Re: What flavor of Encryption?

From: Jim Archer (jim@archer.net)
Date: Wed Mar 22 2000 - 00:32:44 EST


OK Jim, thanks.

Actually, I'm having more basic problems than that, even. From looking at
the perl scripts I have, it seems that encryption is optional. I tried
telnetting to the server and it answered, but then it would not respond to
anything I typed. For example, I tried telling it:

OpenSRS CLIENT 2.0

and then

login userid password

but it never responded. The code seems to not look for a response after I
tell it my version number, but it never responds after the login request
either. Also, if tell it:

login -DES userid

it never issues the challenge.

Any ideas on that?

Thanks...

Jim

"James H. Cloos Jr." wrote:

> The DES algorithm is compatable.
>
> How that is chained may not be. I've not looked into that part.
> Specifically, I've not looked into the exact what and why of the
> change Crypt::CBC made between 1.20 and the current revisions,
> nor why OpenSSL made similar changes.
>
> That said, an earlier post to one of the OpenSRS lists mentions that
> the 1.9.7 code had one or more non-obvious issues in how things were
> encoded prior to encryption. Ie, even if you get the excryption to
> exactly match what Crypt::CBC 1.20 and Crypt::DES are doing, you
> still have to be careful to get your code to interact with the
> OpenSRS server(s).
>
> But the new version (tomorrow!) might change that...
>
> -JimC (who would perfer to run everything in php than a cgi...)
> --
> James H. Cloos, Jr. <URL:http://jhcloos.com/public_key> 1024D/ED7DAEA6
> <cloos@jhcloos.com> E9E9 F828 61A4 6EA9 0F2B 63E7 997A 9F17 ED7D AEA6
> Like this email? Click here: <URL:http://jhcloos.com/twocentsworth>
> Save Trees: Get E-Gold! <URL:http://jhcloos.com/go?e-gold>



This archive was generated by hypermail 2.1.3 : Tue Oct 19 2004 - 23:35:22 EDT