CVS commit: othersrc/crypto/external/bsd/sharedkey
Module Name:othersrc Committed By: agc Date: Mon Mar 21 07:10:45 UTC 2011 Update of /cvsroot/othersrc/crypto/external/bsd/sharedkey In directory ivanova.netbsd.org:/tmp/cvs-serv15677 Log Message: Initial import, into othersrc/crypto, of sharedkey, a library and utility which generates a one-time key (by default RSA 2048bit), which is used to encrypt a secret to be shared between a number of people. The secret is encrypted to the generated, one-time key. That key is then distributed using lib(3). All encryption and decryption are accomplished via libnetpgp(3). The secret can be recovered by presenting a threshold of shares, and using that to recover the secret key, which can then be used to decrypt the original secret. The key can optionally be further protected by a passphrase, which is set at one-time-key generation time. The net effect is to introduce a gate to recovery - with a passphrase, secret recovery can be gated through an individual who knows the passphrase - this protects against collusion to recover the secret "behind everyone's backs". At the same time, normal passphrase propagation rules apply, and there is a potential for a Single Point of Failure. There are a number of use cases for this functionality, which is a generalised and much more flexible form of encryption to a number of users. Shares can be distributed in non-uniform amounts, for example, so that more important players in the group can receive more than one share. Ad-hoc user groups can be established. Shares can be encrypted to other user's keys, and protected in transit that way. Shares can be encrypted to the distributor's key before encrypting to the recipient's key - this will protect against collusion and accidental exposure of the secret, but again introduces a SPoF. Backups can be generated which can be recovered only when a quorum of known and authorised keys have authorised it. There are many other use cases for this - they are left as an exercise for the reader. The original public key is kept around to provide information on the encrypted secret - who, when, how many shares, quorum, etc. If this is deemed to be sensitive, this information can be redacted by using the -a switch (to anonymize the public key). There are still some loose ends to this code, but it is functional at the present time. Further review is welcomed and encouraged. A worked example, taken from the regression test for sharedkey(1) distributes the /etc/group file on a machine to 3 shares, of which 2 make a quorum. The group file is then recovered by using two of the generated shares: % make t cd /usr/othersrc/crypto/external/bsd/sharedkey/sharedkey && make t make split rm -rf /tmp/share.* /tmp/recover.* ./sharedkey -t 2/3 /etc/group Generating a one-time key /tmp/share.14828a/pubring.gpg: No such file or directory Can't read pubring /tmp/share.14828a/pubring.gpg Can't read pub keyring signature 2048/RSA (Encrypt or Sign) 5eb658fbc4e0c0fc 2011-03-20 Key fingerprint: 1878 2f43 ff3b 0792 2f1c bacc 5eb6 58fb c4e0 c0fc uid /etc/group shared 2/3 by agc Sun Mar 20 03:48:28 2011 netpgp: generated keys in directory /tmp/share.14828a/5eb658fbc4e0c0fc Enter passphrase for 5eb658fbc4e0c0fc: Repeat passphrase for 5eb658fbc4e0c0fc: Shared secrets are in: /tmp/share.14828a tar tvzf /tmp/share.*/share000.tar.gz drwx-- 2 agc wheel 0 Mar 20 03:48 share000 lrwxr-xr-x 1 agc wheel 0 Mar 20 03:48 share000/keyid -> 5eb658fbc4e0c0fc -rw-r--r-- 1 agc wheel609 Mar 20 03:48 share000/secret.gpg -rw-r--r-- 1 agc wheel617 Mar 20 03:48 share000/pubring.gpg -rw-r--r-- 1 agc wheel 1323 Mar 20 03:48 share000/secring.gpg.share tar: ustar vol 1, 5 files, 10240 bytes read, 0 bytes written in 1 secs (10240 bytes/sec) ls -laR /tmp/share.