From darrenm@sac.sfbay.sun.com Tue Mar 18 07:25:46 2008 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m2IEPkCL000983 for ; Tue, 18 Mar 2008 07:25:46 -0700 (PDT) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m2IEPaT7004103; Tue, 18 Mar 2008 14:25:45 GMT Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JXX00E0HK2VZ500@brm-avmta-1.central.sun.com>; Tue, 18 Mar 2008 08:25:43 -0600 (MDT) Received: from dm-sfbay-02.sfbay.sun.com ([129.146.11.31]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JXX004R8K2VBNA0@brm-avmta-1.central.sun.com>; Tue, 18 Mar 2008 08:25:43 -0600 (MDT) Received: from sac.sfbay.sun.com (new-sac.SFBay.Sun.COM [129.146.175.65]) by dm-sfbay-02.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m2IEPgGr000378; Tue, 18 Mar 2008 07:25:42 -0700 (PDT) Received: from sac.sfbay.sun.com (localhost [127.0.0.1]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m2IEAgdL000815; Tue, 18 Mar 2008 07:10:42 -0700 (PDT) Received: (from darrenm@localhost) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8/Submit) id m2IEAgH5000811; Tue, 18 Mar 2008 07:10:42 -0700 (PDT) Date: Tue, 18 Mar 2008 07:10:42 -0700 (PDT) From: Darren J Moffat Subject: libmcrypt [PSARC/2008/203 FastTrack timeout 03/25/2008] To: PSARC-ext@sun.com Cc: crypto-discuss@opensolaris.org Message-id: <200803181410.m2IEAgH5000811@sac.sfbay.sun.com> Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 Status: RO Content-Length: 2677 Template Version: @(#)sac_nextcase 1.64 07/13/07 SMI This information is Copyright 2008 Sun Microsystems 1. Introduction 1.1. Project/Component Working Name: libmcrypt 1.2. Name of Document Author/Supplier: Author: Darren Moffat 1.3 Date of This Document: 18 March, 2008 4. Technical Description This case introduces the libmcrypt cryptographic library. The current version library is 2.5.8. This case seeks approval to provide this and any 100% compatible future version. If the list of algorithms or modes changes or any incompatiblity is found in a future version a case will be submitted to cover those issues. It provides support for the following cryptographic algorithms: Enabled in the Solaris delivery: DES, 3DES, AES, Blowfish, ArcFour, Enigma Provided by libmcrypt but disabled for legal reasons for Solaris delivery: CAST-128, CAST-256, GOST, PANAMA, RC2, SAFER, SAFERPLUS SERPENT, THREEWAY, TWOFISH, WAKE, XTEA Dynamic module loading is also disabled in libmcrypt. Algorithm Modes: CBC, CFB, CTR, ECB, nCFB, nOFB, OFB, Stream The library is licensed under the LGPLv2.1 but most of the algorithm implementations are public domain. Exported Interfaces +---------------------------------------------------------------------------+ | /usr/lib/libmcrypt.so.4 | Uncommitted | | | /usr/lib/libmcrypt.so | Committed | | | SONAME libmcrypt.so.4 | Uncommitted | | | | | | | | Uncommitted | API and header location | | | Project Private | | | | | | | libmcrypt.m4 | Volatile | Autoconf aclocal | | | | | | mcrypt(3) | | Man Page Documentation | | | | | | SUNWmcrypt | Uncommitted | Package | +---------------------------------------------------------------------------+ libmcrypt does not use or provide any algorithms to/from the Cryptographic Framework (libpkcs11 / kcf) and does not use or provide any cryptographic functionality from any hardware platform. 