- nettle-bugs - lists.lysator.liu.se

Re: howto use openssl generated rsa keys with nettle
by nisse＠lysator.liu.se 05 Jan '11

05 Jan '11

Jyke Jokinen <jyke.jokinen(a)tut.fi> writes: > In private key the fields are (openssl rsa -in key.pem -text): > privateExponent: > prime1: > prime2: > exponent1: > exponent2: > coefficient: > > Prime1&2 should be the factors p and q in rsa_private_key(?) > What values should be used for a, b and c? If n = p q, e is the public exponent and d is the private exponent, then one should have a = d mod (p - 1) b = d mod (q - 1) c = q^{-1} (mod p) I've tried to explain this in rsa.h, suggestions for improving the documentation are welcome. I'm pretty sure openssl uses the same values. Off the top of my head I can't say for sure how to pair together nettle's names and openssl's, but I think they're in the same order, i.e., privateExponent = d prime1 = p prime2 = q exponent1 = a exponent2 = b coefficient = c Anyway, a, b, and c are redundant and can be computed from p, q and d, so you can check if the pairing above is correct. For converting keys in pkcs#1 format, also have a look at the program examples/pkcs1-conv.c, and the function rsa_keypair_from_der which it uses. Regards, /Niels PS. I've added your address to the non-member whitelist. I hope that works, and that you can now post to the list. (Default posting policy is members-only, as a desperate anti-spam measure). -- Niels Möller. PGP-encrypted email is preferred. Keyid C0B98E26. Internet email is subject to wholesale government surveillance.

1 0

Re: LGPL blowfish
by nisse＠lysator.liu.se 13 Dec '10

13 Dec '10

Simon Josefsson <simon(a)josefsson.org> writes: > I was just curious whether you managed to get to the old code's speed > again. I did, and it now runs at about the same speed as with the old code. Actually, I don't think this exercise has introduced any interesting changes to the source code, it has just clarified that the current code is now a copy of the LGPL:ed code in libgcrypt (LGPL:ed) + some changes written by you and me. Anybody interested can try to diff the revisions before and after these sets of changes. Regards, /Niels -- Niels Möller. PGP-encrypted email is preferred. Keyid C0B98E26. Internet email is subject to wholesale government surveillance.

1 0

Re: LGPL blowfish
by nisse＠lysator.liu.se 07 Dec '10

07 Dec '10

Simon Josefsson <simon(a)josefsson.org> writes: > What about the nettle.texinfo patch below? Sorry, forgot that. I've just checked in the following: @item BLOWFISH The implementation of the BLOWFISH cipher is written by Werner Koch, copyright owned by the Free Software Foundation. Also hacked by Simon Josefsson and Niels Möller. Released under the LGPL. > I'm not sure what changes Ray Dassen did, maybe those were part of the > old optimizations? Do they need to be re-licensed? No, those optimizations were done by me. I tried to look up the origin of the old code. Ray Dassen copied blowfish code from GNUPG to LSH, with a changelog entry dated Dec 12 1998 (see lsh/ChangeLog.1), the fourth oldest ChangeLog entry for lsh. The optimizations I reapplied were done by me, originally recorded in Nettle's ChangeLog 2001-06-17. > Btw, did you record what kind of performance you got with your > optimization applied? I would be surprised if you couldn't get close > to the same speed with simple changes. I'm not sure what you mean. The changes *are* simple. 2010-11-26 Niels Möller <nisse(a)lysator.liu.se> Reapplied optimizations (150% speedup on x86_32) and other fixes, relicensing them as LGPL. * blowfish.c (do_encrypt): Renamed, to... (encrypt): ...new name. (F): Added context argument. Shift input explicitly, instead of reading individual bytes via memory. (R): Added context argument. (encrypt): Deleted a bunch of local variables. Using the context pointer for everything should consume less registers. (decrypt): Likewise. (initial_ctx): Arrange constants into a struct, to simplify key setup. (blowfish_set_key): Some simplification. > I'll look at serpent next. Great! Regards, /Niels -- Niels Möller. PGP-encrypted email is preferred. Keyid C0B98E26. Internet email is subject to wholesale government surveillance.

