Welcome Guest.   Make a donation to an author on the site May 21, 2013, 06:16:39 AM  *

Please login or register.
Or did you miss your validation email?


Login with username and password (forgot your password?)
Why not become a lifetime supporting member of the site with a one-time donation of any amount? Your donation entitles you to a ton of additional benefits, including access to exclusive discounts and downloads, the ability to enter monthly free software drawings, and a single non-expiring license key for all of our programs.


You must sign up here before you can post and access some areas of the site. Registration is totally free and confidential.
 
Your Support Funds this Site: View the Supporter Yearbook.
   
   Forum Home   Thread Marks Chat! Downloads Search Login Register  
Pages: [1]   Go Down
  Reply  |  New Topic  |  Print  
Author Topic: Mircryption/XChat 0.4.0-alpha w/ DH1080 Key Exchange !  (Read 10183 times)
gjehle
Member
**
Posts: 275



lonesome linux warrior

see users location on a map View Profile WWW Read user's biography. Give some DonationCredits to this forum member
« on: May 01, 2007, 10:05:01 AM »

Yes, you read correctly.
It's been done.

grab the changed code from http://mein-bowl.de/oss/mcpsx
or directly from http://mein-bowl.de/oss/f...xchat_0.4.0-alpha.tar.bz2

this is by NO MEANS an official new mcps/xchat version!
this code is alpha, probably has bugs, might be insecure, blow up in your face.
it also depends on the OpenSSL library for doing the diffie-helman key agreement

i'm posting this here because i need your input and support.
if you're using mircryption with xchat and you feel confident enough to do so, please go ahead and test this code.

if you find any bugs or have suggestions, please contact me.

known bugs:
- doesn't use the name of the current query window if no parameter to /keyx is given (workaround: use /keyx NICKNAME)

known issues:
- there are some return values, mostly from the OpenSSL functions that aren't being checked yet. this has to be done.
- makefile for windows needs to be modified
- only tested on linux x86_64
- doesn't compile on intel macs (known issue with all versions of mircryption/xchat)


UPDATE
i should note a few things that are different in the way i implemented DH1080

- there can only be one key exchange at the same time (to prevent mix ups of public keys)
- there is a 7 second timeout in which B has to answer to A's request to exchange keys
- there is a new command "DH1080_ABORT <reason>" to ignore requests with an optional reason

that's it, this doesn't break compatibility with either fish or mcps/mirc


UPDATE! 2009-01-10
thanks to dev00 (http://dev00.pytalhost.com/) there's now a windows build of the (latest) inofficial mircryption version.
this enables windows users to use the DH1080 keyexchange!
since I don't run windows, I haven't had a chance to test it yet myself.

There's a binary as well as source code with a working visual studio project available from http://voobar.follvalsch.de/mcpsx
The binary version is dynamically linked against OpenSSL 0.8.9i from http://www.slproweb.com/products/Win32OpenSSL.html which you'd have to install.
« Last Edit: January 10, 2009, 11:53:46 AM by gjehle » Logged
mouser
First Author
Administrator
*****
Posts: 30,979



plarker mouser see users location on a map View Profile WWW Read user's biography. Give some DonationCredits to this forum member
« Reply #1 on: May 01, 2007, 11:07:55 AM »

amazing. people have actually been asking for this for a long time.
« Last Edit: May 01, 2007, 05:00:03 PM by mouser » Logged
housetier
Charter Honorary Member
***
Posts: 1,321


see users location on a map View Profile Give some DonationCredits to this forum member
« Reply #2 on: May 01, 2007, 03:37:44 PM »

Ubuntu and debian users need to install the package libssl-dev. This, and all the other packages one needed before.

So far it seems to work on my 32bit ubuntu
[copy or print]
/keyx hadez
was successful.
Logged


[ may-june 2013 ad experiment; click here to learn more about donationcoder.com ]

mouser
First Author
Administrator
*****
Posts: 30,979



plarker mouser see users location on a map View Profile WWW Read user's biography. Give some DonationCredits to this forum member
« Reply #3 on: May 01, 2007, 05:02:41 PM »

gjehle,

you may know that i added a cbc mode of key exchange for mircryption mirc, that will create a random cbc mode key instead of an old-style ecb style key, if both users are using mircryption mirc.  when you get a chance it would be great if you can implement this for your key exchange as well.  should require very little work it's just a matter of seeing if the other person returns an acknowledgement that they also support cbc and then prefixing a cbc: to the key set if so.
Logged
gjehle
Member
**
Posts: 275



lonesome linux warrior

see users location on a map View Profile WWW Read user's biography. Give some DonationCredits to this forum member
« Reply #4 on: May 02, 2007, 02:06:41 PM »

you may know that i added a cbc mode of key exchange for mircryption mirc,[...]