6. Resources and Schedule 6.4. Steering Committee requested information 6.4.1. Consolidation C-team Name: SFW 6.5. ARC review type: FastTrack 6.6. ARC Exposure: open From gdamore@opensolaris.org Tue Mar 18 09:29:36 2008 Received: from sunmail5.uk.sun.com (sunmail5.UK.Sun.COM [129.156.85.165]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m2IGTavo006420 for ; Tue, 18 Mar 2008 09:29:36 -0700 (PDT) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail5.uk.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m2IGTI4J009920 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Tue, 18 Mar 2008 16:29:35 GMT Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JXX00473PT8SX00@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@Sun.COM); Tue, 18 Mar 2008 09:29:32 -0700 (PDT) Received: from sca-ea-mail-2.sun.com ([192.18.43.25]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JXX003FDPT2DI40@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@Sun.COM); Tue, 18 Mar 2008 09:29:26 -0700 (PDT) Received: from relay24.sun.com (ip192-12-251-74.block6.us.syntegra.com [192.12.251.74]) by sca-ea-mail-2.sun.com (8.13.7+Sun/8.12.9) with ESMTP id m2IGA9jD021419 for ; Tue, 18 Mar 2008 16:29:26 +0000 (GMT) Received: from mms23es.sun.com ([150.143.232.54] [150.143.232.54]) by relay24i.sun.com with ESMTP id BT-MMP-523034 for PSARC-ext@Sun.COM; Tue, 18 Mar 2008 16:29:26 +0000 (Z) Received: from relay21.sun.com (relay21.sun.com [192.12.251.24]) by mms23es.sun.com with ESMTP id BT-MMP-2761157 for PSARC-ext@Sun.COM; Tue, 18 Mar 2008 16:29:23 +0000 (Z) Received: from outbound-mail-24.bluehost.com ([69.89.21.19] [69.89.21.19]) by relay21i.sun.com id BT-MMP-10451952 for PSARC-ext@Sun.COM; Tue, 18 Mar 2008 16:29:22 +0000 (Z) Received: (qmail 9882 invoked by uid 0); Tue, 18 Mar 2008 16:28:21 +0000 Received: from unknown (HELO box374.bluehost.com) (69.89.31.174) by outboundproxy2.bluehost.com with SMTP; Tue, 18 Mar 2008 16:28:21 +0000 Received: from cpe-76-174-83-55.socal.res.rr.com ([76.174.83.55] helo=[192.168.251.106]) by box374.bluehost.com with esmtpsa (TLSv1:AES256-SHA:256) (Exim 4.68) (envelope-from ) id 1Jbefl-0004bw-9N; Tue, 18 Mar 2008 10:28:21 -0600 Date: Tue, 18 Mar 2008 09:25:32 -0700 From: "Garrett D'Amore" Subject: Re: libmcrypt [PSARC/2008/203 FastTrack timeout 03/25/2008] In-reply-to: <200803181410.m2IEAgH5000811@sac.sfbay.sun.com> To: Darren J Moffat Cc: PSARC-ext@sun.com, crypto-discuss@opensolaris.org Reply-to: gdamore@opensolaris.org Message-id: <47DFECFC.8010301@opensolaris.org> MIME-version: 1.0 Content-type: text/plain; charset=us-ascii; format=flowed Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 X-Brightmail-Tracker: AAAAAA== X-Identified-User: {2225:box374.bluehost.com:damoreor:damore.org} {sentby:smtp auth 76.174.83.55 authed with garrett+damore.org} X-Antispam: No, score=-2.6/5.0, scanned in 3.025sec at (localhost [127.0.0.1]) by smf-spamd v1.3.1 - http://smfs.sf.net/ References: <200803181410.m2IEAgH5000811@sac.sfbay.sun.com> User-Agent: Thunderbird 2.0.0.6 (X11/20071023) Status: RO Content-Length: 3516 An interesting project, especially if the security folks have an intern they can throw at it, might be to try to adapt libmcrypt so it can use the encryption framework, or to write a thin-layer