1 0

LGPL blowfish
by Simon Josefsson 26 Nov '10

26 Nov '10

Hi Niels! I really would like to see an all-LGPL libnettle, and willing to do the work. Here is a first milestone, to port Blowfish from libgcrypt to Nettle. The self-test work, and there are no API changes, and I didn't have to do anything strange to the code, so I'm hoping there won't be any problems. Testing on non-x86 would be useful nonetheless. I didn't look at the original blowfish.c in Nettle except for the first few header lines, so I have no idea what kind of improvements could be made -- but I don't think that is important compared to the license. I have not signed papers specifically for Nettle, hence the (C) with my name, but I can do FSF papers if it is required. I'm not posting a patch since the file is completely rewritten -- just replace blowfish.c with the file below. A small patch to the manual: --- nettle.texinfo.~1.15.~ 2010-08-04 23:43:31.000000000 +0200 +++ nettle.texinfo 2010-11-23 16:53:10.455095672 +0100 @@ -134,8 +134,8 @@ @item BLOWFISH The implementation of the BLOWFISH cipher is written by Werner Koch, -copyright owned by the Free Software Foundation. Also hacked by Ray -Dassen and @value{AUTHOR}. Released under the GPL. +copyright owned by the Free Software Foundation. Also hacked by Simon +Josefsson. @item CAMELLIA The C implementation is by Nippon Telegraph and Telephone Corporation /Simon PS. The mailing list refused attachments with text/x-csrc and text/plain types (I tried both), so I'm resending this with the file inline. Hopefully finally it will get through... /* blowfish.c * * The blowfish block cipher. * * For a description of the algorithm, see: * Bruce Schneier: Applied Cryptography. John Wiley & Sons, 1996. * ISBN 0-471-11709-9. Pages 336 ff. */ /* nettle, low-level cryptographics library * * Copyright (C) 2010 Simon Josefsson * Copyright (C) 1998, 2001, 2002, 2003 Free Software Foundation, Inc. * * The nettle library is free software; you can redistribute it and/or modify * it under the terms of the GNU Lesser General Public License as published by * the Free Software Foundation; either version 2.1 of the License, or (at your * option) any later version. * * The nettle library is distributed in the hope that it will be useful, but * WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY * or FITNESS FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public * License for more details. * * You should have received a copy of the GNU Lesser General Public License * along with the nettle library; see the file COPYING.LIB. If not, write to * the Free Software Foundation, Inc., 59 Temple Place - Suite 330, Boston, * MA 02111-1307, USA. */ /* This file is derived from cipher/blowfish.c in Libgcrypt v1.4.6. The adaption to Nettle was made by Simon Josefsson on 2010-11-23. Changes include removing the selftest, renaming u32/byte types to uint32_t/uint8_t, renaming BLOWFISH_ROUNDS to _BLOWFISH_ROUNDS (from Nettle's blowfish.h), dropping the libgcrypt wrapper functions, fixing #include's, remove support for non-16 rounds (there are no test vectors), adding FOR_BLOCK iterations, and running indent on the code. */ #if HAVE_CONFIG_H #include "config.h" #endif #include <assert.h> #include "blowfish.h" #include "macros.h" /* precomputed S boxes */ static const uint32_t ks0[256] = { 0xD1310BA6, 0x98DFB5AC, 0x2FFD72DB, 0xD01ADFB7, 0xB8E1AFED, 0x6A267E96, 0xBA7C9045, 0xF12C7F99, 0x24A19947, 0xB3916CF7, 0x0801F2E2, 0x858EFC16, 0x636920D8, 0x71574E69, 0xA458FEA3, 0xF4933D7E, 0x0D95748F, 0x728EB658, 0x718BCD58, 0x82154AEE, 0x7B54A41D, 0xC25A59B5, 0x9C30D539, 0x2AF26013, 0xC5D1B023, 0x286085F0, 0xCA417918, 0xB8DB38EF, 0x8E79DCB0, 0x603A180E, 0x6C9E0E8B, 0xB01E8A3E, 0xD71577C1, 0xBD314B27, 0x78AF2FDA, 0x55605C60, 0xE65525F3, 0xAA55AB94, 0x57489862, 0x63E81440, 0x55CA396A, 0x2AAB10B6, 0xB4CC5C34, 0x1141E8CE, 0xA15486AF, 0x7C72E993, 0xB3EE1411, 0x636FBC2A, 0x2BA9C55D, 0x741831F6, 0xCE5C3E16, 0x9B87931E, 0xAFD6BA33, 0x6C24CF5C, 0x7A325381, 0x28958677, 0x3B8F4898, 0x6B4BB9AF, 0xC4BFE81B, 0x66282193, 0x61D809CC, 0xFB21A991, 0x487CAC60, 0x5DEC8032, 0xEF845D5D, 0xE98575B1, 0xDC262302, 0xEB651B88, 0x23893E81, 0xD396ACC5, 0x0F6D6FF3, 0x83F44239, 0x2E0B4482, 0xA4842004, 0x69C8F04A, 0x9E1F9B5E, 0x21C66842, 0xF6E96C9A, 0x670C9C61, 0xABD388F0, 0x6A51A0D2, 0xD8542F68, 0x960FA728, 0xAB5133A3, 0x6EEF0B6C, 0x137A3BE4, 0xBA3BF050, 0x7EFB2A98, 0xA1F1651D, 0x39AF0176, 0x66CA593E, 0x82430E88, 0x8CEE8619, 0x456F9FB4, 0x7D84A5C3, 0x3B8B5EBE, 0xE06F75D8, 0x85C12073, 0x401A449F, 0x56C16AA6, 0x4ED3AA62, 0x363F7706, 0x1BFEDF72, 0x429B023D, 0x37D0D724, 0xD00A1248, 0xDB0FEAD3, 0x49F1C09B, 0x075372C9, 0x80991B7B, 0x25D479D8, 0xF6E8DEF7, 0xE3FE501A, 0xB6794C3B, 0x976CE0BD, 0x04C006BA, 0xC1A94FB6, 0x409F60C4, 0x5E5C9EC2, 0x196A2463, 0x68FB6FAF, 0x3E6C53B5, 0x1339B2EB, 0x3B52EC6F, 0x6DFC511F, 0x9B30952C, 0xCC814544, 0xAF5EBD09, 0xBEE3D004, 0xDE334AFD, 0x660F2807, 0x192E4BB3, 0xC0CBA857, 0x45C8740F, 0xD20B5F39, 0xB9D3FBDB, 0x5579C0BD, 0x1A60320A, 0xD6A100C6, 0x402C7279, 0x679F25FE, 0xFB1FA3CC, 0x8EA5E9F8, 0xDB3222F8, 0x3C7516DF, 0xFD616B15, 0x2F501EC8, 0xAD0552AB, 0x323DB5FA, 0xFD238760, 0x53317B48, 0x3E00DF82, 0x9E5C57BB, 0xCA6F8CA0, 0x1A87562E, 0xDF1769DB, 0xD542A8F6, 0x287EFFC3, 0xAC6732C6, 0x8C4F5573, 0x695B27B0, 0xBBCA58C8, 0xE1FFA35D, 0xB8F011A0, 0x10FA3D98, 0xFD2183B8, 0x4AFCB56C, 0x2DD1D35B, 0x9A53E479, 0xB6F84565, 0xD28E49BC, 0x4BFB9790, 0xE1DDF2DA, 0xA4CB7E33, 0x62FB1341, 0xCEE4C6E8, 0xEF20CADA, 0x36774C01, 0xD07E9EFE, 0x2BF11FB4, 0x95DBDA4D, 0xAE909198, 0xEAAD8E71, 0x6B93D5A0, 0xD08ED1D0, 0xAFC725E0, 0x8E3C5B2F, 0x8E7594B7, 0x8FF6E2FB, 0xF2122B64, 0x8888B812, 0x900DF01C, 0x4FAD5EA0, 0x688FC31C, 0xD1CFF191, 0xB3A8C1AD, 0x2F2F2218, 0xBE0E1777, 0xEA752DFE, 0x8B021FA1, 0xE5A0CC0F, 0xB56F74E8, 0x18ACF3D6, 0xCE89E299, 0xB4A84FE0, 0xFD13E0B7, 0x7CC43B81, 0xD2ADA8D9, 0x165FA266, 0x80957705, 0x93CC7314, 0x211A1477, 0xE6AD2065, 0x77B5FA86, 0xC75442F5, 0xFB9D35CF, 0xEBCDAF0C, 0x7B3E89A0, 0xD6411BD3, 0xAE1E7E49, 0x00250E2D, 0x2071B35E, 0x226800BB, 0x57B8E0AF, 0x2464369B, 