[RESULT] Release Apache Commons Imaging 1.0-alpha2 based on RC1

2020-08-06 Thread Bruno P. Kinoshita
The release was approved with the following votes - +1 sebb (binding) - +1 Gary Gregory (binding) - +1 Bruno P. Kinoshita (binding) - +1 Gary Lucas (non-binding) Thanks to all votes. I will prepare the release in the next hours. Cheers Bruno On Sunday, 2 August 2020, 11:54:01 am NZST, Brun

Re: [VOTE] Release Apache Commons Imaging 1.0-alpha2 based on RC1

2020-08-06 Thread Bruno P. Kinoshita
My own vote   [x] +1 Release these artifacts Bruno On Sunday, 2 August 2020, 11:54:01 am NZST, Bruno P. Kinoshita wrote: We have fixed quite a few bugs and added some significant enhancements since Apache Commons Imaging 1.0-alpha1 was released, so I would like to release Apache Com

Re: [VOTE] Release Apache Commons Imaging 1.0-alpha2 based on RC1

2020-08-06 Thread Gary Lucas
I successfully built the latest version of code using the following: Apache Maven 3.6.1 (d66c9c0b3152b2e69ee9bac180bb8fcc8e6af555; 2019-04-04T15:00:29-04:00) Maven home: C:\Users\gwluc\Documents\Applications\apache-maven-3.6.1\bin\.. Java version: 1.8.0_211, vendor: Oracle Corporation, runtime:

Re: [CRYPTO] Random AEADBadTagException in GcmCipherTest?

2020-08-06 Thread Rob Tompkins
Precisely. That’s another technique we’ve used in rng. -Ropb > On Aug 6, 2020, at 11:01 AM, Matt Sicker wrote: > > Or alternatively, if using random values each time, have it retry the > test with a different value. It's typically better to use an actual > property testing library for these typ

Re: [CRYPTO] Random AEADBadTagException in GcmCipherTest?

2020-08-06 Thread Matt Sicker
Or alternatively, if using random values each time, have it retry the test with a different value. It's typically better to use an actual property testing library for these types of tests anyways. One example library I found is https://jqwik.net/ (these types of testing libraries are more common in

Re: [CRYPTO] Random AEADBadTagException in GcmCipherTest?

2020-08-06 Thread Alex Remily
Since I'm in the code base anyway I'll see if I can look at it this weekend and include it in my PR with the Dockerfile. On Thu, Aug 6, 2020 at 10:56 AM Gary Gregory wrote: > > This is all fine and good but how would you fix the test such that it does > not fail randomly. PR anyone? > > Gary > >

Re: [CRYPTO] Random AEADBadTagException in GcmCipherTest?

2020-08-06 Thread Matt Sicker
Choose a seed value for the `new Random()` constructor and the tests will be deterministic. On Thu, 6 Aug 2020 at 09:57, Rob Tompkins wrote: > > > > > On Aug 6, 2020, at 10:56 AM, Gary Gregory wrote: > > > > This is all fine and good but how would you fix the test such that it does > > not fail

Re: [CRYPTO] Random AEADBadTagException in GcmCipherTest?

2020-08-06 Thread Rob Tompkins
> On Aug 6, 2020, at 10:56 AM, Gary Gregory wrote: > > This is all fine and good but how would you fix the test such that it does > not fail randomly. PR anyone? Either static inputs for determinism, or putting a probabilistic boundary in which the solution can fall. -Rob > > Gary > > On

Re: [CRYPTO] Random AEADBadTagException in GcmCipherTest?

2020-08-06 Thread Gary Gregory
This is all fine and good but how would you fix the test such that it does not fail randomly. PR anyone? Gary On Thu, Aug 6, 2020 at 10:54 AM Matt Sicker wrote: > The ECC stuff I mostly learned about from various Bernstein papers > like this one: https://cr.yp.to/newelliptic/nistecc-20160106.pd

Re: [CRYPTO] Random AEADBadTagException in GcmCipherTest?

2020-08-06 Thread Rob Tompkins
> On Aug 6, 2020, at 10:53 AM, Matt Sicker wrote: > > The ECC stuff I mostly learned about from various Bernstein papers > like this one: https://cr.yp.to/newelliptic/nistecc-20160106.pdf Reminds me a lot of the Poincare Disk model….very interesting! https://en.wikipedia.org/wiki/Poincaré

Re: [CRYPTO] Random AEADBadTagException in GcmCipherTest?

2020-08-06 Thread Matt Sicker
The ECC stuff I mostly learned about from various Bernstein papers like this one: https://cr.yp.to/newelliptic/nistecc-20160106.pdf On Thu, 6 Aug 2020 at 09:50, Rob Tompkins wrote: > > > > > On Aug 6, 2020, at 10:42 AM, Matt Sicker wrote: > > > > Well, for testing RNGs, I can understand using pr

Re: [CRYPTO] Random AEADBadTagException in GcmCipherTest?