* total 18 drwx-- 2 agc wheel 512 Mar 20 03:48 . drwxrwxrwt 5 root wheel 512 Mar 20 03:48 .. -rw-r--r-- 1 agc wheel 617 Mar 20 03:48 pubring.gpg -rw--- 1 agc wheel 2908 Mar 20 03:48 share000.tar.gz -rw--- 1 agc wheel 2908 Mar 20 03:48 share001.tar.gz -rw--- 1 agc wheel 2910 Mar 20 03:48 share002.tar.gz make join ./sharedkey -o group.recover -r /tmp/share.*/share002.tar.gz /tmp/share.*/share000.tar.gz Error: Format error (ptag bit not set) signature 2048/RSA (Encrypt or Sign) 5eb658fbc4e0c0fc 2011-03-20 Key fingerprint: 1878 2f43 ff3b 0792 2f1c bacc 5eb6 58fb c4e0 c0fc uid /etc/group shared 2/3 by agc Sun Mar 20 03:48:28 2011 netpgp passphrase: % Status: Vendor Tag: CROOKS Release Tags: sharedkey-base N othersrc/crypto/external/bsd/sharedkey/Makefile N othersrc/crypto/external/bsd/sharedkey/mkdist N othersrc/crypto/external/bsd/sharedkey/Makefile.inc N othersrc/crypto/external/bsd/sharedkey/dist/Makefile.am N othersrc/crypto/external/bsd/sharedkey/dist/TODO N othersrc/crypto/external/bsd/sharedkey/dist/aclocal.m4 N othersrc/crypto/external/bsd/s
CVS commit: othersrc/crypto/external/bsd/sharedkey/dist/src/sharedkey
Module Name:othersrc Committed By: agc Date: Mon Mar 21 07:15:33 UTC 2011 Modified Files: othersrc/crypto/external/bsd/sharedkey/dist/src/sharedkey: sharedkey.1 Log Message: update names and locations to reflect current use. To generate a diff of this commit: cvs rdiff -u -r1.1.1.1 -r1.2 \ othersrc/crypto/external/bsd/sharedkey/dist/src/sharedkey/sharedkey.1 Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/lib/libc/gdtoa
Module Name:src Committed By: christos Date: Mon Mar 21 12:53:51 UTC 2011 Modified Files: src/lib/libc/gdtoa: g__fmt.c strtod.c strtodg.c Log Message: more de-linting. To generate a diff of this commit: cvs rdiff -u -r1.1.1.2 -r1.2 src/lib/libc/gdtoa/g__fmt.c cvs rdiff -u -r1.6 -r1.7 src/lib/libc/gdtoa/strtod.c cvs rdiff -u -r1.7 -r1.8 src/lib/libc/gdtoa/strtodg.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: othersrc/crypto/external/bsd
Module Name:othersrc Committed By: wiz Date: Mon Mar 21 14:44:48 UTC 2011 Modified Files: othersrc/crypto/external/bsd/sharedkey/dist/src/sharedkey: sharedkey.1 othersrc/crypto/external/bsd//dist/src/lib: lib.3 othersrc/crypto/external/bsd//dist/src/: .1 Log Message: Whitespace nits, use \- for a minus sign. To generate a diff of this commit: cvs rdiff -u -r1.2 -r1.3 \ othersrc/crypto/external/bsd/sharedkey/dist/src/sharedkey/sharedkey.1 cvs rdiff -u -r1.1.1.1 -r1.2 \ othersrc/crypto/external/bsd//dist/src/lib/lib.3 cvs rdiff -u -r1.1.1.1 -r1.2 \ othersrc/crypto/external/bsd//dist/src//.1 Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/dist/nvi
Module Name:src Committed By: tnozaki Date: Mon Mar 21 14:53:04 UTC 2011 Modified Files: src/dist/nvi/clib: mkstemp.c src/dist/nvi/common: cut.c cut.h extern.h gs.h key.c key.h msg.c multibyte.h options.c seq.c util.c src/dist/nvi/ex: ex.c ex_abbrev.c ex_argv.c ex_cscope.c ex_display.c ex_global.c ex_join.c ex_map.c ex_perl.c ex_shell.c ex_subst.c ex_tag.c ex_tcl.c ex_txt.c ex_usage.c ex_write.c src/dist/nvi/ip: ip_main.c src/dist/nvi/motif_l: m_vi.c src/dist/nvi/regex: regcomp.c regex2.h src/dist/nvi/vi: getc.c v_increment.c v_match.c v_replace.c v_search.c v_sentence.c v_txt.c v_ulcase.c v_util.c v_word.c vi.c vi.h Log Message: 1. fix PR/44455, nonprintable character doesn't show hex-visual under big endian. 2. ":set octal" with nonprintable character causes nbwcurses move error. 3. moving (big)words by wW/eE/bB can't handle non-ascii characters. 4. toggle uppercase/lowercase by ~ can't handle non-ascii characters. 