i'd have to take a look at it first, but it sounds nice.
i'll add it to my todo for future features cheesy
Logged
gjehle
Member
**
Posts: 275



lonesome linux warrior

see users location on a map View Profile WWW Read user's biography. Give some DonationCredits to this forum member
« Reply #5 on: January 10, 2009, 11:52:01 AM »

thanks to dev00 (http://dev00.pytalhost.com/) there's now a windows build of the (latest) inofficial mircryption version.
this enables windows users to use the DH1080 keyexchange!
since I don't run windows, I haven't had a chance to test it yet myself.

There's a binary as well as source code with a working visual studio project available from http://voobar.follvalsch.de/mcpsx
The binary version is dynamically linked against OpenSSL 0.8.9i from http://www.slproweb.com/products/Win32OpenSSL.html which you'd have to install.
Logged
mouser
First Author
Administrator
*****
Posts: 30,979



plarker mouser see users location on a map View Profile WWW Read user's biography. Give some DonationCredits to this forum member
« Reply #6 on: January 10, 2009, 12:06:55 PM »

nice!!
Logged
bamboo123
Participant
*
Posts: 9


View Profile Give some DonationCredits to this forum member
« Reply #7 on: April 28, 2009, 07:19:56 AM »

Just found some little problem with 0.4.0-alpha:
scenerio: you're connected multiple times (diffrent nicknames) to the same network.
when you try to /keyx with a nick you already /keyx'ed with using a other of your connection, xchat chrashes. smiley

gdb says:
[copy or print]
Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0xb7148710 (LWP 28464)]
0xb735c613 in strlen () from /lib/tls/i686/cmov/libc.so.6

gdb backtrace:
[copy or print]
#0  0xb735c613 in strlen () from /lib/tls/i686/cmov/libc.so.6
#1  0xb6d14132 in std::string::operator= () from /usr/lib/libstdc++.so.6
#2  0xb5901acf in mc_keyx () from /home/username/.xchat2/mircryption.so
#3  0x080a0ecc in ?? ()
#4  0x0809e76b in ?? ()
#5  0x0809f493 in ?? ()
#6  0x08071b36 in ?? ()
#7  0xb76d43a4 in g_cclosure_marshal_VOID__VOID () from /usr/lib/libgobject-2.0.so.0
#8  0xb76c6c7b in g_closure_invoke () from /usr/lib/libgobject-2.0.so.0
#9  0xb76dce57 in ?? () from /usr/lib/libgobject-2.0.so.0
#10 0xb7c13670 in ?? () from /usr/lib/libgtk-x11-2.0.so.0
#11 0xb7c13c2c in ?? () from /usr/lib/libgtk-x11-2.0.so.0
#12 0xb7c13e9d in ?? () from /usr/lib/libgtk-x11-2.0.so.0
#13 0xb7c1400e in gtk_bindings_activate_event () from /usr/lib/libgtk-x11-2.0.so.0
#14 0xb7c5fdef in ?? () from /usr/lib/libgtk-x11-2.0.so.0
#15 0xb7cd9526 in ?? () from /usr/lib/libgtk-x11-2.0.so.0
#16 0xb76c53d9 in ?? () from /usr/lib/libgobject-2.0.so.0
#17 0xb76c6ba8 in g_closure_invoke () from /usr/lib/libgobject-2.0.so.0
#18 0xb76dcaff in ?? () from /usr/lib/libgobject-2.0.so.0
#19 0xb76de34f in g_signal_emit_valist () from /usr/lib/libgobject-2.0.so.0
#20 0xb76de936 in g_signal_emit () from /usr/lib/libgobject-2.0.so.0
#21 0xb7df42ae in ?? () from /usr/lib/libgtk-x11-2.0.so.0
#22 0xb7e0811f in gtk_window_propagate_key_event () from /usr/lib/libgtk-x11-2.0.so.0
#23 0xb7e0b49c in ?? () from /usr/lib/libgtk-x11-2.0.so.0
#24 0xb7cd9526 in ?? () from /usr/lib/libgtk-x11-2.0.so.0
#25 0xb76c53d9 in ?? () from /usr/lib/libgobject-2.0.so.0
#26 0xb76c6c7b in g_closure_invoke () from /usr/lib/libgobject-2.0.so.0
#27 0xb76dcaff in ?? () from /usr/lib/libgobject-2.0.so.0
#28 0xb76de34f in g_signal_emit_valist () from /usr/lib/libgobject-2.0.so.0
#29 0xb76de936 in g_signal_emit () from /usr/lib/libgobject-2.0.so.0
#30 0xb7df42ae in ?? () from /usr/lib/libgtk-x11-2.0.so.0
#31 0xb7cd2041 in gtk_propagate_event () from /usr/lib/libgtk-x11-2.0.so.0
#32 0xb7cd3327 in gtk_main_do_event () from /usr/lib/libgtk-x11-2.0.so.0
#33 0xb7b6034a in ?? () from /usr/lib/libgdk-x11-2.0.so.0
#34 0xb749bb88 in g_main_context_dispatch () from /usr/lib/libglib-2.0.so.0
#35 0xb749f0eb in ?? () from /usr/lib/libglib-2.0.so.0
#36 0xb749f5ba in g_main_loop_run () from /usr/lib/libglib-2.0.so.0
#37 0xb7cd37d9 in gtk_main () from /usr/lib/libgtk-x11-2.0.so.0
#38 0x0806158b in ?? ()
#39 0x080aeebd in ?? ()
#40 0xb72fb775 in __libc_start_main () from /lib/tls/i686/cmov/libc.so.6
#41 0x08055c31 in ?? ()