0xF009B91E, 0x5563911D, 0x59DFA6AA, 0x78C14389, 0xD95A537F, 0x207D5BA2, 0x02E5B9C5, 0x83260376, 0x6295CFA9, 0x11C81968, 0x4E734A41, 0xB3472DCA, 0x7B14A94A, 0x1B510052, 0x9A532915, 0xD60F573F, 0xBC9BC6E4, 0x2B60A476, 0x81E67400, 0x08BA6FB5, 0x571BE91F, 0xF296EC6B, 0x2A0DD915, 0xB6636521, 0xE7B9F9B6, 0xFF34052E, 0xC5855664, 0x53B02D5D, 0xA99F8FA1, 0x08BA4799, 0x6E85076A }; static const uint32_t ks1[256] = { 0x4B7A70E9, 0xB5B32944, 0xDB75092E, 0xC4192623, 0xAD6EA6B0, 0x49A7DF7D, 0x9CEE60B8, 0x8FEDB266, 0xECAA8C71, 0x699A17FF, 0x5664526C, 0xC2B19EE1, 0x193602A5, 0x75094C29, 0xA0591340, 0xE4183A3E, 0x3F54989A, 0x5B429D65, 0x6B8FE4D6, 0x99F73FD6, 0xA1D29C07, 0xEFE830F5, 0x4D2D38E6, 0xF0255DC1, 0x4CDD2086, 0x8470EB26, 0x6382E9C6, 0x021ECC5E, 0x09686B3F, 0x3EBAEFC9, 0x3C971814, 0x6B6A70A1, 0x687F3584, 0x52A0E286, 0xB79C5305, 0xAA500737, 0x3E07841C, 0x7FDEAE5C, 0x8E7D44EC, 0x5716F2B8, 0xB03ADA37, 0xF0500C0D, 0xF01C1F04, 0x0200B3FF, 0xAE0CF51A, 0x3CB574B2, 0x25837A58, 0xDC0921BD, 0xD19113F9, 0x7CA92FF6, 0x94324773, 0x22F54701, 0x3AE5E581, 0x37C2DADC, 0xC8B57634, 0x9AF3DDA7, 0xA9446146, 0x0FD0030E, 0xECC8C73E, 0xA4751E41, 0xE238CD99, 0x3BEA0E2F, 0x3280BBA1, 0x183EB331, 0x4E548B38, 0x4F6DB908, 0x6F420D03, 0xF60A04BF, 0x2CB81290, 0x24977C79, 0x5679B072, 0xBCAF89AF, 0xDE9A771F, 0xD9930810, 0xB38BAE12, 0xDCCF3F2E, 0x5512721F, 0x2E6B7124, 0x501ADDE6, 0x9F84CD87, 0x7A584718, 0x7408DA17, 0xBC9F9ABC, 0xE94B7D8C, 0xEC7AEC3A, 0xDB851DFA, 0x63094366, 0xC464C3D2, 0xEF1C1847, 0x3215D908, 0xDD433B37, 0x24C2BA16, 0x12A14D43, 0x2A65C451, 0x50940002, 0x133AE4DD, 0x71DFF89E, 0x10314E55, 0x81AC77D6, 0x5F11199B, 0x043556F1, 0xD7A3C76B, 0x3C11183B, 0x5924A509, 0xF28FE6ED, 0x97F1FBFA, 0x9EBABF2C, 0x1E153C6E, 0x86E34570, 0xEAE96FB1, 0x860E5E0A, 0x5A3E2AB3, 0x771FE71C, 0x4E3D06FA, 0x2965DCB9, 0x99E71D0F, 0x803E89D6, 0x5266C825, 0x2E4CC978, 0x9C10B36A, 0xC6150EBA, 0x94E2EA78, 0xA5FC3C53, 0x1E0A2DF4, 0xF2F74EA7, 0x361D2B3D, 0x1939260F, 0x19C27960, 0x5223A708, 0xF71312B6, 0xEBADFE6E, 0xEAC31F66, 0xE3BC4595, 0xA67BC883, 0xB17F37D1, 0x018CFF28, 0xC332DDEF, 0xBE6C5AA5, 0x65582185, 0x68AB9802, 0xEECEA50F, 0xDB2F953B, 0x2AEF7DAD, 0x5B6E2F84, 0x1521B628, 0x29076170, 0xECDD4775, 0x619F1510, 0x13CCA830, 0xEB61BD96, 0x0334FE1E, 0xAA0363CF, 0xB5735C90, 0x4C70A239, 0xD59E9E0B, 0xCBAADE14, 0xEECC86BC, 0x60622CA7, 0x9CAB5CAB, 0xB2F3846E, 0x648B1EAF, 0x19BDF0CA, 0xA02369B9, 0x655ABB50, 0x40685A32, 0x3C2AB4B3, 0x319EE9D5, 0xC021B8F7, 0x9B540B19, 0x875FA099, 0x95F7997E, 0x623D7DA8, 0xF837889A, 0x97E32D77, 0x11ED935F, 0x16681281, 0x0E358829, 0xC7E61FD6, 0x96DEDFA1, 0x7858BA99, 0x57F584A5, 0x1B227263, 0x9B83C3FF, 0x1AC24696, 0xCDB30AEB, 0x532E3054, 0x8FD948E4, 0x6DBC3128, 0x58EBF2EF, 0x34C6FFEA, 0xFE28ED61, 0xEE7C3C73, 0x5D4A14D9, 0xE864B7E3, 0x42105D14, 0x203E13E0, 0x45EEE2B6, 0xA3AAABEA, 0xDB6C4F15, 0xFACB4FD0, 0xC742F442, 0xEF6ABBB5, 0x654F3B1D, 0x41CD2105, 0xD81E799E, 0x86854DC7, 0xE44B476A, 0x3D816250, 0xCF62A1F2, 0x5B8D2646, 0xFC8883A0, 0xC1C7B6A3, 0x7F1524C3, 0x69CB7492, 0x47848A0B, 0x5692B285, 0x095BBF00, 0xAD19489D, 