Fwd: SecureSessionV1Server

Robert Withers <robert.w.withers@gmail.com> Sun, 10 April 2016 03:21 UTC

Return-Path: <robert.w.withers@gmail.com>
X-Original-To: ietf@ietfa.amsl.com
Delivered-To: ietf@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 4513E12D1DC for <ietf@ietfa.amsl.com>; Sat, 9 Apr 2016 20:21:15 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -2.699
X-Spam-Level:
X-Spam-Status: No, score=-2.699 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, FREEMAIL_FROM=0.001, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Authentication-Results: ietfa.amsl.com (amavisd-new); dkim=pass (2048-bit key) header.d=gmail.com
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Blx4ykh3E8Nr for <ietf@ietfa.amsl.com>; Sat, 9 Apr 2016 20:21:13 -0700 (PDT)
Received: from mail-yw0-x22f.google.com (mail-yw0-x22f.google.com [IPv6:2607:f8b0:4002:c05::22f]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 620E912D094 for <ietf@ietf.org>; Sat, 9 Apr 2016 20:21:13 -0700 (PDT)
Received: by mail-yw0-x22f.google.com with SMTP id o66so83442933ywc.3 for <ietf@ietf.org>; Sat, 09 Apr 2016 20:21:13 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=subject:references:to:from:message-id:date:user-agent:mime-version :in-reply-to; bh=/i7EHvtbjXBnwIiU7nHGNg70B5O4FuCS5BHJGA2C63k=; b=t7nuab/ukK2915t1KMygWre5c0kihmYOn0qe2y5n5UcyzSsonC0hAVIeB6mwnlbwfb ypka2xKFh8kryOqzITAhubqsPqovlWr5NL2q6yGEMs0Sps/BrbKcflvN2oqRTZIZ23C1 OdHHsZ4aai1uNtxk4rPvVNf6s00WkXxsNdxdjQVEJD0SZ1cGoFhNXoFLXnF8htuGxeBv A2cEKbO3RZp0REsyT0QijNE+pUfF/mS6AFhKKtdVNZwV5kChnw2sz038uPS8EWwCdEhe mPXYsC1I8xcam7JnTQGS2gpmVytGkk5gHPPVi+RH8MpvEbdDZUl71Crm3nMPtIqDvE/D T8Ew==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:subject:references:to:from:message-id:date :user-agent:mime-version:in-reply-to; bh=/i7EHvtbjXBnwIiU7nHGNg70B5O4FuCS5BHJGA2C63k=; b=b2R2qWMLLbk/8cZgMdJAql0VsrrQ75Wh+40YNzWoTU9mBJIuCPQkMf911m+JNxOg+e gPnGiMFHu/CVAMl5SAHltUH37J7Wu3JVmUKxj78J9+xEk1HQhfg3h3Z4p0i2e9/s+ek0 fSQ8rrI1pbMAFef7brJBqT657kkaEWXKf6Iz1k/nmsz/+mTIoVNzusw5i8PeQhTTPjw5 msOvx0YPP2SzshuR1C+chkD0RwK5IuUkqrC/SG4hNSleLvPIlaYP6VWJjvlXCN0eoem9 jLniYvP6r6eQqXVaHeqEursrAm10UsNQVMmErLYWv4kmvohlwaI+Mo/jkYXa2rX1B/90 4wkw==
X-Gm-Message-State: AD7BkJKe/hPKBHTss/hJ55MRXEr1TvilzTcnu+gWJ+53JvFhE+M/mvPjVR8QTJLW3+Nw9w==
X-Received: by 10.129.95.84 with SMTP id t81mr9235709ywb.16.1460258472624; Sat, 09 Apr 2016 20:21:12 -0700 (PDT)
Received: from [192.168.2.2] (cpe-107-15-45-203.nc.res.rr.com. [107.15.45.203]) by smtp.gmail.com with ESMTPSA id i125sm11633546ywb.24.2016.04.09.20.21.11 for <ietf@ietf.org> (version=TLSv1/SSLv3 cipher=OTHER); Sat, 09 Apr 2016 20:21:11 -0700 (PDT)
Subject: Fwd: SecureSessionV1Server
References: <5709C0B7.4070604@gmail.com>
To: IETF Discussion <ietf@ietf.org>
From: Robert Withers <robert.w.withers@gmail.com>
X-Forwarded-Message-Id: <5709C0B7.4070604@gmail.com>
Message-ID: <5709C6A5.8050603@gmail.com>
Date: Sat, 09 Apr 2016 23:21:09 -0400
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:38.0) Gecko/20100101 Thunderbird/38.6.0
MIME-Version: 1.0
In-Reply-To: <5709C0B7.4070604@gmail.com>
Content-Type: multipart/alternative; boundary="------------030906050007000609060001"
Archived-At: <http://mailarchive.ietf.org/arch/msg/ietf/Fhr1bXC3qPZJdHO29xdXVkEbiEk>
X-BeenThere: ietf@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: IETF-Discussion <ietf.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/ietf>, <mailto:ietf-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/ietf/>
List-Post: <mailto:ietf@ietf.org>
List-Help: <mailto:ietf-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/ietf>, <mailto:ietf-request@ietf.org?subject=subscribe>
X-List-Received-Date: Sun, 10 Apr 2016 03:21:15 -0000

Please find a squeak implementation of the frame design I published here 
some months ago.

Robert

-------- Forwarded Message --------
Subject: 	SecureSessionV1Server
Date: 	Sat, 9 Apr 2016 22:55:51 -0400
From: 	Robert Withers <robert.w.withers@gmail.com>
To: 	The general-purpose Squeak developers list 
<squeak-dev@lists.squeakfoundation.org>, Pharo Development List 
<pharo-dev@lists.pharo.org>, Cryptography Mailing List 
<cryptography@lists.squeakfoundation.org>



Over the course of several months, I've been working on the
implementation of SecureSessionV1 to adopt new protocol and message
frame definitions. As to the original connection protocol and frames, I
preserved it as a backwards compatible Vintage implementation. This
change simplified a fair bit of code and will allow for some further
modifications.

I apologize for my habit in using the code and unit tests to document
the system, an old habit to try for a self-describing domain language of
secure sessions. Please look in SecureSession-Tests for examples in
using both the Vintage and V1 protocols. The key classes for the Vintage
version remain SecureSessionServer and SecureSessionTerminal, while the
V1 version use SecureSessionV1Server and SecureSessionV1Terminal.

Here are some helpful links..

The V1 Frame Design is http://jmp.sh/1Uo0dr7, though I should note there
are changes to the DataHeader, which holds the mac and the plaintextLength.

The code is found in http://www.squeaksource.com/Cryptography and the
SecureSession package requires the Cryptography package and for a
notable speed improvements the Cryptography plugins build for your VM.

- Robert