PS: os: ubuntu jaunty 32bit (all updates, Linux 2.6.28-11-generic) with xchat 2.8.6 (from the ubuntu jaunty backports).
« Last Edit: April 28, 2009, 07:22:42 AM by bamboo123 » Logged
gjehle
Member
**
Posts: 275



lonesome linux warrior

see users location on a map View Profile WWW Read user's biography. Give some DonationCredits to this forum member
« Reply #8 on: April 28, 2009, 09:48:09 AM »

Just found some little problem with 0.4.0-alpha:
scenerio: you're connected multiple times (diffrent nicknames) to the same network.
when you try to /keyx with a nick you already /keyx'ed with using a other of your connection, xchat chrashes. smiley

How dare you do connect multiple times with the same client to the same network! ;-)
Do you have a paranoid-schizophrenic chatting disorder that you need to encrypt text you're sending to yourself?

I mean, is there really a need for this?

From the top of my head I would say implementing a fix for this could be a bit of work since I'd have to hold different openssl contexts for each opened connection.
Right now there's only one context per /keyx request.
Logged
bamboo123
Participant
*
Posts: 9


View Profile Give some DonationCredits to this forum member
« Reply #9 on: April 28, 2009, 11:01:02 AM »

Just found some little problem with 0.4.0-alpha:
scenerio: you're connected multiple times (diffrent nicknames) to the same network.
when you try to /keyx with a nick you already /keyx'ed with using a other of your connection, xchat chrashes. smiley

How dare you do connect multiple times with the same client to the same network! ;-)
Do you have a paranoid-schizophrenic chatting disorder that you need to encrypt text you're sending to yourself?
(...)
I'm teh Gollum zwzwzw ME TOO! j/k. the problem isn't about chatting with me, myself and I, it's with messaging a third person from both the connections. smiley

PS: i need multiple connections, as I have no friends and really like to flirt with myself Wink
PSS: i'm connecting using two diffrent proxys, so at least no multiple connections from the same host Wink
Logged
gjehle
Member
**
Posts: 275



lonesome linux warrior

see users location on a map View Profile WWW Read user's biography. Give some DonationCredits to this forum member
« Reply #10 on: April 28, 2009, 01:59:01 PM »

okay,
I'd have to take a look at this if time allows so it might be a while till you hear back from ne on this.
Are you on Windows or Linux?
Logged
bamboo123
Participant
*
Posts: 9


View Profile Give some DonationCredits to this forum member
« Reply #11 on: April 29, 2009, 07:21:06 AM »

(...)
PS: os: ubuntu jaunty 32bit (all updates, Linux 2.6.28-11-generic) with xchat 2.8.6 (from the ubuntu jaunty backports).
Logged
Pages: [1]   Go Up
  Reply  |  New Topic  |  Print  



[ may-june 2013 ad experiment; click here to learn more about donationcoder.com ]


 
Jump to:  
   Forum Home   Thread Marks Chat! Downloads Search Login Register  

DonationCoder.com | About Us
DonationCoder.com Forum | Powered by SMF
[ Page time: 0.035s | Server load: 0.04 ]