0x1462B174, 0x23820E00, 0x58428D2A, 0x0C55F5EA, 0x1DADF43E, 0x233F7061, 0x3372F092, 0x8D937E41, 0xD65FECF1, 0x6C223BDB, 0x7CDE3759, 0xCBEE7460, 0x4085F2A7, 0xCE77326E, 0xA6078084, 0x19F8509E, 0xE8EFD855, 0x61D99735, 0xA969A7AA, 0xC50C06C2, 0x5A04ABFC, 0x800BCADC, 0x9E447A2E, 0xC3453484, 0xFDD56705, 0x0E1E9EC9, 0xDB73DBD3, 0x105588CD, 0x675FDA79, 0xE3674340, 0xC5C43465, 0x713E38D8, 0x3D28F89E, 0xF16DFF20, 0x153E21E7, 0x8FB03D4A, 0xE6E39F2B, 0xDB83ADF7 }; static const uint32_t ks2[256] = { 0xE93D5A68, 0x948140F7, 0xF64C261C, 0x94692934, 0x411520F7, 0x7602D4F7, 0xBCF46B2E, 0xD4A20068, 0xD4082471, 0x3320F46A, 0x43B7D4B7, 0x500061AF, 0x1E39F62E, 0x97244546, 0x14214F74, 0xBF8B8840, 0x4D95FC1D, 0x96B591AF, 0x70F4DDD3, 0x66A02F45, 0xBFBC09EC, 0x03BD9785, 0x7FAC6DD0, 0x31CB8504, 0x96EB27B3, 0x55FD3941, 0xDA2547E6, 0xABCA0A9A, 0x28507825, 0x530429F4, 0x0A2C86DA, 0xE9B66DFB, 0x68DC1462, 0xD7486900, 0x680EC0A4, 0x27A18DEE, 0x4F3FFEA2, 0xE887AD8C, 0xB58CE006, 0x7AF4D6B6, 0xAACE1E7C, 0xD3375FEC, 0xCE78A399, 0x406B2A42, 0x20FE9E35, 0xD9F385B9, 0xEE39D7AB, 0x3B124E8B, 0x1DC9FAF7, 0x4B6D1856, 0x26A36631, 0xEAE397B2, 0x3A6EFA74, 0xDD5B4332, 0x6841E7F7, 0xCA7820FB, 0xFB0AF54E, 0xD8FEB397, 0x454056AC, 0xBA489527, 0x55533A3A, 0x20838D87, 0xFE6BA9B7, 0xD096954B, 0x55A867BC, 0xA1159A58, 0xCCA92963, 0x99E1DB33, 0xA62A4A56, 0x3F3125F9, 0x5EF47E1C, 0x9029317C, 0xFDF8E802, 0x04272F70, 0x80BB155C, 0x05282CE3, 0x95C11548, 0xE4C66D22, 0x48C1133F, 0xC70F86DC, 0x07F9C9EE, 0x41041F0F, 0x404779A4, 0x5D886E17, 0x325F51EB, 0xD59BC0D1, 0xF2BCC18F, 0x41113564, 0x257B7834, 0x602A9C60, 0xDFF8E8A3, 0x1F636C1B, 0x0E12B4C2, 0x02E1329E, 0xAF664FD1, 0xCAD18115, 0x6B2395E0, 0x333E92E1, 0x3B240B62, 0xEEBEB922, 0x85B2A20E, 0xE6BA0D99, 0xDE720C8C, 0x2DA2F728, 0xD0127845, 0x95B794FD, 0x647D0862, 0xE7CCF5F0, 0x5449A36F, 0x877D48FA, 0xC39DFD27, 0xF33E8D1E, 0x0A476341, 0x992EFF74, 0x3A6F6EAB, 0xF4F8FD37, 0xA812DC60, 0xA1EBDDF8, 0x991BE14C, 0xDB6E6B0D, 0xC67B5510, 0x6D672C37, 0x2765D43B, 0xDCD0E804, 0xF1290DC7, 0xCC00FFA3, 0xB5390F92, 0x690FED0B, 0x667B9FFB, 0xCEDB7D9C, 0xA091CF0B, 0xD9155EA3, 0xBB132F88, 0x515BAD24, 0x7B9479BF, 0x763BD6EB, 0x37392EB3, 0xCC115979, 0x8026E297, 0xF42E312D, 0x6842ADA7, 0xC66A2B3B, 0x12754CCC, 0x782EF11C, 0x6A124237, 0xB79251E7, 0x06A1BBE6, 0x4BFB6350, 0x1A6B1018, 0x11CAEDFA, 0x3D25BDD8, 0xE2E1C3C9, 0x44421659, 0x0A121386, 0xD90CEC6E, 0xD5ABEA2A, 0x64AF674E, 0xDA86A85F, 0xBEBFE988, 0x64E4C3FE, 0x9DBC8057, 0xF0F7C086, 0x60787BF8, 0x6003604D, 0xD1FD8346, 0xF6381FB0, 0x7745AE04, 0xD736FCCC, 0x83426B33, 0xF01EAB71, 0xB0804187, 0x3C005E5F, 0x77A057BE, 0xBDE8AE24, 0x55464299, 0xBF582E61, 0x4E58F48F, 0xF2DDFDA2, 0xF474EF38, 0x8789BDC2, 0x5366F9C3, 0xC8B38E74, 0xB475F255, 0x46FCD9B9, 0x7AEB2661, 0x8B1DDF84, 0x846A0E79, 0x915F95E2, 0x466E598E, 0x20B45770, 0x8CD55591, 0xC902DE4C, 0xB90BACE1, 0xBB8205D0, 0x11A86248, 0x7574A99E, 0xB77F19B6, 0xE0A9DC09, 0x662D09A1, 0xC4324633, 0xE85A1F02, 0x09F0BE8C, 0x4A99A025, 0x1D6EFE10, 0x1AB93D1D, 0x0BA5A4DF, 0xA186F20F, 0x2868F169, 0xDCB7DA83, 0x573906FE, 0xA1E2CE9B, 