Re: GSoC 2018 - Modern cryptographic algorithms to netpgp, netpgpverify

--0000000000003bbb10056a8a973c
Content-Type: text/plain; charset="UTF-8"

Hello,

Thank you for accepting my proposal for GSoC 2018. Since, it is the
community bonding period, please guide on the steps to discuss about the
project in more details and move with the environment setup and start with
understanding the required codebase.

Please provide your feedback on my approach, work and communication so that
I can improve on it and we can make most out of the project.

Thanks,
Harsh Khatore

On Tue 27 Mar, 2018, 12:15 PM Harsh Khatore, <[email protected]>
wrote:

> There is no such exact implementation for ed25519 or salsa20 hash, but
> there are few open source modified implementations, I can take reference
> from them( as they have different licenses so cannot use them directly )
> and implement the required algorithms based on our need, combining with
> reading the relevant papers and documents.
>
> On Tue 27 Mar, 2018, 12:00 PM Hubert Feyrer, <[email protected]> wrote:
>
>> Hi,
>>
>>    - Is the project a port of software, or a rewrite? (remember: No GPL
>>    in the NetBSD kernel!)
>>
>>
>>    - No. But it will use already existing algorithms and implementation
>>    of those algorithms.
>>
>> what existing implementation do you intend to use?
>>
>>
>> -Hubert
>>
>>
>>
>>
>> Am 26.03.2018 um 20:36 schrieb Harsh Khatore <
>> [email protected]>:
>>
>> Hi Alistair,
>>
>> Please go through the proposal for GSoC project. Here is the link: GSoC
>> proposal
>> <https://docs.google.com/document/d/1QayByVOYj2FINohvL4Mr-_Xq9Cb0TnwrrscfXgjPnDo/edit>
>>
>> Please provide your valuable comments, as to how can I be selected as I
>> really want to be a part of this experience.
>>
>> Formatting is not quite good. Please suggest on formatting also, as
>> nothing was mentioned in the guidelines.
>>
>> Thanks,
>> Harsh Khatore
>>
>> On Wed, Mar 21, 2018 at 11:45 AM, Alistair Crooks <[email protected]> wrote:
>>
>>> When you read the answers below, I can understand if you think I'm being
>>> difficult.
>>>
>>> But this is how we can work out whether you've understood the task, and
>>> have thought about how you'd go about it.
>>>
>>> On 20 March 2018 at 18:03, Harsh Khatore <[email protected]
>>> > wrote:
>>>
>>>> On Tue 20 Mar, 2018, 9:34 AM Alistair Crooks, <[email protected]> wrote:
>>>>
>>>>> Yeah, netpgpverify is the new, all-in-one, no pre-reqs codebase solely
>>>>> for the verification part of signatures.
>>>>>
>>>>> ed25519 also needs to be added to netpgp, which is the older and more
>>>>> crufty code base which covers signing and verification.
>>>>>
>>>>
>>>> So, as netpgpverify is the new code base for verification part, netpgp
>>>> will be used for only the signing part or for both as it used to do?
>>>>
>>>
>>> See the project specification - both are needed.
>>>
>>>
>>>>
>>>>
>>>>> But before any code is touched, we'd need to know what gpg constants
>>>>> uses for these algorithms, since they're not in RFC 4880, and so we can
>>>>> interoperate with gpg in verifying and signing.
>>>>>
>>>>
>>>>
>>>> We can get the ed25519 specifications from RFC8023 and see for the
>>>> constants but I have a doubt as to what are these constants that you
>>>> referred?
>>>>
>>>
>>> Look further.
>>>
>>> Think of the job that netpgpverify and netpgp do, and how they
>>> interoperate with other software.
>>>
>>>
>>>>
>>>>
>>>>> We need to know what extra parts are needed (from different sources,
>>>>> along with their licences), and any other prereqs we might need for both
>>>>> netpgpverify and netpgp.
>>>>>
>>>>
>>>> I am not able to get what do you mean by extra parts and prereqs, can
>>>> you explain, please?
>>>>
>>>
>>> Think of other things that will be necessary to accomplish the task.
>>>
>>> In summary, I'd like to see what you think will be necessary. I'd like
>>> to see the thoughts that go into how to accomplish a design and programming
>>> task, what tests are necessary, and what to be wary of in the
>>> implementation. Not in email, but in the proposal that you write - how you
>>> will accomplish (and surpass) the goals.
>>>
>>> You (and anyone else) should now have enough information -- from the
>>> project specification, and from previous email --  to generate a proposal
>>> for the project.
>>>
>>> Regards,
>>> Alistair
>>>
>>> PS. One copy of email is enough, thanks :)
>>>
>>>
>>>
>>>>
>>>> On Tue, Mar 20, 2018 at 12:13 AM Alistair Crooks <[email protected]>
>>>> wrote:
>>>>
>>>>> Hi Harsh,
>>>>>
>>>>> I've been talking to others about it, but yours is the first mail I've
>>>>> received.
>>>>>
>>>>> C proficiency is necessary. C++ not needed.
>>>>>
>>>>> I can help you out with any specific questions you have - please mail
>>>>> them here (i.e. to tech-crypto, CC me).
>>>>>
>>>>> Thanks,
>>>>> Alistair
>>>>>
>>>>> On 18 March 2018 at 10:57, Harsh Khatore <
>>>>> [email protected]> wrote:
>>>>>
>>>>>> Hi Alistair,
>>>>>>
>>>>>> Sorry for contacting you soo late for the above-mentioned project.
>>>>>> Could you provide me with help regarding the project so that I can work on
>>>>>> it for GSoC? Also, do you have anyone else preparing for it or can I
>>>>>> continue with this?
>>>>>>
>>>>>> My knowledge of C and C++ languages is intermediate.
>>>>>>
>>>>>> Thanks,
>>>>>> Harsh Khatore
>>>>>>
>>>>>>
>>>>>>
>>>>>
>>>
>>