5. don't feed CHAR_T(=wchar_t) to is* function directly. is* funcs with over UCHAR_MAX value may cause undefined behavior. some ctype implementation(such as FreeBSD) return unexpected result(same result as isw* func). 6. using non-ascii digit character with count/line number of ex/vi command may causes unexpeced result. To generate a diff of this commit: cvs rdiff -u -r1.1.1.2 -r1.2 src/dist/nvi/clib/mkstemp.c cvs rdiff -u -r1.3 -r1.4 src/dist/nvi/common/cut.c src/dist/nvi/common/cut.h \ src/dist/nvi/common/extern.h src/dist/nvi/common/msg.c \ src/dist/nvi/common/util.c cvs rdiff -u -r1.4 -r1.5 src/dist/nvi/common/gs.h cvs rdiff -u -r1.5 -r1.6 src/dist/nvi/common/key.c \ src/dist/nvi/common/multibyte.h cvs rdiff -u -r1.1.1.2 -r1.2 src/dist/nvi/common/key.h cvs rdiff -u -r1.9 -r1.10 src/dist/nvi/common/options.c cvs rdiff -u -r1.2 -r1.3 src/dist/nvi/common/seq.c cvs rdiff -u -r1.6 -r1.7 src/dist/nvi/ex/ex.c src/dist/nvi/ex/ex_cscope.c cvs rdiff -u -r1.1.1.2 -r1.2 src/dist/nvi/ex/ex_abbrev.c \ src/dist/nvi/ex/ex_map.c src/dist/nvi/ex/ex_perl.c \ src/dist/nvi/ex/ex_tcl.c cvs rdiff -u -r1.3 -r1.4 src/dist/nvi/ex/ex_argv.c \ src/dist/nvi/ex/ex_global.c src/dist/nvi/ex/ex_subst.c \ src/dist/nvi/ex/ex_write.c cvs rdiff -u -r1.2 -r1.3 src/dist/nvi/ex/ex_display.c \ src/dist/nvi/ex/ex_join.c cvs rdiff -u -r1.4 -r1.5 src/dist/nvi/ex/ex_shell.c cvs rdiff -u -r1.8 -r1.9 src/dist/nvi/ex/ex_tag.c cvs rdiff -u -r1.5 -r1.6 src/dist/nvi/ex/ex_txt.c src/dist/nvi/ex/ex_usage.c cvs rdiff -u -r1.1.1.2 -r1.2 src/dist/nvi/ip/ip_main.c cvs rdiff -u -r1.1.1.2 -r1.2 src/dist/nvi/motif_l/m_vi.c cvs rdiff -u -r1.5 -r1.6 src/dist/nvi/regex/regcomp.c cvs rdiff -u -r1.2 -r1.3 src/dist/nvi/regex/regex2.h cvs rdiff -u -r1.2 -r1.3 src/dist/nvi/vi/getc.c src/dist/nvi/vi/v_replace.c \ src/dist/nvi/vi/v_sentence.c src/dist/nvi/vi/v_ulcase.c \ src/dist/nvi/vi/v_util.c src/dist/nvi/vi/v_word.c cvs rdiff -u -r1.4 -r1.5 src/dist/nvi/vi/v_increment.c \ src/dist/nvi/vi/v_match.c cvs rdiff -u -r1.3 -r1.4 src/dist/nvi/vi/v_search.c src/dist/nvi/vi/vi.c \ src/dist/nvi/vi/vi.h cvs rdiff -u -r1.6 -r1.7 src/dist/nvi/vi/v_txt.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/crypto/dist/heimdal/lib/krb5
Module Name:src Committed By: njoly Date: Mon Mar 21 15:04:18 UTC 2011 Modified Files: src/crypto/dist/heimdal/lib/krb5: krb5_c_make_checksum.3 krb5_encrypt.3 Log Message: Add missing quotes. To generate a diff of this commit: cvs rdiff -u -r1.1 -r1.2 \ src/crypto/dist/heimdal/lib/krb5/krb5_c_make_checksum.3 cvs rdiff -u -r1.8 -r1.9 src/crypto/dist/heimdal/lib/krb5/krb5_encrypt.3 Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/usr.sbin/schedctl
Module Name:src Committed By: jruoho Date: Mon Mar 21 15:35:22 UTC 2011 Modified Files: src/usr.sbin/schedctl: schedctl.8 Log Message: Use a better width for the list. To generate a diff of this commit: cvs rdiff -u -r1.9 -r1.10 src/usr.sbin/schedctl/schedctl.8 Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/rump/net/lib/libshmif
Module Name:src Committed By: pooka Date: Mon Mar 21 15:47:54 UTC 2011 Removed Files: src/sys/rump/net/lib/libshmif: dumpbus.c Log Message: this was moved to usr.bin ages ago To generate a diff of this commit: cvs rdiff -u -r1.10 -r0 src/sys/rump/net/lib/libshmif/dumpbus.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/rump/net/rumptest
Module Name:src Committed By: pooka Date: Mon Mar 21 15:51:34 UTC 2011 Removed Files: src/sys/rump/net/rumptest: Makefile rumptest_net.c Log Message: remove historic test To generate a diff of this commit: cvs rdiff -u -r1.10 -r0 src/sys/rump/net/rumptest/Makefile cvs rdiff -u -r1.23 -r0 src/sys/rump/net/rumptest/rumptest_net.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/rump