0x4FCD7F52, 0x50115E01, 0xA70683FA, 0xA002B5C4, 0x0DE6D027, 0x9AF88C27, 0x773F8641, 0xC3604C06, 0x61A806B5, 0xF0177A28, 0xC0F586E0, 0x006058AA, 0x30DC7D62, 0x11E69ED7, 0x2338EA63, 0x53C2DD94, 0xC2C21634, 0xBBCBEE56, 0x90BCB6DE, 0xEBFC7DA1, 0xCE591D76, 0x6F05E409, 0x4B7C0188, 0x39720A3D, 0x7C927C24, 0x86E3725F, 0x724D9DB9, 0x1AC15BB4, 0xD39EB8FC, 0xED545578, 0x08FCA5B5, 0xD83D7CD3, 0x4DAD0FC4, 0x1E50EF5E, 0xB161E6F8, 0xA28514D9, 0x6C51133C, 0x6FD5C7E7, 0x56E14EC4, 0x362ABFCE, 0xDDC6C837, 0xD79A3234, 0x92638212, 0x670EFA8E, 0x406000E0 }; static const uint32_t ks3[256] = { 0x3A39CE37, 0xD3FAF5CF, 0xABC27737, 0x5AC52D1B, 0x5CB0679E, 0x4FA33742, 0xD3822740, 0x99BC9BBE, 0xD5118E9D, 0xBF0F7315, 0xD62D1C7E, 0xC700C47B, 0xB78C1B6B, 0x21A19045, 0xB26EB1BE, 0x6A366EB4, 0x5748AB2F, 0xBC946E79, 0xC6A376D2, 0x6549C2C8, 0x530FF8EE, 0x468DDE7D, 0xD5730A1D, 0x4CD04DC6, 0x2939BBDB, 0xA9BA4650, 0xAC9526E8, 0xBE5EE304, 0xA1FAD5F0, 0x6A2D519A, 0x63EF8CE2, 0x9A86EE22, 0xC089C2B8, 0x43242EF6, 0xA51E03AA, 0x9CF2D0A4, 0x83C061BA, 0x9BE96A4D, 0x8FE51550, 0xBA645BD6, 0x2826A2F9, 0xA73A3AE1, 0x4BA99586, 0xEF5562E9, 0xC72FEFD3, 0xF752F7DA, 0x3F046F69, 0x77FA0A59, 0x80E4A915, 0x87B08601, 0x9B09E6AD, 0x3B3EE593, 0xE990FD5A, 0x9E34D797, 0x2CF0B7D9, 0x022B8B51, 0x96D5AC3A, 0x017DA67D, 0xD1CF3ED6, 0x7C7D2D28, 0x1F9F25CF, 0xADF2B89B, 0x5AD6B472, 0x5A88F54C, 0xE029AC71, 0xE019A5E6, 0x47B0ACFD, 0xED93FA9B, 0xE8D3C48D, 0x283B57CC, 0xF8D56629, 0x79132E28, 0x785F0191, 0xED756055, 0xF7960E44, 0xE3D35E8C, 0x15056DD4, 0x88F46DBA, 0x03A16125, 0x0564F0BD, 0xC3EB9E15, 0x3C9057A2, 0x97271AEC, 0xA93A072A, 0x1B3F6D9B, 0x1E6321F5, 0xF59C66FB, 0x26DCF319, 0x7533D928, 0xB155FDF5, 0x03563482, 0x8ABA3CBB, 0x28517711, 0xC20AD9F8, 0xABCC5167, 0xCCAD925F, 0x4DE81751, 0x3830DC8E, 0x379D5862, 0x9320F991, 0xEA7A90C2, 0xFB3E7BCE, 0x5121CE64, 0x774FBE32, 0xA8B6E37E, 0xC3293D46, 0x48DE5369, 0x6413E680, 0xA2AE0810, 0xDD6DB224, 0x69852DFD, 0x09072166, 0xB39A460A, 0x6445C0DD, 0x586CDECF, 0x1C20C8AE, 0x5BBEF7DD, 0x1B588D40, 0xCCD2017F, 0x6BB4E3BB, 0xDDA26A7E, 0x3A59FF45, 0x3E350A44, 0xBCB4CDD5, 0x72EACEA8, 0xFA6484BB, 0x8D6612AE, 0xBF3C6F47, 0xD29BE463, 0x542F5D9E, 0xAEC2771B, 0xF64E6370, 0x740E0D8D, 0xE75B1357, 0xF8721671, 0xAF537D5D, 0x4040CB08, 0x4EB4E2CC, 0x34D2466A, 0x0115AF84, 0xE1B00428, 0x95983A1D, 0x06B89FB4, 0xCE6EA048, 0x6F3F3B82, 0x3520AB82, 0x011A1D4B, 0x277227F8, 0x611560B1, 0xE7933FDC, 0xBB3A792B, 0x344525BD, 0xA08839E1, 0x51CE794B, 0x2F32C9B7, 0xA01FBAC9, 0xE01CC87E, 0xBCC7D1F6, 0xCF0111C3, 0xA1E8AAC7, 0x1A908749, 0xD44FBD9A, 0xD0DADECB, 0xD50ADA38, 0x0339C32A, 0xC6913667, 0x8DF9317C, 0xE0B12B4F, 0xF79E59B7, 0x43F5BB3A, 0xF2D519FF, 0x27D9459C, 0xBF97222C, 0x15E6FC2A, 0x0F91FC71, 0x9B941525, 0xFAE59361, 0xCEB69CEB, 0xC2A86459, 0x12BAA8D1, 0xB6C1075E, 0xE3056A0C, 0x10D25065, 0xCB03A442, 0xE0EC6E0E, 0x1698DB3B, 0x4C98A0BE, 0x3278E964, 0x9F1F9532, 0xE0D392DF, 0xD3A0342B, 0x8971F21E, 0x1B0A7441, 0x4BA3348C, 0xC5BE7120, 0xC37632D8, 0xDF359F8D, 0x9B992F2E, 0xE60B6F47, 0x0FE3F11D, 0xE54CDA54, 0x1EDAD891, 0xCE6279CF, 