diffie-hellman problem

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



hello Christian,

On Thursday 29 June 2006 01:07, Christian Thalinger wrote:
> On Tue, 2006-06-27 at 21:27 +1000, Raif S. Naffah wrote:
> > found the problem;  should be able to check-in a fix within the
> > next 48h.
>
> Very cool!  Thanks for the quick fix.  Does this Sun demo now work
> for you?  It does not throw the exception anymore, but it hangs here
> with 0% cpu:
>
> <snip>
> Shared secrets are the same
> Return shared secret as SecretKey object ...
> DES in ECB mode recovered text is same as cleartext
> DES in CBC mode recovered text is same as cleartext

i test against the Mauve testlet and this is what i get:

TEST: gnu.javax.crypto.jce.TestOfDHKeyAgreement2
*** Generating Alice's Diffie-Hellman key-pair
*** Initializing Alice's Diffie-Hellman key-agreement
*** Alice sends Bob her encoded key...
*** Generating Bob's Diffie-Hellman key-pair
*** Initializing Bob's Diffie-Hellman key-agreement
*** Bob sends Alice his encoded key...
*** Alice does phase #1
*** Bob does phase #1
  pass:  line 160: generateSecret(byte[128], 1) MUST throw ShortBufferException [1]
  pass:  line 165: Shared secrets MUST be equal [1]
*** Bob generates a new shared secret
*** Alice generates a new shared secret
*** Bob sends Alice a DES/ECB encrypted message
  pass:  line 190: DES/ECB recovered text and cleartext MUST be equal [1]
*** Bob sends Alice a DES/CBC encrypted message
  pass:  line 209: DES/CBC recovered text and cleartext MUST be equal [1]
TEST PASSED (4 checks) gnu.javax.crypto.jce.TestOfDHKeyAgreement2

TEST RESULTS:
0 of 1 tests failed.  0 total calls to harness.check() failed.

with:

* Classpath CVS HEAD, configured --with-jikes
* the latest JamVM, checked out from cvs.jamv.berlios.de.
$ jamvm -version
java version "1.4.2"
JamVM version 1.4.4-pre
Copyright (C) 2003-2006 Robert Lougher <rob@xxxxxxxxxxxxxx>
* Harness invoked with -showpasses -verbose


the fact that it hangs after, presumably, the last crypto operation is
indicative of a thread or VM related problem, but i could be wrong.


> jamvm crashes on my x86_64, so I don't know if that's a cacao bug.

Robert should be able to help with this.


> Another thing is, it didn't fix the problem in this proprietary
> application I'm trying to run.  I'll paste the stacktrace, maybe you
> have an idea:
>
> java.security.spec.InvalidKeySpecException: Unexpected OID:
> 1.3.14.3.2.12 at
> gnu.java.security.jce.sig.DSSKeyFactory.engineGeneratePublic(DSSKeyFa
>ctory.java:96) at
> java.security.KeyFactory.generatePublic(KeyFactory.java:219) at
> hox.corem.server.LicenseManagerImpl.<clinit>(LicenseManagerImpl.java:
>89) Caused by: java.security.InvalidParameterException: Unexpected
> OID: 1.3.14.3.2.12 at
> gnu.java.security.key.dss.DSSKeyPairX509Codec.decodePublicKey(DSSKeyP
>airX509Codec.java:204) at
> gnu.java.security.jce.sig.DSSKeyFactory.engineGeneratePublic(DSSKeyFa
>ctory.java:91) ...2 more

this is indicative of a possible problem with the DSS/DSA JCE Adapters.
an example code/test-case, with the data that caused the exception,
would be a great help in finding the bug and validating the fix.


cheers;
rsn
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://developer.classpath.org/pipermail/classpath/attachments/20060629/c17c6720/attachment.pgp

[Index of Archives]     [Linux Kernel]     [Linux Cryptography]     [Fedora]     [Fedora Directory]     [Red Hat Development]

  Powered by Linux