libmcrypt API shim on top of the encryption framework. That is assuming that our encryption is better (faster, and not buggier) than what libmcrypt provides -- an assertion which I am not certain holds true on x86 (but probably does on SPARC). It looks like this is only offering symmetric key encryption. -- Garrett Darren J Moffat wrote: > Template Version: @(#)sac_nextcase 1.64 07/13/07 SMI > This information is Copyright 2008 Sun Microsystems > 1. Introduction > 1.1. Project/Component Working Name: > libmcrypt > 1.2. Name of Document Author/Supplier: > Author: Darren Moffat > 1.3 Date of This Document: > 18 March, 2008 > 4. Technical Description > > This case introduces the libmcrypt cryptographic library. The current > version library is 2.5.8. This case seeks approval to provide this and > any 100% compatible future version. If the list of algorithms or modes > changes or any incompatiblity is found in a future version a case will > be submitted to cover those issues. > > It provides support for the following cryptographic algorithms: > > Enabled in the Solaris delivery: > > DES, 3DES, AES, Blowfish, ArcFour, Enigma > > Provided by libmcrypt but disabled for legal reasons for Solaris delivery: > > CAST-128, CAST-256, GOST, PANAMA, RC2, SAFER, SAFERPLUS > SERPENT, THREEWAY, TWOFISH, WAKE, XTEA > > Dynamic module loading is also disabled in libmcrypt. > > Algorithm Modes: > > CBC, CFB, CTR, ECB, nCFB, nOFB, OFB, Stream > > The library is licensed under the LGPLv2.1 but most of the algorithm > implementations are public domain. > > > Exported Interfaces > +---------------------------------------------------------------------------+ > | /usr/lib/libmcrypt.so.4 | Uncommitted | | > | /usr/lib/libmcrypt.so | Committed | | > | SONAME libmcrypt.so.4 | Uncommitted | | > | | | | > | | Uncommitted | API and header location | > | | Project Private | | > | | | | > | libmcrypt.m4 | Volatile | Autoconf aclocal | > | | | | > | mcrypt(3) | | Man Page Documentation | > | | | | > | SUNWmcrypt | Uncommitted | Package | > +---------------------------------------------------------------------------+ > > libmcrypt does not use or provide any algorithms to/from the > Cryptographic Framework (libpkcs11 / kcf) and does not use or provide any > cryptographic functionality from any hardware platform. > > 6. Resources and Schedule > 6.4. Steering Committee requested information > 6.4.1. Consolidation C-team Name: > SFW > 6.5. ARC review type: FastTrack > 6.6. ARC Exposure: open > > _______________________________________________ > crypto-discuss mailing list > crypto-discuss@opensolaris.org > http://mail.opensolaris.org/mailman/listinfo/crypto-discuss > From Darren.Moffat@sun.com Tue Mar 18 09:31:44 2008 Received: from sunmail2sca.sfbay.sun.com (sunmail2sca [129.145.155.234]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m2IGVi86006615 for ; Tue, 18 Mar 2008 09:31:44 -0700 (PDT) Received: from nwk-avmta-1.SFBay.Sun.COM (nwk-avmta-1.SFBay.Sun.COM [129.146.11.74]) by sunmail2sca.