[Glass] Encryption in GemStone

[Mariano Martinez Peck]

>
>>
>
>> As we've discussed the Blowfish
>> implementation works on Pharo for 8 byte chunks only.  I'd need to
>> implement
>> cipher block chaining [0] to have it work for longer strings
>>
>>
> Yes, I know :(  if you have a string bigger than 8 characters the rest
> remains unencrypted :(
>


Paul, may I ask if at least you could encrypt multiple chunks of 8 chars?
For example:


| enc encryptedString key decrString |
key:='mySecretKey'.
enc:=Blowfish encryptString:'1234567812345678' with: key.
encryptedString := enc asByteArray asString.
Transcript show: ' encrypted:  ', encryptedString; cr.
decrString:=Blowfish decryptString: encryptedString with: key.
Transcript show: ' decrypted:  ', decrString; cr.


I would love if you would be able to encrypt the whole string...I mean, you
encrypt as much multiples of 8 as you can, and only let the rest (always
will be smaller than 8 chars) unencrypted...

is that doable without much work?

Thanks





> But this is the only two-way encrypting we have out of the box for
> GemStone, isn't it?
>
> For one-way hashes be aware that SecureHashAlgorithm implements SHA-1 which
>> has been shown to be vulnerable to attack [1] since 2005.  In the
>> Cryptography repo on GemSource [2] there is the PasswordHashingFFI which
>> on
>> linux at least gives you access to bcrypt and the more modern one way SHA
>> algorithms in the crypt(3) library. For bcrypt you'll need a 64 bit
>> version
>> of libxcrypt installed for GemStone
>>
>>
> OK, good to know.
>
>
>> Thanks for keeping up on this
>>
>> Paul
>>
>> [0] https://en.wikipedia.org/wiki/Cipher_block_chaining
>> [1] https://www.schneier.com/blog/archives/2005/02/cryptanalysis_o.html
>> [2] http://seaside.gemtalksystems.com/ss/Cryptography
>>
>>
>>
>> --
>> View this message in context:
>> http://forum.world.st/Glass-Encryption-in-GemStone-tp4723580p4723736.html
>> Sent from the GLASS mailing list archive at Nabble.com.
>> _______________________________________________
>> Glass mailing list
>> Glass at lists.gemtalksystems.com
>> http://lists.gemtalksystems.com/mailman/listinfo/glass
>>
>
>
>
> --
> Mariano
> http://marianopeck.wordpress.com
>



-- 
Mariano
http://marianopeck.wordpress.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.gemtalksystems.com/mailman/private/glass/attachments/20131120/6686ccab/attachment-0001.html>