Module Name:src Committed By: pooka Date: Mon Mar 21 16:41:09 UTC 2011 Modified Files: src/sys/rump/include/machine: cpu.h intr.h src/sys/rump/include/rump: rump.h rumpuser.h src/sys/rump/librump/rumpkern: emul.c intr.c locks.c rump.c rump_private.h scheduler.c vm.c src/sys/rump/librump/rumpvfs: rumpfs.c vm_vfs.c src/sys/rump/net/lib/libshmif: if_shmem.c shmif_busops.c shmifvar.h Log Message: Update copyright statements. no functional change. To generate a diff of this commit: cvs rdiff -u -r1.14 -r1.15 src/sys/rump/include/machine/cpu.h cvs rdiff -u -r1.17 -r1.18 src/sys/rump/include/machine/intr.h cvs rdiff -u -r1.52 -r1.53 src/sys/rump/include/rump/rump.h cvs rdiff -u -r1.67 -r1.68 src/sys/rump/include/rump/rumpuser.h cvs rdiff -u -r1.149 -r1.150 src/sys/rump/librump/rumpkern/emul.c cvs rdiff -u -r1.35 -r1.36 src/sys/rump/librump/rumpkern/intr.c cvs rdiff -u -r1.53 -r1.54 src/sys/rump/librump/rumpkern/locks.c cvs rdiff -u -r1.232 -r1.233 src/sys/rump/librump/rumpkern/rump.c cvs rdiff -u -r1.69 -r1.70 src/sys/rump/librump/rumpkern/rump_private.h cvs rdiff -u -r1.25 -r1.26 src/sys/rump/librump/rumpkern/scheduler.c cvs rdiff -u -r1.113 -r1.114 src/sys/rump/librump/rumpkern/vm.c cvs rdiff -u -r1.92 -r1.93 src/sys/rump/librump/rumpvfs/rumpfs.c cvs rdiff -u -r1.27 -r1.28 src/sys/rump/librump/rumpvfs/vm_vfs.c cvs rdiff -u -r1.38 -r1.39 src/sys/rump/net/lib/libshmif/if_shmem.c cvs rdiff -u -r1.8 -r1.9 src/sys/rump/net/lib/libshmif/shmif_busops.c cvs rdiff -u -r1.5 -r1.6 src/sys/rump/net/lib/libshmif/shmifvar.h Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/lib/libp2k
Module Name:src Committed By: pooka Date: Mon Mar 21 16:41:27 UTC 2011 Modified Files: src/lib/libp2k: p2k.h Log Message: update copyright To generate a diff of this commit: cvs rdiff -u -r1.7 -r1.8 src/lib/libp2k/p2k.h Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/external/bsd/llvm
Module Name:src Committed By: joerg Date: Mon Mar 21 16:50:12 UTC 2011 Modified Files: src/external/bsd/llvm: Makefile.inc Log Message: Update LLVM/clang snapshot. This brings much improved support for --sysroot and a cross-compiling toolchain. To generate a diff of this commit: cvs rdiff -u -r1.4 -r1.5 src/external/bsd/llvm/Makefile.inc Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/share/man/man4/man4.emips
Module Name:src Committed By: njoly Date: Mon Mar 21 17:09:10 UTC 2011 Modified Files: src/share/man/man4/man4.emips: ace.4 Log Message: Add missing quotes. To generate a diff of this commit: cvs rdiff -u -r1.2 -r1.3 src/share/man/man4/man4.emips/ace.4 Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/dev/videomode
Module Name:src Committed By: jdc Date: Mon Mar 21 19:28:37 UTC 2011 Modified Files: src/sys/dev/videomode: modelines Log Message: Add EDID established timing modelines for 720x400x70 and 720x400x88 To generate a diff of this commit: cvs rdiff -u -r1.7 -r1.8 src/sys/dev/videomode/modelines Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/dev/videomode
Module Name:src Committed By: jdc Date: Mon Mar 21 19:29:54 UTC 2011 Modified Files: src/sys/dev/videomode: videomode.c Log Message: Regenerate for: Add EDID established timing modelines for 720x400x70 and 720x400x88 To generate a diff of this commit: cvs rdiff -u -r1.9 -r1.10 src/sys/dev/videomode/videomode.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/dev/videomode
Module Name:src Committed By: jdc Date: Mon Mar 21 19:32:27 UTC 2011 Modified Files: src/sys/dev/videomode: modelines2c.awk Log Message: Clarify vrefresh comment (no functional change) To generate a diff of this commit: cvs rdiff -u -r1.4 -r1.5 src/sys/dev/videomode/modelines2c.awk Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/dev/videomode