0xCD3E7E6F, 0x1618B166, 0xFD2C1D05, 0x848FD2C5, 0xF6FB2299, 0xF523F357, 0xA6327623, 0x93A83531, 0x56CCCD02, 0xACF08162, 0x5A75EBB5, 0x6E163697, 0x88D273CC, 0xDE966292, 0x81B949D0, 0x4C50901B, 0x71C65614, 0xE6C6C7BD, 0x327A140A, 0x45E1D006, 0xC3F27B9A, 0xC9AA53FD, 0x62A80F00, 0xBB25BFE2, 0x35BDD2F6, 0x71126905, 0xB2040222, 0xB6CBCF7C, 0xCD769C2B, 0x53113EC0, 0x1640E3D3, 0x38ABBD60, 0x2547ADF0, 0xBA38209C, 0xF746CE76, 0x77AFA1C5, 0x20756060, 0x85CBFE4E, 0x8AE88DD8, 0x7AAAF9B0, 0x4CF9AA7E, 0x1948C25C, 0x02FB8A8C, 0x01C36AE4, 0xD6EBE1F9, 0x90D4F869, 0xA65CDEA0, 0x3F09252D, 0xC208E69F, 0xB74E6132, 0xCE77E25B, 0x578FDFE3, 0x3AC372E6 }; static const uint32_t ps[_BLOWFISH_ROUNDS + 2] = { 0x243F6A88, 0x85A308D3, 0x13198A2E, 0x03707344, 0xA4093822, 0x299F31D0, 0x082EFA98, 0xEC4E6C89, 0x452821E6, 0x38D01377, 0xBE5466CF, 0x34E90C6C, 0xC0AC29B7, 0xC97C50DD, 0x3F84D5B5, 0xB5470917, 0x9216D5D9, 0x8979FB1B }; #ifdef WORDS_BIGENDIAN #define F(x) ((( s0[((uint8_t*)&x)[0]] + s1[((uint8_t*)&x)[1]]) \ ^ s2[((uint8_t*)&x)[2]]) + s3[((uint8_t*)&x)[3]] ) #else #define F(x) ((( s0[((uint8_t*)&x)[3]] + s1[((uint8_t*)&x)[2]]) \ ^ s2[((uint8_t*)&x)[1]]) + s3[((uint8_t*)&x)[0]] ) #endif #define R(l,r,i) do { l ^= p[i]; r ^= F(l); } while(0) static void do_encrypt (const struct blowfish_ctx *ctx, uint32_t * ret_xl, uint32_t * ret_xr) { uint32_t xl, xr; const uint32_t *s0, *s1, *s2, *s3, *p; xl = *ret_xl; xr = *ret_xr; p = ctx->p; s0 = ctx->s[0]; s1 = ctx->s[1]; s2 = ctx->s[2]; s3 = ctx->s[3]; R (xl, xr, 0); R (xr, xl, 1); R (xl, xr, 2); R (xr, xl, 3); R (xl, xr, 4); R (xr, xl, 5); R (xl, xr, 6); R (xr, xl, 7); R (xl, xr, 8); R (xr, xl, 9); R (xl, xr, 10); R (xr, xl, 11); R (xl, xr, 12); R (xr, xl, 13); R (xl, xr, 14); R (xr, xl, 15); xl ^= p[_BLOWFISH_ROUNDS]; xr ^= p[_BLOWFISH_ROUNDS + 1]; *ret_xl = xr; *ret_xr = xl; } static void decrypt (const struct blowfish_ctx *ctx, uint32_t * ret_xl, uint32_t * ret_xr) { uint32_t xl, xr; const uint32_t *s0, *s1, *s2, *s3, *p; xl = *ret_xl; xr = *ret_xr; p = ctx->p; s0 = ctx->s[0]; s1 = ctx->s[1]; s2 = ctx->s[2]; s3 = ctx->s[3]; R (xl, xr, 17); R (xr, xl, 16); R (xl, xr, 15); R (xr, xl, 14); R (xl, xr, 13); R (xr, xl, 12); R (xl, xr, 11); R (xr, xl, 10); R (xl, xr, 9); R (xr, xl, 8); R (xl, xr, 7); R (xr, xl, 6); R (xl, xr, 5); R (xr, xl, 4); R (xl, xr, 3); R (xr, xl, 2); xl ^= p[1]; xr ^= p[0]; *ret_xl = xr; *ret_xr = xl; } #undef F #undef R void blowfish_encrypt (const struct blowfish_ctx *ctx, unsigned length, uint8_t * dst, const uint8_t * src) { FOR_BLOCKS (length, dst, src, BLOWFISH_BLOCK_SIZE) { uint32_t d1, d2; d1 = src[0] << 24 | src[1] << 16 | src[2] << 8 | src[3]; d2 = src[4] << 24 | src[5] << 16 | src[6] << 8 | src[7]; do_encrypt (ctx, &d1, &d2); dst[0] = (d1 >> 24) & 0xff; dst[1] = (d1 >> 16) & 0xff; dst[2] = (d1 >> 8) & 0xff; dst[3] = d1 & 0xff; dst[4] = (d2 >> 24) & 0xff; dst[5] = (d2 >> 16) & 0xff; dst[6] = (d2 >> 8) & 0xff; dst[7] = d2 & 0xff; } } void blowfish_decrypt (const struct blowfish_ctx *ctx, unsigned length, uint8_t * dst, const