--0000000000003bbb10056a8a973c
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"auto">Hello,<div dir=3D"auto"><br></div><div dir=3D"auto">Thank=
 you for accepting my proposal for GSoC 2018. Since, it is the community bo=
nding period, please guide on the steps to discuss about the project in mor=
e details and move with the environment setup and start with understanding =
the required codebase.=C2=A0</div><div dir=3D"auto"><br></div><div dir=3D"a=
uto">Please provide your feedback on my approach, work and communication so=
 that I can improve on it and we can make most out of the project.=C2=A0</d=
iv><div dir=3D"auto"><br></div><div dir=3D"auto">Thanks,=C2=A0</div><div di=
r=3D"auto">Harsh Khatore=C2=A0</div></div><br><div class=3D"gmail_quote"><d=
iv dir=3D"ltr">On Tue 27 Mar, 2018, 12:15 PM Harsh Khatore, &lt;<a href=3D"=
mailto:[email protected]">[email protected]</a>&g=
t; wrote:<br></div><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 =
.8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir=3D"auto">There i=
s no such exact implementation for ed25519 or salsa20 hash, but there are f=
ew open source modified implementations, I can take reference from them( as=
 they have different licenses so cannot use them directly )=C2=A0 and imple=
ment the required algorithms based on our need, combining with reading the =
relevant papers and documents.=C2=A0</div><br><div class=3D"gmail_quote"><d=
iv dir=3D"ltr">On Tue 27 Mar, 2018, 12:00 PM Hubert Feyrer, &lt;<a href=3D"=
mailto:[email protected]" target=3D"_blank" rel=3D"noreferrer">hubert@feyrer=
.de</a>&gt; wrote:<br></div><blockquote class=3D"gmail_quote" style=3D"marg=
in:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir=3D"auto=
"><div></div><div><div>Hi,</div><ul class=3D"m_-576684264942126132m_6415615=
749405175474lst-kix_lqm4x2n07pcs-0" style=3D"list-style-type:none;padding:0=
px;margin:0px"><li style=3D"padding:12pt 0px 18pt 0pt;line-height:1.4181818=
181818182;margin:0px 0px 0px 36pt"><span style=3D"vertical-align:baseline;b=
ackground-color:rgba(255,255,255,0)">Is the project a port of software, or =
a rewrite? (remember: No GPL in the NetBSD kernel!)</span></li></ul><ul cla=
ss=3D"m_-576684264942126132m_6415615749405175474lst-kix_lqm4x2n07pcs-1 m_-5=
76684264942126132m_6415615749405175474start" style=3D"list-style-type:none;=
padding:0px;margin:0px"><li style=3D"padding:12pt 0px 18pt 0pt;line-height:=
1.4181818181818182;margin:0px 0px 0px 72pt"><span style=3D"vertical-align:b=
aseline;background-color:rgba(255,255,255,0)">No. But it will use already e=
xisting algorithms and implementation of those algorithms.</span></li></ul>=
</div><div><span style=3D"background-color:rgba(255,255,255,0)">what existi=
ng implementation do you intend to use?</span></div><div><span style=3D"bac=
kground-color:rgba(255,255,255,0)"><br></span></div><div><br></div><div> -H=
ubert=C2=A0</div><div><br></div><div><br></div><div><br></div><div><br>Am 2=
6.03.2018 um 20:36 schrieb Harsh Khatore &lt;<a href=3D"mailto:khatore.hars=
[email protected]" rel=3D"noreferrer noreferrer" target=3D"_blank">khatore=
[email protected]</a>&gt;:<br><br></div><blockquote type=3D"cite"><di=
v><div dir=3D"ltr">Hi Alistair,<br><br>Please go through the proposal for G=
SoC project. Here is the link:=C2=A0<a href=3D"https://docs.google.com/docu=
ment/d/1QayByVOYj2FINohvL4Mr-_Xq9Cb0TnwrrscfXgjPnDo/edit" rel=3D"noreferrer=
 noreferrer" target=3D"_blank">GSoC proposal</a><br><br>Please provide your=
 valuable comments, as to how can I be selected as I really want to be a pa=
rt of this experience.<br><br>Formatting is not quite good. Please suggest =
on formatting also, as nothing was mentioned in the guidelines.<div><br></d=
iv><div>Thanks,<br>Harsh Khatore</div></div><div class=3D"gmail_extra"><br>=
<div class=3D"gmail_quote">On Wed, Mar 21, 2018 at 11:45 AM, Alistair Crook=
s <span dir=3D"ltr">&lt;<a href=3D"mailto:[email protected]" rel=3D"noreferrer=
 noreferrer" target=3D"_blank">[email protected]</a>&gt;</span> wrote:<br><blo=
ckquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #c=
cc solid;padding-left:1ex"><div dir=3D"ltr"><div class=3D"gmail_extra">When=
 you read the answers below, I can understand if you think I&#39;m being di=
fficult.</div><div class=3D"gmail_extra"><br></div><div class=3D"gmail_extr=
a">But this is how we can work out whether you&#39;ve understood the task, =
and have thought about how you&#39;d go about it.</div><div class=3D"gmail_=
extra"><br><div class=3D"gmail_quote"><span>On 20 March 2018 at 18:03, Hars=
h Khatore <span dir=3D"ltr">&lt;<a href=3D"mailto:khatore.harsh.github@gmai=
l.com" rel=3D"noreferrer noreferrer" target=3D"_blank">khatore.harsh.github=
@gmail.com</a>&gt;</span> wrote:<br><blockquote class=3D"gmail_quote" style=
=3D"margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir=
=3D"ltr"><span>