2020-08-06 Thread Rob Tompkins
> On Aug 6, 2020, at 10:42 AM, Matt Sicker wrote: > > Well, for testing RNGs, I can understand using property testing, yes. > It would also be useful for testing fuzzing scenarios like making sure > the GCM tag is invalid for any random input data (giving a near zero > probability of valid dat

Re: [CRYPTO] Random AEADBadTagException in GcmCipherTest?

2020-08-06 Thread Matt Sicker
Well, for testing RNGs, I can understand using property testing, yes. It would also be useful for testing fuzzing scenarios like making sure the GCM tag is invalid for any random input data (giving a near zero probability of valid data) or that an elliptic curve implementation doesn't leak out info

Re: [CRYPTO] Random AEADBadTagException in GcmCipherTest?

2020-08-06 Thread Rob Tompkins
> On Aug 6, 2020, at 10:33 AM, Matt Sicker wrote: > > Now I hope we don't have unit tests depending on non-static state for > its random number generator! ;) We actually do have a considerable number of those in our projects where we use probabilistic epsilons on the output. See commons-rng.

Re: [CRYPTO] Random AEADBadTagException in GcmCipherTest?

2020-08-06 Thread Matt Sicker
Now I hope we don't have unit tests depending on non-static state for its random number generator! ;) I'd expect a crypto library's test suites to include several hard-coded known-good and known-bad ciphertexts with static keys/IVs similar to the test cases presented in their RFCs (especially since

Re: [EXEC] Java 6 to 7

2020-08-06 Thread sebb
I agree that a minimal bump to Java 7 is reasonable here. On Thu, 6 Aug 2020 at 14:46, Gary Gregory wrote: > > On Thu, Aug 6, 2020 at 9:37 AM Xeno Amess wrote: > > > why not go directly to 8? > > I don't think there be lots of java7 users... > > > > This is just about building and maintenance co

Re: [EXEC] Java 6 to 7

2020-08-06 Thread Gary Gregory
On Thu, Aug 6, 2020 at 9:37 AM Xeno Amess wrote: > why not go directly to 8? > I don't think there be lots of java7 users... > This is just about building and maintenance convenience, we've not released this component in ages, and I do not plan on working on it. I am trying to get all Commons to

Re: [EXEC] Java 6 to 7

2020-08-06 Thread Xeno Amess
why not go directly to 8? I don't think there be lots of java7 users... Gary Gregory 于2020年8月6日周四 下午9:33写道: > Hi All, > > In order to simplify building, I'd like to update the Commons Exec Java > platform requirement from the dead as a doornail version 6 to the mostly > dead version 7. > > Gary

[EXEC] Java 6 to 7

2020-08-06 Thread Gary Gregory
Hi All, In order to simplify building, I'd like to update the Commons Exec Java platform requirement from the dead as a doornail version 6 to the mostly dead version 7. Gary

Re: [CRYPTO] Random AEADBadTagException in GcmCipherTest?

2020-08-06 Thread Gary Gregory
On Thu, Aug 6, 2020 at 8:31 AM Alex Remily wrote: > No problem. I'll do it when I get home tonight. > Thanks Alex! Gary > > On Thu, Aug 6, 2020, 8:25 AM Gary Gregory wrote: > > > Hi Alex, > > > > Would you mind creating that ticket with that info? > > > > Thank you, > > Gary > > > > On Thu,

Re: [CRYPTO] Random AEADBadTagException in GcmCipherTest?

2020-08-06 Thread Alex Remily
No problem. I'll do it when I get home tonight. On Thu, Aug 6, 2020, 8:25 AM Gary Gregory wrote: > Hi Alex, > > Would you mind creating that ticket with that info? > > Thank you, > Gary > > On Thu, Aug 6, 2020, 08:10 Alex Remily wrote: > > > That is an intermittent issue that I haven't been ab

Re: [CRYPTO] Random AEADBadTagException in GcmCipherTest?

2020-08-06 Thread Gary Gregory
Hi Alex, Would you mind creating that ticket with that info? Thank you, Gary On Thu, Aug 6, 2020, 08:10 Alex Remily wrote: > That is an intermittent issue that I haven't been able to reliably > reproduce. As I recall, the test that's failing is supposed to fail, but > in a different way. I t

Re: [CRYPTO] Random AEADBadTagException in GcmCipherTest?

2020-08-06 Thread Alex Remily
That is an intermittent issue that I haven't been able to reliably reproduce. As I recall, the test that's failing is supposed to fail, but in a different way. I think it's supposed to fail because of a short buffer but occasionally fails because of an internal error, and when that happens this t

[ANNOUNCE] Apache Commons NET 3.7 released

2020-08-06 Thread sebb
The Apache Commons team are pleased to announce the release of Apache Commons Net version 3.7. The Commons Net library implements the client side of many basic Internet protocols. The purpose of the library is to provide fundamental protocol access, not higher-level abstractions. This is a bug fi