Re: [VOTE] Apache Pirk 0.1.0-incubating Release

[Ellison Anne Williams]

Hi,

It has been 72 hours and the IMPC vote for Apache Pirk 0.1.0-release has
passed with four +1 (binding) votes and no 0 or -1 votes. The Apache Pirk
(incubating) community will proceed with the release.

Thanks!

Ellison Anne

On Sat, Aug 27, 2016 at 12:01 PM, Tim Ellison  wrote:

> +1 binding
>
> Regards,
> Tim
>
>
> On 26/08/16 13:37, Ellison Anne Williams wrote:
> > Hi All,
> >
> > The PPMC vote for the Apache Pirk 0.1.0-incubating release has passed
> after
> > updating the cryptographic export information; it is a source-only
> release
> > (no binary artifacts). We kindly request that the IPMC now vote on the
> > release.
> >
> > The PPMC vote thread is located here:
> > *https://lists.apache.org/thread.html/8eed650dfe1acdd56a4b29ed5973ad
> d87883703fbebd1ba28150422f@%3Cdev.pirk.apache.org%3E
> >  d87883703fbebd1ba28150422f@%3Cdev.pirk.apache.org%3E>*
> >
> > The artifacts can be downloaded here https://dist.apache.org/
> > repos/dist/dev/incubator/pirk/release/0.1.0/
> >
> > The artifacts have been signed with key 1FD8849B found in the KEYS file:
> > https://dist.apache.org/repos/dist/dev/incubator/pirk/KEYS
> >
> > All JIRAs completed for this release are tagged with 'FixVersion =
> 0.1.0'.
> > You can view the release notes here: https://issues.apache.or
> > g/jira/secure/ReleaseNote.jspa?projectId=12320320&version=12338109
> >
> > Please vote accordingly:
> >
> > [ ] +1, accept as the official Apache Pirk 0.1.0-incubating release
> > [ ] -1, do not accept as the official Apache Pirk 0.1.0-incubating
> release
> >  because...
> >
> > The vote will run for at least 72 hours.
> >
> > Thanks!
> >
> > Ellison Anne
> >
>
> -
> To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
> For additional commands, e-mail: general-h...@incubator.apache.org
>
>

Re: [VOTE] Apache Pirk 0.1.0-incubating Release

[Tim Ellison]

+1 binding

Regards,
Tim


On 26/08/16 13:37, Ellison Anne Williams wrote:
> Hi All,
> 
> The PPMC vote for the Apache Pirk 0.1.0-incubating release has passed after
> updating the cryptographic export information; it is a source-only release
> (no binary artifacts). We kindly request that the IPMC now vote on the
> release.
> 
> The PPMC vote thread is located here:
> *https://lists.apache.org/thread.html/8eed650dfe1acdd56a4b29ed5973add87883703fbebd1ba28150422f@%3Cdev.pirk.apache.org%3E
> *
> 
> The artifacts can be downloaded here https://dist.apache.org/
> repos/dist/dev/incubator/pirk/release/0.1.0/
> 
> The artifacts have been signed with key 1FD8849B found in the KEYS file:
> https://dist.apache.org/repos/dist/dev/incubator/pirk/KEYS
> 
> All JIRAs completed for this release are tagged with 'FixVersion = 0.1.0'.
> You can view the release notes here: https://issues.apache.or
> g/jira/secure/ReleaseNote.jspa?projectId=12320320&version=12338109
> 
> Please vote accordingly:
> 
> [ ] +1, accept as the official Apache Pirk 0.1.0-incubating release
> [ ] -1, do not accept as the official Apache Pirk 0.1.0-incubating release
>  because...
> 
> The vote will run for at least 72 hours.
> 
> Thanks!
> 
> Ellison Anne
> 

-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [VOTE] Apache Pirk 0.1.0-incubating Release

[Jean-Baptiste Onofré]

+1 (binding)

Checked:
- NOTICE, DISCLAIMER, LICENSE are there
- ASF headers
- version includes incubating

Regards
JB

On 08/26/2016 02:37 PM, Ellison Anne Williams wrote:

Hi All,

The PPMC vote for the Apache Pirk 0.1.0-incubating release has passed after
updating the cryptographic export information; it is a source-only release
(no binary artifacts). We kindly request that the IPMC now vote on the
release.