<span class=3D"m_-576684264942126132m_6415615749405175474m_-729210007557254=
7699m_-4543146436764044190gmail-im" style=3D"color:rgb(80,0,80);font-family=
:arial,sans-serif;font-size:12.8px;font-style:normal;font-variant-ligatures=
:normal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text=
-align:start;text-indent:0px;text-transform:none;white-space:normal;word-sp=
acing:0px;background-color:rgb(255,255,255);text-decoration-style:initial;t=
ext-decoration-color:initial"><div><div class=3D"gmail_quote"><div dir=3D"l=
tr">On Tue 20 Mar, 2018, 9:34 AM Alistair Crooks, &lt;<a href=3D"mailto:agc=
@pkgsrc.org" rel=3D"noreferrer noreferrer noreferrer" style=3D"color:rgb(17=
,85,204);text-decoration:none" target=3D"_blank">[email protected]</a>&gt; wro=
te:<br></div><blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px =
0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div dir=3D"=
ltr">Yeah, netpgpverify is the new, all-in-one, no pre-reqs codebase solely=
 for the verification part of signatures.<div><br></div><div>ed25519 also n=
eeds to be added to netpgp, which is the older and more crufty code base wh=
ich covers signing and verification.</div></div></blockquote></div></div><d=
iv dir=3D"auto"><br></div><div dir=3D"auto"></div></span><div dir=3D"auto" =
style=3D"color:rgb(34,34,34);font-family:arial,sans-serif;font-size:12.8px;=
font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;fo=
nt-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-t=
ransform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,=
255,255);text-decoration-style:initial;text-decoration-color:initial"><span=
 style=3D"font-family:sans-serif">So, as netpgpverify is the new code base =
for verification part, netpgp will be used for only the signing part or for=
 both as it used to do?</span></div></span></div></blockquote><div><br></di=
v></span><div>See the project specification - both are needed.</div><span><=
div>=C2=A0</div><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8e=
x;border-left:1px #ccc solid;padding-left:1ex"><div dir=3D"ltr"><span><div =
dir=3D"auto" style=3D"color:rgb(34,34,34);font-family:arial,sans-serif;font=
-size:12.8px;font-style:normal;font-variant-ligatures:normal;font-variant-c=
aps:normal;font-weight:400;letter-spacing:normal;text-align:start;text-inde=
nt:0px;text-transform:none;white-space:normal;word-spacing:0px;background-c=
olor:rgb(255,255,255);text-decoration-style:initial;text-decoration-color:i=
nitial"><br></div><span class=3D"m_-576684264942126132m_6415615749405175474=
m_-7292100075572547699m_-4543146436764044190gmail-im" style=3D"color:rgb(80=
,0,80);font-family:arial,sans-serif;font-size:12.8px;font-style:normal;font=
-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-s=
pacing:normal;text-align:start;text-indent:0px;text-transform:none;white-sp=
ace:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decorati=
on-style:initial;text-decoration-color:initial"><div dir=3D"auto"></div><di=
v dir=3D"auto"><div class=3D"gmail_quote"><blockquote class=3D"gmail_quote"=
 style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);p=
adding-left:1ex"><div dir=3D"ltr"><div><br></div><div>But before any code i=
s touched, we&#39;d need to know what gpg constants uses for these algorith=