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m2IGVhfs005769 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Tue, 18 Mar 2008 09:31:44 -0700 (PDT) Received: from pmxchannel-daemon.nwk-avmta-1.sfbay.Sun.COM by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JXX00L33PWV2B00@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Tue, 18 Mar 2008 09:31:43 -0700 (PDT) Received: from gmp-eb-inf-1.sun.com ([192.18.6.21]) by nwk-avmta-1.sfbay.Sun.COM (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JXX00JE6PWTVF10@nwk-avmta-1.sfbay.Sun.COM> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Tue, 18 Mar 2008 09:31:42 -0700 (PDT) Received: from fe-emea-10.sun.com (gmp-eb-lb-2-fe2.eu.sun.com [192.18.6.11]) by gmp-eb-inf-1.sun.com (8.13.7+Sun/8.12.9) with ESMTP id m2IGVfSD021586 for ; Tue, 18 Mar 2008 16:31:41 +0000 (GMT) Received: from conversion-daemon.fe-emea-10.sun.com by fe-emea-10.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0JXX00J01NBYF400@fe-emea-10.sun.com> (original mail from Darren.Moffat@Sun.COM) for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Tue, 18 Mar 2008 16:31:41 +0000 (GMT) Received: from [129.156.173.21] by fe-emea-10.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0JXX006NXPWLNH10@fe-emea-10.sun.com>; Tue, 18 Mar 2008 16:31:34 +0000 (GMT) Date: Tue, 18 Mar 2008 16:31:33 +0000 From: Darren J Moffat Subject: Re: libmcrypt [PSARC/2008/203 FastTrack timeout 03/25/2008] In-reply-to: <47DFECFC.8010301@opensolaris.org> Sender: Darren.Moffat@sun.com To: gdamore@opensolaris.org Cc: Darren J Moffat , PSARC-ext@sun.com, crypto-discuss@opensolaris.org Message-id: <47DFEE65.2010401@Sun.COM> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200803181410.m2IEAgH5000811@sac.sfbay.sun.com> <47DFECFC.8010301@opensolaris.org> User-Agent: Thunderbird 2.0.0.9 (X11/20080213) Status: RO Content-Length: 427 Garrett D'Amore wrote: > An interesting project, especially if the security folks have an intern > they can throw at it, might be to try to adapt libmcrypt so it can use > the encryption framework, or to write a thin-layer libmcrypt API shim on > top of the encryption framework. Interesting yes but it amounts to essentially a fork and there could be licensing issues to cover first. Not this case. -- Darren J Moffat From gww@eng.sun.com Tue Mar 25 22:38:47 2008 Received: from sunmail4.singapore.sun.com (sunmail4.Singapore.Sun.COM [129.158.71.19]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m2Q5ckci011724 for ; Tue, 25 Mar 2008 22:38:46 -0700 (PDT) Received: from brm-avmta-1.central.sun.com (brm-avmta-1.Central.Sun.COM [129.147.4.11]) by sunmail4.singapore.sun.com (8.13.4+Sun/8.13.3/ENSMAIL,v2.2) with ESMTP id m2Q5cYlU002141 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Wed, 26 Mar 2008 13:38:45 +0800 (SGT) Received: from pmxchannel-daemon.brm-avmta-1.central.sun.com by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JYB00205P0EL800@brm-avmta-1.central.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Tue, 25 Mar 2008 23:38:38 -0600 (MDT) Received: from dm-eng-02.sfbay.sun.com ([129.146.11.32]) by brm-avmta-1.central.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JYB003QIP0ETXC0@brm-avmta-1.central.