The PPMC vote thread is located here:
*https://lists.apache.org/thread.html/8eed650dfe1acdd56a4b29ed5973add87883703fbebd1ba28150422f@%3Cdev.pirk.apache.org%3E
*

The artifacts can be downloaded here https://dist.apache.org/
repos/dist/dev/incubator/pirk/release/0.1.0/

The artifacts have been signed with key 1FD8849B found in the KEYS file:
https://dist.apache.org/repos/dist/dev/incubator/pirk/KEYS

All JIRAs completed for this release are tagged with 'FixVersion = 0.1.0'.
You can view the release notes here: https://issues.apache.or
g/jira/secure/ReleaseNote.jspa?projectId=12320320&version=12338109

Please vote accordingly:

[ ] +1, accept as the official Apache Pirk 0.1.0-incubating release
[ ] -1, do not accept as the official Apache Pirk 0.1.0-incubating release
 because...

The vote will run for at least 72 hours.

Thanks!

Ellison Anne



--
Jean-Baptiste Onofré
jbono...@apache.org
http://blog.nanthrax.net
Talend - http://www.talend.com

-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [VOTE] Apache Pirk 0.1.0-incubating Release

[Suneel Marthi]

+1 binding

1. License, Disclaimer, Notice look good
2. Compiled source and all tests pass
3. Verified MD5 , SHA1 sigs of artifacts
4. RAT checks pass

On Fri, Aug 26, 2016 at 8:02 PM, Justin Mclean 
wrote:

> Hi,
>
> +1 binding
>
> I checked:
> - name included incubating
> - signature and hashes good
> - DISCLAIMER exists
> - LICENSE and NOTICE good
> - No unexpected binary files in release
> - Can compile from source
>
> I noticed you’ve dropped “apache” from the release artefact names, IMO
> it’s good to keep it for branding reasons.
>
> In the export section of the README I’m little confused. The text mentions
> the JCA  (and there’s a couple of java.security classes imported in the
> code) and has a link to the oracle website [1] but fails to mention the
> bundled cryptographic code [2] or include a link to the relevant Apache
> page. Also out of interest where did [2] original come from?
>
> Thanks,
> Justin
>
> 1. http://www.oracle.com/us/products/export/eccn-matrix-345817.html
> 2. ./src/main/java/org/apache/pirk/encryption/Paillier.java
> -
> To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
> For additional commands, e-mail: general-h...@incubator.apache.org
>
>

Re: [VOTE] Apache Pirk 0.1.0-incubating Release

[Justin Mclean]

Hi,

> In terms of the README mentioning bundled cryptogrphic code, it says that
> "Apache Pirk implements cryptographic software..." -- the Paillier class is
> one such implementation. 

I don’t think anything is required just that it could be made a bit clearer.

Thanks,
Justin
-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [VOTE] Apache Pirk 0.1.0-incubating Release

[Ellison Anne Williams]

Hi Justin,

The Paillier implementation was part of the original software grant for
Apache Pirk from the National Security Agency.

In terms of the README mentioning bundled cryptogrphic code, it says that
"Apache Pirk implements cryptographic software..." -- the Paillier class is
one such implementation. Please let me know if we need to add some
additional clarifying language and we can do so on the next release.

We will change the artifact naming conventions back to apache-pirk.

Thanks!

Ellison Anne

On Fri, Aug 26, 2016 at 8:02 PM, Justin Mclean 
wrote:

> Hi,
>
> +1 binding
>
> I checked:
> - name included incubating
> - signature and hashes good
> - DISCLAIMER exists
> - LICENSE and NOTICE good
> - No unexpected binary files in release
> - Can compile from source
>
> I noticed you’ve dropped “apache” from the release artefact names, IMO
> it’s good to keep it for branding reasons.
>
> In the export section of the README I’m little confused. The text mentions
> the JCA  (and there’s a couple of java.security classes imported in the
> code) and has a link to the oracle website [1] but fails to mention the
> bundled cryptographic code [2] or include a link to the relevant Apache
> page. Also out of interest where did [2] original come from?
>
> Thanks,
> Justin
>
> 1. http://www.oracle.com/us/products/export/eccn-matrix-345817.html
> 2. ./src/main/java/org/apache/pirk/encryption/Paillier.java
> -
> To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
> For additional commands, e-mail: general-h...@incubator.apache.org
>
>

Re: [VOTE] Apache Pirk 0.1.0-incubating Release

[Justin Mclean]

Hi,

+1 binding

I checked:
- name included incubating
- signature and hashes good
- DISCLAIMER exists
- LICENSE and NOTICE good
- No unexpected binary files in release
- Can compile from source

I noticed you’ve dropped “apache” from the release artefact names, IMO it’s 
good to keep it for branding reasons.

