scrypt-1.1.3 released (was WIP:security/crypt)

2009-05-25 Thread Colin Percival

Hi Predrag  OpenBSD ports people,

I've released scrypt version 1.1.3, which now has a man page in addition to the
portability fixes in the version I sent Predrag for testing a few days ago; it
is at
  http://www.tarsnap.com/scrypt/scrypt-1.1.3.tgz
and there's a GPG-signed SHA256 hash at
  http://www.tarsnap.com/scrypt/scrypt-sigs-1.1.3.asc

Please let me know if/when you add this to your ports tree -- I'll list it on
the scrypt website.

--
Colin Percival
Security Officer, FreeBSD | freebsd.org | The power to serve
Founder / author, Tarsnap | tarsnap.com | Online backups for the truly paranoid



Re: scrypt-1.1.3 released (was WIP:security/crypt)

2009-05-25 Thread Predrag Punosevac
Colin Percival cperc...@tarsnap.com wrote:

 Hi Predrag  OpenBSD ports people,

 I've released scrypt version 1.1.3, which now has a man page in addition to 
 the
 portability fixes in the version I sent Predrag for testing a few days ago; it
 is at
http://www.tarsnap.com/scrypt/scrypt-1.1.3.tgz
 and there's a GPG-signed SHA256 hash at
http://www.tarsnap.com/scrypt/scrypt-sigs-1.1.3.asc

 Please let me know if/when you add this to your ports tree -- I'll list it on
 the scrypt website.

 -- 
 Colin Percival
 Security Officer, FreeBSD | freebsd.org | The power to serve
 Founder / author, Tarsnap | tarsnap.com | Online backups for the truly 
 paranoid
Hi Collin,

Stuard has already made a port. I think he has commit privileges.
I just sent him a private email asking him to update Mekefile with
the address of your source-file. How quickly the port will be committed
depends on testing of course but I would think very soon.

I apologize for bitching you saw about your work by one guy on ports. 
The guy obviously didn't know what he was talking about and was 
immediately hash. 

Best,
Predrag



Re: scrypt-1.1.3 released (was WIP:security/crypt)

2009-05-25 Thread Predrag Punosevac
Colin Percival cperc...@tarsnap.com wrote:

 Hi Predrag  OpenBSD ports people,

 I've released scrypt version 1.1.3, which now has a man page in addition to 
 the
 portability fixes in the version I sent Predrag for testing a few days ago; it
 is at
http://www.tarsnap.com/scrypt/scrypt-1.1.3.tgz
 and there's a GPG-signed SHA256 hash at
I just got the email from Stuard. The port is committed! Good job Colin.
Best,
Predrag



Re: WIP:security/crypt

2009-05-24 Thread Bryan
On Sat, May 23, 2009 at 20:49, Rod Whitworth glis...@witworx.com wrote:
 On Sat, 23 May 2009 19:56:09 -0700, Bryan wrote:

On Sat, May 23, 2009 at 18:13, Predrag Punosevac punoseva...@gmail.com 
wrote:
 Hi Ports,

 For the past couple days Colin Percival has worked very hard to fix
 crypt so that it can compile on OpenBSD. I am attaching the new version
 of crypt-1.1.3 which he didn't yet post on his web site. It is vanilla
 package, it is not the port of OpenBSD. Crypt-1.1.3 now compiles
 without any patches on OpenBSD. Just untar ./configure, make,
 make install. I am playing with it on my 4.4 amd64 machine as we
 speak. So far it works for me. It would be good idea that people
 running current try to compile and play with it. I personally will
 install a snapshot in next couple of days and try to make a port.

 Cheers,
 Predrag


As nice as a new package sounds, openssl will encrypt files too...
even found a script that will automate the process...

http://www.dslreports.com/shownews/Encrypt-files-quickly-with-OpenSSL-87586


 #!/bin/bash   Yuk! Read no further, it doesn't work without an added
 shell I don't care for .

 *** NOTE *** Please DO NOT CC me. I am subscribed to the list.
 Mail to the sender address that does not originate at the list server is 
 tarpitted. The reply-to: address is provided for those who feel compelled to 
 reply off list. Thankyou.

 Rod/
 /earth: write failed, file system is full
 cp: /earth/creatures: No space left on device




I apologize.  I was not trying to promote bash, just showing that it
is possible to script something to encrypt using tools that OpenBSD
has already, without installing another package...



Re: WIP:security/crypt

2009-05-24 Thread Rod Whitworth
On Sat, 23 May 2009 22:59:14 -0700, Bryan wrote:

I apologize.  I was not trying to promote bash, just showing that it
is possible to script something to encrypt using tools that OpenBSD
has already, without installing another package...

Thanks. You do realise though, that bash is a package itself?

*** NOTE *** Please DO NOT CC me. I am subscribed to the list.
Mail to the sender address that does not originate at the list server is 
tarpitted. The reply-to: address is provided for those who feel compelled to 
reply off list. Thankyou.