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Tue, 25 Mar 2008 23:38:38 -0600 (MDT) Received: from marduk.eng.sun.com (marduk.SFBay.Sun.COM [129.146.108.224]) by dm-eng-02.sfbay.sun.com (8.13.8+Sun/8.13.8/ENSMAIL,v2.2) with ESMTP id m2Q5cbj8040985; Tue, 25 Mar 2008 22:38:37 -0700 (PDT) Received: from marduk.eng.sun.com (localhost [127.0.0.1]) by marduk.eng.sun.com (8.13.6+Sun/8.12.11) with ESMTP id m2Q6d0jA013256; Tue, 25 Mar 2008 22:39:00 -0800 (PST) Received: (from gww@localhost) by marduk.eng.sun.com (8.13.6+Sun/8.12.11/Submit) id m2Q6d0Af013255; Tue, 25 Mar 2008 22:39:00 -0800 (PST) Date: Tue, 25 Mar 2008 22:39:00 -0800 (PST) From: Gary Winiger Subject: Re: libmcrypt [PSARC/2008/203 FastTrack timeout 03/25/2008] To: PSARC-ext@sun.com, darrenm@sac.sfbay.sun.com Cc: crypto-discuss@opensolaris.org Message-id: <200803260639.m2Q6d0Af013255@marduk.eng.sun.com> Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 Status: RO Content-Length: 118 > 4. Technical Description Maybe I overlooked it, but I don't see a Release Binding. Is it Minor or Patch? Gary.. From Darren.Moffat@Sun.COM Wed Mar 26 07:16:23 2008 Received: from sunmail3mpk.sfbay.sun.com (sunmail3mpk.SFBay.Sun.COM [129.146.11.52]) by sac.sfbay.sun.com (8.13.8+Sun/8.13.8) with ESMTP id m2QEGN6G024860 for ; Wed, 26 Mar 2008 07:16:23 -0700 (PDT) Received: from nwk-avmta-2.sfbay.sun.com (nwk-avmta-2.SFBay.Sun.COM [129.145.155.6]) by sunmail3mpk.sfbay.sun.com (8.13.7+Sun/8.13.7/ENSMAIL,v2.2) with ESMTP id m2QEGK0J027690 for <@sunmail2sca.sfbay.sun.com:PSARC-ext@sun.com>; Wed, 26 Mar 2008 07:16:23 -0700 (PDT) Received: from pmxchannel-daemon.nwk-avmta-2.sfbay.sun.com by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) id <0JYC0021VCZAFL00@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Wed, 26 Mar 2008 07:16:22 -0700 (PDT) Received: from gmp-eb-inf-2.sun.com ([192.18.6.24]) by nwk-avmta-2.sfbay.sun.com (Sun Java System Messaging Server 6.2-3.04 (built Jul 15 2005)) with ESMTP id <0JYC001P5CZ9WK10@nwk-avmta-2.sfbay.sun.com> for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Wed, 26 Mar 2008 07:16:22 -0700 (PDT) Received: from fe-emea-09.sun.com (gmp-eb-lb-2-fe2.eu.sun.com [192.18.6.11]) by gmp-eb-inf-2.sun.com (8.13.7+Sun/8.12.9) with ESMTP id m2QEGL23001576 for ; Wed, 26 Mar 2008 14:16:21 +0000 (GMT) Received: from conversion-daemon.fe-emea-09.sun.com by fe-emea-09.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) id <0JYC00G01AJDAP00@fe-emea-09.sun.com> (original mail from Darren.Moffat@Sun.COM) for PSARC-ext@sun.com (ORCPT PSARC-ext@sun.com); Wed, 26 Mar 2008 14:16:21 +0000 (GMT) Received: from [129.156.173.199] by fe-emea-09.sun.com (Sun Java System Messaging Server 6.2-8.04 (built Feb 28 2007)) with ESMTPSA id <0JYC0007DCYB3410@fe-emea-09.sun.com>; Wed, 26 Mar 2008 14:15:48 +0000 (GMT) Date: Wed, 26 Mar 2008 14:15:47 +0000 From: Darren J Moffat Subject: Re: libmcrypt [PSARC/2008/203 FastTrack timeout 03/25/2008] In-reply-to: <200803260639.m2Q6d0Af013255@marduk.eng.sun.com> Sender: Darren.Moffat@Sun.COM To: Gary Winiger Cc: PSARC-ext@Sun.COM, crypto-discuss@opensolaris.org Message-id: <47EA5A93.5030106@Sun.COM> MIME-version: 1.0 Content-type: text/plain; format=flowed; charset=ISO-8859-1 Content-transfer-encoding: 7BIT X-PMX-Version: 5.4.1.325704 References: <200803260639.m2Q6d0Af013255@marduk.eng.sun.com> User-Agent: Thunderbird 2.0.0.9 (X11/20080225) Status: RO Content-Length: 208 Gary Winiger wrote: >> 4. Technical Description > > Maybe I overlooked it, but I don't see a Release Binding. > Is it Minor or Patch? Patch, but with no intention to backport to S10. -- Darren J Moffat