In the export section of the README I’m little confused. The text mentions the 
JCA  (and there’s a couple of java.security classes imported in the code) and 
has a link to the oracle website [1] but fails to mention the bundled 
cryptographic code [2] or include a link to the relevant Apache page. Also out 
of interest where did [2] original come from?

Thanks,
Justin

1. http://www.oracle.com/us/products/export/eccn-matrix-345817.html
2. ./src/main/java/org/apache/pirk/encryption/Paillier.java
-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

[VOTE] Apache Pirk 0.1.0-incubating Release

[Ellison Anne Williams]

Hi All,

The PPMC vote for the Apache Pirk 0.1.0-incubating release has passed after
updating the cryptographic export information; it is a source-only release
(no binary artifacts). We kindly request that the IPMC now vote on the
release.

The PPMC vote thread is located here:
*https://lists.apache.org/thread.html/8eed650dfe1acdd56a4b29ed5973add87883703fbebd1ba28150422f@%3Cdev.pirk.apache.org%3E
*

The artifacts can be downloaded here https://dist.apache.org/
repos/dist/dev/incubator/pirk/release/0.1.0/

The artifacts have been signed with key 1FD8849B found in the KEYS file:
https://dist.apache.org/repos/dist/dev/incubator/pirk/KEYS

All JIRAs completed for this release are tagged with 'FixVersion = 0.1.0'.
You can view the release notes here: https://issues.apache.or
g/jira/secure/ReleaseNote.jspa?projectId=12320320&version=12338109

Please vote accordingly:

[ ] +1, accept as the official Apache Pirk 0.1.0-incubating release
[ ] -1, do not accept as the official Apache Pirk 0.1.0-incubating release
 because...

The vote will run for at least 72 hours.

Thanks!

Ellison Anne

Re: [VOTE] Apache Pirk 0.1.0-incubating Release

[Justin Mclean]

Hi,

> Thanks Justin.  I have just updated the ASF Export Classification page
> to add product name "Apache Pirk" under the Apache Incubator project.
> 
> We will co-ordinate the sending of the notice to US Govt., and updating
> the readme via Pirk's dev list.

Thanks for that.

Justin

-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

[CANCEL] [VOTE] Apache Pirk 0.1.0-incubating Release

[Ellison Anne Williams]

The Apache Pirk 0.1.0-incubating release vote is cancelled.

We have fixed our cryptographic export items as described below, but must
regenerate the artifacts due to the required additions to the README. We
will regenerate, vote within the PPMC, and then submit the vote again to
the IPMC.

Apologies for the inconvenience.

Thanks!

On Thu, Aug 25, 2016 at 6:44 AM, Tim Ellison  wrote:

> On 25/08/16 00:48, Justin Mclean wrote:
> > -1 binding, willing to change my vote if encryption code issue
> > clarified.
> >
> >> The artifacts can be downloaded here:
> >> https://repository.apache.org/content/
> >> repositories/orgapachepirk-1002
> >
> > Please place the artefacts in the correct place [1] That that
> > releases MUST be placed in the list area and that maven is considered
> > a secondary channel.
> >
> > I checked: - name included incubating - signature and hashes good -
> > DISCLAIMER exists - LICENSE and NOTICE good - No unexpected binary
> > files in release - Can compile from source
> >
> > I see that the release looks to contains encryption source code [2]
> > (Paillier) [5], if so has this process been followed? [3]  I can't
> > see Prik listed here [4].
>
> Thanks Justin.  I have just updated the ASF Export Classification page
> to add product name "Apache Pirk" under the Apache Incubator project.
>
> We will co-ordinate the sending of the notice to US Govt., and updating
> the readme via Pirk's dev list.
>
> > Just out of interest why the “wideskies” in the class path name?
>
> s/class path name/package name/
>
> Wideskies is the name of an algorithm implemented by Pirk.  You can see
> the details linked from Pirk's website here
>http://pirk.incubator.apache.org/papers/
>
> Regards,
> Tim
>
> > Thanks, Justin
> >
> > 1. https://dist.apache.org/repos/dist/dev/incubator/pirk/ 2.
> > ./src/main/java/org/apache/pirk/encryption/ 3.
> > http://www.apache.org/dev/crypto.html 4.
> > http://www.apache.org/licenses/exports/ 5.
> > https://en.wikipedia.org/wiki/Paillier_cryptosystem
> >
> >
> > -
> >
> >
> To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
> > For additional commands, e-mail: general-h...@incubator.apache.org
> >
>
> -
> To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
> For additional commands, e-mail: general-h...@incubator.apache.org
>
>