ms, since they&#39;re not in RFC 4880, and so we can interoperate with gpg =
in verifying and signing.</div><div></div></div></blockquote></div></div><d=
iv dir=3D"auto"><br></div><div dir=3D"auto"><br></div></span><div dir=3D"au=
to" style=3D"color:rgb(34,34,34);font-family:arial,sans-serif;font-size:12.=
8px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:norma=
l;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;te=
xt-transform:none;white-space:normal;word-spacing:0px;background-color:rgb(=
255,255,255);text-decoration-style:initial;text-decoration-color:initial">W=
e can get the ed25519 specifications from RFC8023 and see for the constants=
 but I have a doubt as to what are these constants that you referred?</div>=
</span></div></blockquote><div><br></div></span><div>Look further.</div><di=
v><br></div><div>Think of the job that netpgpverify and netpgp do, and how =
they interoperate with other software.</div><span><div>=C2=A0</div><blockqu=
ote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc s=
olid;padding-left:1ex"><div dir=3D"ltr"><span><span class=3D"m_-57668426494=
2126132m_6415615749405175474m_-7292100075572547699m_-4543146436764044190gma=
il-im" style=3D"color:rgb(80,0,80);font-family:arial,sans-serif;font-size:1=
2.8px;font-style:normal;font-variant-ligatures:normal;font-variant-caps:nor=
mal;font-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;=
text-transform:none;white-space:normal;word-spacing:0px;background-color:rg=
b(255,255,255);text-decoration-style:initial;text-decoration-color:initial"=
><div dir=3D"auto"><br></div><div dir=3D"auto"><div class=3D"gmail_quote"><=
blockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-l=
eft:1px solid rgb(204,204,204);padding-left:1ex"><div dir=3D"ltr"><div><br>=
</div><div>We need to know what extra parts are needed (from different sour=
ces, along with their licences), and any other prereqs we might need for bo=
th netpgpverify and netpgp.</div><div></div></div></blockquote></div></div>=
<div dir=3D"auto"><br></div></span></span><div dir=3D"auto" style=3D"color:=
rgb(34,34,34);font-family:arial,sans-serif;font-size:12.8px;font-style:norm=
al;font-variant-ligatures:normal;font-variant-caps:normal;font-weight:400;l=
etter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;w=
hite-space:normal;word-spacing:0px;background-color:rgb(255,255,255);text-d=
ecoration-style:initial;text-decoration-color:initial">I am not able to get=
 what do you mean by extra parts and prereqs, can you explain, please?</div=
></div></blockquote><div><br></div></span><div><span style=3D"color:rgb(34,=
34,34);font-family:arial,sans-serif;font-size:small;font-style:normal;font-=
variant-ligatures:normal;font-variant-caps:normal;font-weight:400;letter-sp=
acing:normal;text-align:start;text-indent:0px;text-transform:none;white-spa=
ce:normal;word-spacing:0px;background-color:rgb(255,255,255);text-decoratio=
n-style:initial;text-decoration-color:initial;float:none;display:inline">Th=
ink of other things that will be necessary to accomplish the task.</span>=
=C2=A0</div><div><br></div><div>In summary, I&#39;d like to see what you th=
ink will be necessary. I&#39;d like to see the thoughts that go into how to=
 accomplish a design and programming task, what tests are necessary, and wh=
at to be wary of in the implementation. Not in email, but in the proposal t=
