. Please suggest on formatting also, as nothin=
g was mentioned in the guidelines.
>=20
> Thanks,
> Harsh Khatore
>=20
>> On Wed, Mar 21, 2018 at 11:45 AM, Alistair Crooks <[email protected]> wrote:=

>> When you read the answers below, I can understand if you think I'm being d=
ifficult.
>>=20
>> But this is how we can work out whether you've understood the task, and h=
ave thought about how you'd go about it.
>>=20
>>> On 20 March 2018 at 18:03, Harsh Khatore <[email protected]=
> wrote:
>>>> On Tue 20 Mar, 2018, 9:34 AM Alistair Crooks, <[email protected]> wrote:
>>>> Yeah, netpgpverify is the new, all-in-one, no pre-reqs codebase solely f=
or the verification part of signatures.
>>>>=20
>>>> ed25519 also needs to be added to netpgp, which is the older and more c=
rufty code base which covers signing and verification.
>>>=20
>>>=20
>>> So, as netpgpverify is the new code base for verification part, netpgp w=
ill be used for only the signing part or for both as it used to do?
>>=20
>> See the project specification - both are needed.
>> =20
>>>=20
>>>>=20
>>>> But before any code is touched, we'd need to know what gpg constants us=
es for these algorithms, since they're not in RFC 4880, and so we can intero=
perate with gpg in verifying and signing.
>>>=20
>>>=20
>>>=20
>>> We can get the ed25519 specifications from RFC8023 and see for the const=
ants but I have a doubt as to what are these constants that you referred?
>>=20
>> Look further.
>>=20
>> Think of the job that netpgpverify and netpgp do, and how they interopera=
te with other software.
>> =20
>>>=20
>>>>=20
>>>> We need to know what extra parts are needed (from different sources, al=
ong with their licences), and any other prereqs we might need for both netpg=
pverify and netpgp.
>>>=20
>>>=20
>>> I am not able to get what do you mean by extra parts and prereqs, can yo=
u explain, please?
>>=20
>> Think of other things that will be necessary to accomplish the task.=20
>>=20
>> In summary, I'd like to see what you think will be necessary. I'd like to=
 see the thoughts that go into how to accomplish a design and programming ta=
sk, what tests are necessary, and what to be wary of in the implementation. N=
ot in email, but in the proposal that you write - how you will accomplish (a=
nd surpass) the goals.
>> =20
>> You (and anyone else) should now have enough information -- from the proj=
ect specification, and from previous email --  to generate a proposal for th=
e project.
>>=20
>> Regards,
>> Alistair
>>=20
>> PS. One copy of email is enough, thanks :)
>>=20
>> =20
>>>=20
>>>> On Tue, Mar 20, 2018 at 12:13 AM Alistair Crooks <[email protected]> wrote=
:
>>>=20
>>>> Hi Harsh,
>>>>=20
>>>> I've been talking to others about it, but yours is the first mail I've r=
eceived.
>>>>=20
>>>> C proficiency is necessary. C++ not needed.
>>>>=20
>>>> I can help you out with any specific questions you have - please mail t=
hem here (i.e. to tech-crypto, CC me).
>>>>=20
>>>> Thanks,
>>>> Alistair
>>>>=20
>>>>> On 18 March 2018 at 10:57, Harsh Khatore <[email protected]=
om> wrote:
>>>>> Hi Alistair,
>>>>>=20
>>>>> Sorry for contacting you soo late for the above-mentioned project. Cou=
ld you provide me with help regarding the project so that I can work on it f=
or GSoC? Also, do you have anyone else preparing for it or can I continue wi=
th this?
>>>>>=20
>>>>> My knowledge of C and C++ languages is intermediate.