Re: [VOTE] Apache Pirk 0.1.0-incubating Release

[Tim Ellison]

On 25/08/16 00:48, Justin Mclean wrote:
> -1 binding, willing to change my vote if encryption code issue
> clarified.
> 
>> The artifacts can be downloaded here:
>> https://repository.apache.org/content/ 
>> repositories/orgapachepirk-1002
> 
> Please place the artefacts in the correct place [1] That that
> releases MUST be placed in the list area and that maven is considered
> a secondary channel.
> 
> I checked: - name included incubating - signature and hashes good -
> DISCLAIMER exists - LICENSE and NOTICE good - No unexpected binary
> files in release - Can compile from source
> 
> I see that the release looks to contains encryption source code [2]
> (Paillier) [5], if so has this process been followed? [3]  I can't
> see Prik listed here [4].

Thanks Justin.  I have just updated the ASF Export Classification page
to add product name "Apache Pirk" under the Apache Incubator project.

We will co-ordinate the sending of the notice to US Govt., and updating
the readme via Pirk's dev list.

> Just out of interest why the “wideskies” in the class path name?

s/class path name/package name/

Wideskies is the name of an algorithm implemented by Pirk.  You can see
the details linked from Pirk's website here
   http://pirk.incubator.apache.org/papers/

Regards,
Tim

> Thanks, Justin
> 
> 1. https://dist.apache.org/repos/dist/dev/incubator/pirk/ 2.
> ./src/main/java/org/apache/pirk/encryption/ 3.
> http://www.apache.org/dev/crypto.html 4.
> http://www.apache.org/licenses/exports/ 5.
> https://en.wikipedia.org/wiki/Paillier_cryptosystem
> 
> 
> -
>
> 
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
> For additional commands, e-mail: general-h...@incubator.apache.org
> 

-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [VOTE] Apache Pirk 0.1.0-incubating Release

[Jean-Baptiste Onofré]

+1 (binding):

Checked:
- signatures are good
- version contains incubating
- LICENSE, NOTICE and DISCLAIMER exists and correct
- No binaries in the source distribution
- Can compile from the source distribution
- All sources contain the ASF header

Regards
JB

On 08/24/2016 07:16 PM, Ellison Anne Williams wrote:

Hi All,

The PPMC vote for the Apache Pirk 0.1.0-incubating release has passed; it is
a source-only release (no binary artifacts). We kindly request that the
IPMC now vote on the release.

The PPMC vote thread is located here:
https://lists.apache.org/thread.html/f9321c1ce45c4f696639ecac2eac6acdcfbff6a669281941c9c06742@%3Cdev.pirk.apache.org%3E

The artifacts can be downloaded here: https://repository.apache.org/content/
repositories/orgapachepirk-1002

The artifacts have been signed with key 1FD8849B found in the KEYS file:
https://dist.apache.org/repos/dist/dev/incubator/pirk/KEYS

All JIRAs completed for this release are tagged with 'FixVersion = 0.1.0'.
You can view the release notes here: https://issues.apache.
org/jira/secure/ReleaseNote.jspa?projectId=12320320&version=12338109

Please vote accordingly:

[ ] +1, accept as the official Apache Pirk 0.1.0-incubating release
[ ] -1, do not accept as the official Apache Pirk 0.1.0-incubating release
 because...