hat you write - how you will accomplish (and surpass) the goals.</div><div>=
=C2=A0</div><div>You (and anyone else) should now have enough information -=
- from the project specification, and from previous email --=C2=A0 to gener=
ate a proposal for the project.<div><br></div><div>Regards,</div><div><span=
 style=3D"color:rgb(34,34,34);font-family:arial,sans-serif;font-size:small;=
font-style:normal;font-variant-ligatures:normal;font-variant-caps:normal;fo=
nt-weight:400;letter-spacing:normal;text-align:start;text-indent:0px;text-t=
ransform:none;white-space:normal;word-spacing:0px;background-color:rgb(255,=
255,255);text-decoration-style:initial;text-decoration-color:initial;float:=
none;display:inline">Alistair</span></div><div><br></div><div>PS. One copy =
of email is enough, thanks :)<br style=3D"color:rgb(34,34,34);font-family:a=
rial,sans-serif;font-size:small;font-style:normal;font-variant-ligatures:no=
rmal;font-variant-caps:normal;font-weight:400;letter-spacing:normal;text-al=
ign:start;text-indent:0px;text-transform:none;white-space:normal;word-spaci=
ng:0px;background-color:rgb(255,255,255);text-decoration-style:initial;text=
-decoration-color:initial"><br class=3D"m_-576684264942126132m_641561574940=
5175474m_-7292100075572547699gmail-Apple-interchange-newline"></div>=C2=A0<=
/div><span><blockquote class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;bor=
der-left:1px #ccc solid;padding-left:1ex"><br><div class=3D"gmail_quote"><s=
pan><div dir=3D"ltr">On Tue, Mar 20, 2018 at 12:13 AM Alistair Crooks &lt;<=
a href=3D"mailto:[email protected]" rel=3D"noreferrer noreferrer" target=3D"_b=
lank">[email protected]</a>&gt; wrote:<br></div></span><div><div class=3D"m_-5=
76684264942126132m_6415615749405175474m_-7292100075572547699h5"><blockquote=
 class=3D"gmail_quote" style=3D"margin:0 0 0 .8ex;border-left:1px #ccc soli=
d;padding-left:1ex"><div dir=3D"ltr">Hi Harsh,<div><br></div><div>I&#39;ve =
been talking to others about it, but yours is the first mail I&#39;ve recei=
ved.</div><div><br></div><div>C proficiency is necessary. C++ not needed.</=
div><div><br></div><div>I can help you out with any specific questions you =
have - please mail them here (i.e. to tech-crypto, CC me).</div><div><br></=
div><div>Thanks,</div><div>Alistair</div></div><div class=3D"gmail_extra"><=
br><div class=3D"gmail_quote">On 18 March 2018 at 10:57, Harsh Khatore <spa=
n dir=3D"ltr">&lt;<a href=3D"mailto:[email protected]" rel=3D"=
noreferrer noreferrer" target=3D"_blank">[email protected]</a>=
&gt;</span> wrote:<br><blockquote class=3D"gmail_quote" style=3D"margin:0 0=
 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir=3D"ltr">Hi Al=
istair,<br><br>Sorry for contacting you soo late for the above-mentioned pr=
oject. Could you provide me with help regarding the project so that I can w=
ork on it for GSoC? Also, do you have anyone else preparing for it or can I=
 continue with this?<div><br>My knowledge of=C2=A0C and C++ languages is in=
termediate.<br><br>Thanks,<br>Harsh Khatore<br><br><br></div></div>
</blockquote></div><br></div>
</blockquote></div></div></div>
</blockquote></span></div><br></div></div>
</blockquote></div><br></div>
</div></blockquote></div></blockquote></div></blockquote></div>

--0000000000003bbb10056a8a973c--