>>>>>=20
>>>>> Thanks,
>>>>> Harsh Khatore
>>>>>=20
>>>>>=20
>>>>=20
>>=20
>=20

--Apple-Mail-189E25D8-A361-4FF0-9659-FCC49B67712E
Content-Type: text/html;
	charset=utf-8
Content-Transfer-Encoding: quoted-printable

<html><head><meta http-equiv=3D"content-type" content=3D"text/html; charset=3D=
utf-8"></head><body dir=3D"auto"><div></div><div><div>Hi,</div><ul class=3D"=
lst-kix_lqm4x2n07pcs-0" style=3D"list-style-type: none; padding: 0px; margin=
: 0px;"><li style=3D"padding: 12pt 0px 18pt 0pt; line-height: 1.418181818181=
8182; margin: 0px 0px 0px 36pt;"><span style=3D"vertical-align: baseline; ba=
ckground-color: rgba(255, 255, 255, 0);">Is the project a port of software, o=
r a rewrite? (remember: No GPL in the NetBSD kernel!)</span></li></ul><ul cl=
ass=3D"lst-kix_lqm4x2n07pcs-1 start" style=3D"list-style-type: none; padding=
: 0px; margin: 0px;"><li style=3D"padding: 12pt 0px 18pt 0pt; line-height: 1=
.4181818181818182; margin: 0px 0px 0px 72pt;"><span style=3D"vertical-align:=
 baseline; background-color: rgba(255, 255, 255, 0);">No. But it will use al=
ready existing algorithms and implementation of those algorithms.</span></li=
></ul></div><div><span style=3D"background-color: rgba(255, 255, 255, 0);">w=
hat existing implementation do you intend to use?</span></div><div><span sty=
le=3D"background-color: rgba(255, 255, 255, 0);"><br></span></div><div><br><=
/div><div> -Hubert&nbsp;</div><div><br></div><div><br></div><div><br></div><=
div><br>Am 26.03.2018 um 20:36 schrieb Harsh Khatore &lt;<a href=3D"mailto:k=
[email protected]">[email protected]</a>&gt;:<br><b=
r></div><blockquote type=3D"cite"><div><div dir=3D"ltr">Hi Alistair,<br><br>=
Please go through the proposal for GSoC project. Here is the link:&nbsp;<a h=
ref=3D"https://docs.google.com/document/d/1QayByVOYj2FINohvL4Mr-_Xq9Cb0Tnwrr=
scfXgjPnDo/edit">GSoC proposal</a><br><br>Please provide your valuable comme=
nts, as to how can I be selected as I really want to be a part of this exper=
ience.<br><br>Formatting is not quite good. Please suggest on formatting als=
o, as nothing was mentioned in the guidelines.<div><br></div><div>Thanks,<br=
>Harsh Khatore</div></div><div class=3D"gmail_extra"><br><div class=3D"gmail=
_quote">On Wed, Mar 21, 2018 at 11:45 AM, Alistair Crooks <span dir=3D"ltr">=
&lt;<a href=3D"mailto:[email protected]" target=3D"_blank">[email protected]</a>&g=
t;</span> wrote:<br><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .=
8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir=3D"ltr"><div class=
=3D"gmail_extra">When you read the answers below, I can understand if you th=
ink I'm being difficult.</div><div class=3D"gmail_extra"><br></div><div clas=
s=3D"gmail_extra">But this is how we can work out whether you've understood t=
he task, and have thought about how you'd go about it.</div><div class=3D"gm=
ail_extra"><br><div class=3D"gmail_quote"><span class=3D"">On 20 March 2018 a=
t 18:03, Harsh Khatore <span dir=3D"ltr">&lt;<a href=3D"mailto:khatore.harsh=
[email protected]" target=3D"_blank">khatore.harsh.github@gmail.<wbr>com</a>=
&gt;</span> wrote:<br><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0=
 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir=3D"ltr"><span>

<span class=3D"m_-7292100075572547699m_-4543146436764044190gmail-im" style=3D=
"color:rgb(80,0,80);font-family:arial,sans-serif;font-size:12.8px;font-style=
:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:4=
00;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:non=
e;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text=
-decoration-style:initial;text-decoration-color:initial"><div><div class=3D"=
gmail_quote"><div dir=3D"ltr">On Tue 20 Mar, 2018, 9:34 AM Alistair Crooks, &=
lt;<a href=3D"mailto:[email protected]" rel=3D"noreferrer" style=3D"color:rgb(1=
7,85,204);text-decoration:none" target=3D"_blank">[email protected]</a>&gt; wro=
te:<br></div><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0=
.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir=3D"lt=
r">Yeah, netpgpverify is the new, all-in-one, no pre-reqs codebase solely fo=
r the verification part of signatures.<div><br></div><div>ed25519 also needs=