Rod/
/earth: write failed, file system is full
cp: /earth/creatures: No space left on device




Re: WIP:security/crypt

2009-05-24 Thread Stuart Henderson
On 2009/05/23 21:13, Predrag Punosevac wrote:
 Hi Ports,
 
 For the past couple days Colin Percival has worked very hard to fix
 crypt so that it can compile on OpenBSD. I am attaching the new version
 of crypt-1.1.3 which he didn't yet post on his web site. It is vanilla
 package, it is not the port of OpenBSD. Crypt-1.1.3 now compiles
 without any patches on OpenBSD. Just untar ./configure, make, 
 make install. I am playing with it on my 4.4 amd64 machine as we 
 speak. So far it works for me. It would be good idea that people
 running current try to compile and play with it. I personally will 
 install a snapshot in next couple of days and try to make a port. 
 
 Cheers,
 Predrag

Updated port WIP attached. Until 1.1.3 is released, copy the distfile
to /usr/ports/distfiles.

ftp -o /usr/ports/distfiles/scrypt-1.1.3.tgz 
'http://marc.info/?m=124312897915845q=p3'

$ pkg_info scrypt
Information for inst:scrypt-1.1.3

Comment:
command-line encryption using scrypt key derivation function

Description:
A simple password-based encryption utility as a demonstration of
the scrypt key derivation function, greatly increasing the cost of
a brute force attack compared to openssl enc.

Maintainer: The OpenBSD ports mailing-list ports@openbsd.org

WWW: http://www.tarsnap.com/scrypt/



scrypt.tgz
Description: application/tar-gz


Re: WIP:security/crypt (scrypt)

2009-05-23 Thread Predrag Punosevac
Just one correction. The name of the package is scrypt. I played
with it in the mean time. I do not see any man pages.

You can encrypt a file as:

scrypt enc filename filename.enc 

To decrypt

file scrypt dec filename.enc filename.decrypted

Sorry for the wrong name.
Predrag



Re: WIP:security/crypt

2009-05-23 Thread Bryan
On Sat, May 23, 2009 at 18:13, Predrag Punosevac punoseva...@gmail.com wrote:
 Hi Ports,

 For the past couple days Colin Percival has worked very hard to fix
 crypt so that it can compile on OpenBSD. I am attaching the new version
 of crypt-1.1.3 which he didn't yet post on his web site. It is vanilla
 package, it is not the port of OpenBSD. Crypt-1.1.3 now compiles
 without any patches on OpenBSD. Just untar ./configure, make,
 make install. I am playing with it on my 4.4 amd64 machine as we
 speak. So far it works for me. It would be good idea that people
 running current try to compile and play with it. I personally will
 install a snapshot in next couple of days and try to make a port.

 Cheers,
 Predrag


As nice as a new package sounds, openssl will encrypt files too...
even found a script that will automate the process...

http://www.dslreports.com/shownews/Encrypt-files-quickly-with-OpenSSL-87586



Re: WIP:security/crypt

2009-05-23 Thread Predrag Punosevac
Bryan bra...@gmail.com wrote:

 On Sat, May 23, 2009 at 18:13, Predrag Punosevac punoseva...@gmail.com 
 wrote:
  Hi Ports,
 
  For the past couple days Colin Percival has worked very hard to fix
  crypt so that it can compile on OpenBSD. I am attaching the new version
  of crypt-1.1.3 which he didn't yet post on his web site. It is vanilla
  package, it is not the port of OpenBSD. Crypt-1.1.3 now compiles
  without any patches on OpenBSD. Just untar ./configure, make,
  make install. I am playing with it on my 4.4 amd64 machine as we
  speak. So far it works for me. It would be good idea that people
  running current try to compile and play with it. I personally will
  install a snapshot in next couple of days and try to make a port.
 
  Cheers,
  Predrag
 

 As nice as a new package sounds, openssl will encrypt files too...
 even found a script that will automate the process...

 http://www.dslreports.com/shownews/Encrypt-files-quickly-with-OpenSSL-87586
The difference between userland programs for cryptography as openssl, 
ccrypt, and now scrypt is in underlining crypt-o algorithms.
Cryptography is from the point of view of pure mathematics little bit
of the voodoo science so I would prefer to leave to experts to evaluate 
the value of the Colin's work.

Best,
Predrag



Re: WIP:security/crypt

2009-05-23 Thread Rod Whitworth
On Sat, 23 May 2009 19:56:09 -0700, Bryan wrote:

On Sat, May 23, 2009 at 18:13, Predrag Punosevac punoseva...@gmail.com wrote:
 Hi Ports,

 For the past couple days Colin Percival has worked very hard to fix
 crypt so that it can compile on OpenBSD. I am attaching the new version
 of crypt-1.1.3 which he didn't yet post on his web site. It is vanilla
 package, it is not the port of OpenBSD. Crypt-1.1.3 now compiles
 without any patches on OpenBSD. Just untar ./configure, make,
 make install. I am playing with it on my 4.4 amd64 machine as we
 speak. So far it works for me. It would be good idea that people
 running current try to compile and play with it. I personally will
 install a snapshot in next couple of days and try to make a port.

 Cheers,
 Predrag


As nice as a new package sounds, openssl will encrypt files too...
even found a script that will automate the process...

http://www.dslreports.com/shownews/Encrypt-files-quickly-with-OpenSSL-87586


#!/bin/bash   Yuk! Read no further, it doesn't work without an added
shell I don't care for .

*** NOTE *** Please DO NOT CC me. I am subscribed to the list.
Mail to the sender address that does not originate at the list server is 
tarpitted. The reply-to: address is provided for those who feel compelled to 
reply off list. Thankyou.

Rod/
/earth: write failed, file system is full
cp: /earth/creatures: No space left on device