On Wed, 03 May 2000, Scott G. Miller wrote:
<snip> 
> Okay, all the structure is in place, but we have a couple of problems:
> 
> 1) There seems to be no way to nicely fit this into the framework.  The
> way Listeners are constructed doesnt allow us to easily insert new
> wrappers around existing connections.  I've hardcoded it to work for now.

>From the look of it I am guessing you didn't commit any of this code. I would
tend to say that you should implement the key exchange within the listener
object, and the crypto within the connection object. So that the connection
returned by listener.accept() already contains started Cipher Streams as
connection.in and connection.out.

Perhaps there is some loss of flexibility in that, but the option is adding
another layer around the connection after it is established, but before the
connectionhandler is started. 

> 2) There seems to be some corruption of the initial part of the data
> field.  Is there a flush going on before we write the trailing field in a
> message?  (The output has a sequence of null characters just before the
> real data, evidence that flush was called on the cipherstream)

I see that you fixed this? I am worried about writing null characters on a
flush() command to outputstream, since it is not within the contract of flush()
in java.io.OutputStream. Perhaps you should add another flush method to the
connection for this (fullFlush() or something).

> 3) It works with XOR encryption.  Before we put stronger ciphers in
> (trivial) we need to notify the US government.  See
> http://www.epic.org/crypto/

I don't talk to governments.

> 
> On the plus side, key exchange works beautifully and seems fairly quick
> (with the current small key).
> 
>       Scott
> 
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.0.1 (GNU/Linux)
> Comment: For info see http://www.gnupg.org
> 
> iD8DBQE5D3C/pXyM95IyRhURAiv/AJwK7XPOg+zGWSG7UMAIPVnVJ+vJ/wCgy45V
> 1LU+6YhW9QIygsqDgztnGok=
> =uGCH
> -----END PGP SIGNATURE-----
> 
> 
> _______________________________________________
> Freenet-dev mailing list
> Freenet-dev at lists.sourceforge.net
> http://lists.sourceforge.net/mailman/listinfo/freenet-dev
-- 

Oskar Sandberg

md98-osa at nada.kth.se

#!/bin/perl -sp0777i<X+d*lMLa^*lN%0]dsXx++lMlN/dsM0<j]dsj
$/=unpack('H*',$_);$_=`echo 16dio\U$k"SK$/SM$n\EsN0p[lN*1
lK[d2%Sa2/d0$^Ixp"|dc`;s/\W//g;$_=pack('H*',/((..)*)$/)

_______________________________________________
Freenet-dev mailing list
Freenet-dev at lists.sourceforge.net
http://lists.sourceforge.net/mailman/listinfo/freenet-dev

Reply via email to