Module Name:src Committed By: jdc Date: Mon Mar 21 19:34:27 UTC 2011 Modified Files: src/sys/dev/videomode: edid.c Log Message: Correct "832x624x74". Update comments. Reverse iteratiion, so that modes are in established timing order. To generate a diff of this commit: cvs rdiff -u -r1.6 -r1.7 src/sys/dev/videomode/edid.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/lib/libc/gdtoa
Module Name:src Committed By: christos Date: Mon Mar 21 19:46:41 UTC 2011 Modified Files: src/lib/libc/gdtoa: dtoa.c Log Message: fix vax typo. To generate a diff of this commit: cvs rdiff -u -r1.6 -r1.7 src/lib/libc/gdtoa/dtoa.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/arch/powerpc/booke
Module Name:src Committed By: matt Date: Mon Mar 21 19:55:04 UTC 2011 Modified Files: src/sys/arch/powerpc/booke: e500_intr.c Log Message: Fix a bug in onchip_intr_name_lookup To generate a diff of this commit: cvs rdiff -u -r1.4 -r1.5 src/sys/arch/powerpc/booke/e500_intr.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/netinet
Module Name:src Committed By: matt Date: Mon Mar 21 20:39:32 UTC 2011 Modified Files: src/sys/netinet: tcp_output.c Log Message: Clean up setting ECN bit in TOS. Fixes PR 44742 To generate a diff of this commit: cvs rdiff -u -r1.169 -r1.170 src/sys/netinet/tcp_output.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/arch/x86/x86
Module Name:src Committed By: rmind Date: Mon Mar 21 22:25:14 UTC 2011 Modified Files: src/sys/arch/x86/x86: x86_machdep.c Log Message: cpu_need_resched: make AST if no __HAVE_PREEMPTION. Change has no effect since MP option is mandatory on x86, but makes code more logical. To generate a diff of this commit: cvs rdiff -u -r1.45 -r1.46 src/sys/arch/x86/x86/x86_machdep.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/lib/libc/gdtoa
Module Name:src Committed By: christos Date: Mon Mar 21 22:33:29 UTC 2011 Modified Files: src/lib/libc/gdtoa: gdtoaimp.h Log Message: Add Emin for the vax. Need to check To generate a diff of this commit: cvs rdiff -u -r1.10 -r1.11 src/lib/libc/gdtoa/gdtoaimp.h Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/lib/libc/gdtoa
Module Name:src Committed By: christos Date: Mon Mar 21 22:33:46 UTC 2011 Modified Files: src/lib/libc/gdtoa: hdtoa.c Log Message: pacify lint. To generate a diff of this commit: cvs rdiff -u -r1.6 -r1.7 src/lib/libc/gdtoa/hdtoa.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/lib/libc/gdtoa
Module Name:src Committed By: enami Date: Mon Mar 21 23:37:42 UTC 2011 Modified Files: src/lib/libc/gdtoa: hdtoa.c Log Message: Don't use #endif where #else is expected. To generate a diff of this commit: cvs rdiff -u -r1.7 -r1.8 src/lib/libc/gdtoa/hdtoa.c Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/doc
Module Name:src Committed By: taca Date: Tue Mar 22 00:04:33 UTC 2011 Modified Files: src/doc: 3RDPARTY Log Message: Postfix 2.8.2 has released. To generate a diff of this commit: cvs rdiff -u -r1.824 -r1.825 src/doc/3RDPARTY Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/arch/mmeye/include
Module Name:src Committed By: kiyohara Date: Tue Mar 22 05:37:37 UTC 2011 Modified Files: src/sys/arch/mmeye/include: bus.h Log Message: Add dummy bus_dma(9) stuff. To generate a diff of this commit: cvs rdiff -u -r1.1 -r1.2 src/sys/arch/mmeye/include/bus.h Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
CVS commit: src/sys/arch/mmeye/conf
Module Name:src Committed By: kiyohara Date: Tue Mar 22 05:39:32 UTC 2011 Modified Files: src/sys/arch/mmeye/conf: MMEYE_WLF files.mmeye Log Message: Add slhci(4) and some usb devices. To generate a diff of this commit: cvs rdiff -u -r1.1 -r1.2 src/sys/arch/mmeye/conf/MMEYE_WLF cvs rdiff -u -r1.14 -r1.15 src/sys/arch/mmeye/conf/files.mmeye Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files.