The vote will run for at least 72 hours.

Thanks!

Ellison Anne



--
Jean-Baptiste Onofré
jbono...@apache.org
http://blog.nanthrax.net
Talend - http://www.talend.com

-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [VOTE] Apache Pirk 0.1.0-incubating Release

[Justin Mclean]

Hi,

-1 binding, willing to change my vote if encryption code issue clarified.

> The artifacts can be downloaded here: https://repository.apache.org/content/
> repositories/orgapachepirk-1002

Please place the artefacts in the correct place [1] That that releases MUST be 
placed in the list area and that maven is considered a secondary channel.

I checked:
- name included incubating
- signature and hashes good
- DISCLAIMER exists
- LICENSE and NOTICE good
- No unexpected binary files in release
- Can compile from source

I see that the release looks to contains encryption source code [2] (Paillier) 
[5], if so has this process been followed? [3]  I can't see Prik listed here 
[4].

Just out of interest why the “wideskies” in the class path name?

Thanks,
Justin

1. https://dist.apache.org/repos/dist/dev/incubator/pirk/
2. ./src/main/java/org/apache/pirk/encryption/
3. http://www.apache.org/dev/crypto.html
4. http://www.apache.org/licenses/exports/
5. https://en.wikipedia.org/wiki/Paillier_cryptosystem


-
To unsubscribe, e-mail: general-unsubscr...@incubator.apache.org
For additional commands, e-mail: general-h...@incubator.apache.org

Re: [VOTE] Apache Pirk 0.1.0-incubating Release

[Suneel Marthi]

Posting my vote from dev@ here

+1 binding

On Wed, Aug 24, 2016 at 1:16 PM, Ellison Anne Williams <
eawilliamsp...@gmail.com> wrote:

> Hi All,
>
> The PPMC vote for the Apache Pirk 0.1.0-incubating release has passed; it
> is
> a source-only release (no binary artifacts). We kindly request that the
> IPMC now vote on the release.
>
> The PPMC vote thread is located here:
> https://lists.apache.org/thread.html/f9321c1ce45c4f696639ecac2eac6a
> cdcfbff6a669281941c9c06742@%3Cdev.pirk.apache.org%3E
>
> The artifacts can be downloaded here: https://repository.apache.org/
> content/
> repositories/orgapachepirk-1002
>
> The artifacts have been signed with key 1FD8849B found in the KEYS file:
> https://dist.apache.org/repos/dist/dev/incubator/pirk/KEYS
>
> All JIRAs completed for this release are tagged with 'FixVersion = 0.1.0'.
> You can view the release notes here: https://issues.apache.
> org/jira/secure/ReleaseNote.jspa?projectId=12320320&version=12338109
>
> Please vote accordingly:
>
> [ ] +1, accept as the official Apache Pirk 0.1.0-incubating release
> [ ] -1, do not accept as the official Apache Pirk 0.1.0-incubating release
>  because...
>
> The vote will run for at least 72 hours.
>
> Thanks!
>
> Ellison Anne
>

[VOTE] Apache Pirk 0.1.0-incubating Release

[Ellison Anne Williams]

Hi All,

The PPMC vote for the Apache Pirk 0.1.0-incubating release has passed; it is
a source-only release (no binary artifacts). We kindly request that the
IPMC now vote on the release.

The PPMC vote thread is located here:
https://lists.apache.org/thread.html/f9321c1ce45c4f696639ecac2eac6acdcfbff6a669281941c9c06742@%3Cdev.pirk.apache.org%3E

The artifacts can be downloaded here: https://repository.apache.org/content/
repositories/orgapachepirk-1002

The artifacts have been signed with key 1FD8849B found in the KEYS file:
https://dist.apache.org/repos/dist/dev/incubator/pirk/KEYS

All JIRAs completed for this release are tagged with 'FixVersion = 0.1.0'.
You can view the release notes here: https://issues.apache.
org/jira/secure/ReleaseNote.jspa?projectId=12320320&version=12338109

Please vote accordingly:

[ ] +1, accept as the official Apache Pirk 0.1.0-incubating release
[ ] -1, do not accept as the official Apache Pirk 0.1.0-incubating release
 because...

The vote will run for at least 72 hours.

Thanks!

Ellison Anne