 to be added to netpgp, which is the older and more crufty code base which c=
overs signing and verification.</div></div></blockquote></div></div><div dir=
=3D"auto"><br></div><div dir=3D"auto"></div></span><div dir=3D"auto" style=3D=
"color:rgb(34,34,34);font-family:arial,sans-serif;font-size:12.8px;font-styl=
e:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:=
400;letter-spacing:normal;text-align:start;text-indent:0px;text-transform:no=
ne;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255);tex=
t-decoration-style:initial;text-decoration-color:initial"><span style=3D"fon=
t-family:sans-serif">So, as netpgpverify is the new code base for verificati=
on part, netpgp will be used for only the signing part or for both as it use=
d to do?</span></div></span></div></blockquote><div><br></div></span><div>Se=
e the project specification - both are needed.</div><span class=3D""><div>&n=
bsp;</div><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;borde=
r-left:1px #ccc solid;padding-left:1ex"><div dir=3D"ltr"><span><div dir=3D"a=
uto" style=3D"color:rgb(34,34,34);font-family:arial,sans-serif;font-size:12.=
8px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal=
;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text=
-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(255=
,255,255);text-decoration-style:initial;text-decoration-color:initial"><br><=
/div><span class=3D"m_-7292100075572547699m_-4543146436764044190gmail-im" st=
yle=3D"color:rgb(80,0,80);font-family:arial,sans-serif;font-size:12.8px;font=
-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;font-we=
ight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-transfo=
rm:none;white-space:normal;word-spacing:0px;background-color:rgb(255,255,255=
);text-decoration-style:initial;text-decoration-color:initial"><div dir=3D"a=
uto"></div><div dir=3D"auto"><div class=3D"gmail_quote"><blockquote class=3D=
"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(20=
4,204,204);padding-left:1ex"><div dir=3D"ltr"><div><br></div><div>But before=
 any code is touched, we'd need to know what gpg constants uses for these al=
gorithms, since they're not in RFC 4880, and so we can interoperate with gpg=
 in verifying and signing.</div><div></div></div></blockquote></div></div><d=
iv dir=3D"auto"><br></div><div dir=3D"auto"><br></div></span><div dir=3D"aut=
o" style=3D"color:rgb(34,34,34);font-family:arial,sans-serif;font-size:12.8p=
x;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;f=
ont-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-t=
ransform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,2=
55,255);text-decoration-style:initial;text-decoration-color:initial">We can g=
et the ed25519 specifications from RFC8023 and see for the constants but I h=
ave a doubt as to what are these constants that you referred?</div></span></=
div></blockquote><div><br></div></span><div>Look further.</div><div><br></di=
v><div>Think of the job that netpgpverify and netpgp do, and how they intero=
perate with other software.</div><span class=3D""><div>&nbsp;</div><blockquo=
te class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc sol=
id;padding-left:1ex"><div dir=3D"ltr"><span><span class=3D"m_-72921000755725=
47699m_-4543146436764044190gmail-im" style=3D"color:rgb(80,0,80);font-family=
:arial,sans-serif;font-size:12.8px;font-style:normal;font-variant-ligatures:=
normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-a=
lign:start;text-indent:0px;text-transform:none;white-space:normal;word-spaci=
ng:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text-=
decoration-color:initial"><div dir=3D"auto"><br></div><div dir=3D"auto"><div=
 class=3D"gmail_quote"><blockquote class=3D"gmail_quote" style=3D"margin:0px=
 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div=
 dir=3D"ltr"><div><br></div><div>We need to know what extra parts are needed=
 (from different sources, along with their licences), and any other prereqs w=
e might need for both netpgpverify and netpgp.</div><div></div></div></block=
quote></div></div><div dir=3D"auto"><br></div></span></span><div dir=3D"auto=
" style=3D"color:rgb(34,34,34);font-family:arial,sans-serif;font-size:12.8px=
;font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;fo=
nt-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-tr=
ansform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,25=
5,255);text-decoration-style:initial;text-decoration-color:initial">I am not=
 able to get what do you mean by extra parts and prereqs, can you explain, p=
lease?</div></div></blockquote><div><br></div></span><div><span style=3D"col=
or:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;font-style:nor=
mal;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;l=
etter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;wh=
ite-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-dec=
oration-style:initial;text-decoration-color:initial;float:none;display:inlin=
e">Think of other things that will be necessary to accomplish the task.</spa=
n>&nbsp;</div><div><br></div><div>In summary, I'd like to see what you think=
 will be necessary. I'd like to see the thoughts that go into how to accompl=
ish a design and programming task, what tests are necessary, and what to be w=
ary of in the implementation. Not in email, but in the proposal that you wri=
te - how you will accomplish (and surpass) the goals.</div><div>&nbsp;</div>=
<div>You (and anyone else) should now have enough information -- from the pr=
oject specification, and from previous email --&nbsp; to generate a proposal=
 for the project.<div><br></div><div>Regards,</div><div><span style=3D"color=
:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;font-style:norma=
l;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;let=
ter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;whit=
e-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decor=
ation-style:initial;text-decoration-color:initial;float:none;display:inline"=
>Alistair</span></div><div><br></div><div>PS. One copy of email is enough, t=
hanks :)<br style=3D"color:rgb(34,34,34);font-family:arial,sans-serif;font-s=
ize:small;font-style:normal;font-variant-ligatures:normal;font-variant-caps:=
normal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0p=
x;text-transform:none;white-space:normal;word-spacing:0px;background-color:r=
gb(255,255,255);text-decoration-style:initial;text-decoration-color:initial"=
><br class=3D"m_-7292100075572547699gmail-Apple-interchange-newline"></div>&=
nbsp;</div><span class=3D""><blockquote class=3D"gmail_quote" style=3D"margi=
n:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><br><div class=3D"=
gmail_quote"><span><div dir=3D"ltr">On Tue, Mar 20, 2018 at 12:13 AM Alistai=
r Crooks &lt;<a href=3D"mailto:[email protected]" target=3D"_blank">agc@pkgsrc.=
org</a>&gt; wrote:<br></div></span><div><div class=3D"m_-7292100075572547699=
h5"><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left=
:1px #ccc solid;padding-left:1ex"><div dir=3D"ltr">Hi Harsh,<div><br></div><=
div>I've been talking to others about it, but yours is the first mail I've r=
eceived.</div><div><br></div><div>C proficiency is necessary. C++ not needed=
.</div><div><br></div><div>I can help you out with any specific questions yo=
u have - please mail them here (i.e. to tech-crypto, CC me).</div><div><br><=
/div><div>Thanks,</div><div>Alistair</div></div><div class=3D"gmail_extra"><=
br><div class=3D"gmail_quote">On 18 March 2018 at 10:57, Harsh Khatore <span=
 dir=3D"ltr">&lt;<a href=3D"mailto:[email protected]" target=3D=
"_blank">[email protected]<wbr>m</a>&gt;</span> wrote:<br><block=
quote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc s=
olid;padding-left:1ex"><div dir=3D"ltr">Hi Alistair,<br><br>Sorry for contac=
ting you soo late for the above-mentioned project. Could you provide me with=
 help regarding the project so that I can work on it for GSoC? Also, do you h=
ave anyone else preparing for it or can I continue with this?<div><br>My kno=
wledge of&nbsp;C and C++ languages is intermediate.<br><br>Thanks,<br>Harsh K=
hatore<br><br><br></div></div>
</blockquote></div><br></div>
</blockquote></div></div></div>
</blockquote></span></div><br></div></div>
</blockquote></div><br></div>
</div></blockquote></body></html>=

--Apple-Mail-189E25D8-A361-4FF0-9659-FCC49B67712E--