uint8_t * src) { FOR_BLOCKS (length, dst, src, BLOWFISH_BLOCK_SIZE) { uint32_t d1, d2; d1 = src[0] << 24 | src[1] << 16 | src[2] << 8 | src[3]; d2 = src[4] << 24 | src[5] << 16 | src[6] << 8 | src[7]; decrypt (ctx, &d1, &d2); dst[0] = (d1 >> 24) & 0xff; dst[1] = (d1 >> 16) & 0xff; dst[2] = (d1 >> 8) & 0xff; dst[3] = d1 & 0xff; dst[4] = (d2 >> 24) & 0xff; dst[5] = (d2 >> 16) & 0xff; dst[6] = (d2 >> 8) & 0xff; dst[7] = d2 & 0xff; } } int blowfish_set_key (struct blowfish_ctx *ctx, unsigned length, const uint8_t * key) { int i, j; uint32_t data, datal, datar; for (i = 0; i < _BLOWFISH_ROUNDS + 2; i++) ctx->p[i] = ps[i]; for (i = 0; i < 256; i++) { ctx->s[0][i] = ks0[i]; ctx->s[1][i] = ks1[i]; ctx->s[2][i] = ks2[i]; ctx->s[3][i] = ks3[i]; } for (i = j = 0; i < _BLOWFISH_ROUNDS + 2; i++) { #ifdef WORDS_BIGENDIAN ((uint8_t *) & data)[0] = key[j]; ((uint8_t *) & data)[1] = key[(j + 1) % length]; ((uint8_t *) & data)[2] = key[(j + 2) % length]; ((uint8_t *) & data)[3] = key[(j + 3) % length]; #else ((uint8_t *) & data)[3] = key[j]; ((uint8_t *) & data)[2] = key[(j + 1) % length]; ((uint8_t *) & data)[1] = key[(j + 2) % length]; ((uint8_t *) & data)[0] = key[(j + 3) % length]; #endif ctx->p[i] ^= data; j = (j + 4) % length; } datal = datar = 0; for (i = 0; i < _BLOWFISH_ROUNDS + 2; i += 2) { do_encrypt (ctx, &datal, &datar); ctx->p[i] = datal; ctx->p[i + 1] = datar; } for (i = 0; i < 256; i += 2) { do_encrypt (ctx, &datal, &datar); ctx->s[0][i] = datal; ctx->s[0][i + 1] = datar; } for (i = 0; i < 256; i += 2) { do_encrypt (ctx, &datal, &datar); ctx->s[1][i] = datal; ctx->s[1][i + 1] = datar; } for (i = 0; i < 256; i += 2) { do_encrypt (ctx, &datal, &datar); ctx->s[2][i] = datal; ctx->s[2][i + 1] = datar; } for (i = 0; i < 256; i += 2) { do_encrypt (ctx, &datal, &datar); ctx->s[3][i] = datal; ctx->s[3][i + 1] = datar; } /* Check for weak key. A weak key is a key in which a value in the P-array (here c) occurs more than once per table. */ for (i = 0; i < 255; i++) { for (j = i + 1; j < 256; j++) { if ((ctx->s[0][i] == ctx->s[0][j]) || (ctx->s[1][i] == ctx->s[1][j]) || (ctx->s[2][i] == ctx->s[2][j]) || (ctx->s[3][i] == ctx->s[3][j])) return 0; } } return 1; }

2 3

Re: RSA/DSA - Save and Load key
by nisse＠lysator.liu.se 25 Nov '10

25 Nov '10

[ Repost from an off-list discussion, since this may be of more general interest. /Niels ] Jeffrey Walton <noloader(a)gmail.com> writes: > I did not see rsa_public_key_save, rsa_public_key_load, > rsa_private_key_save, and rsa_private_key_load. How does one save and > or load a public or private key? That depends on which keyformat you want. The most general (and most primitive) way is to access the bignums in the public and private key structs directly, using functions like mpz_set_str/mpz_get_str or mpz_import/mpz_export. Don't forget to call rsa_public_key_prepare and rsa_private_key_prepare after setting these fields. There are some helper functions, rsa_keypair_to_sexp and rsa_keypair_from_sexp for conversion to and from spki/sexp format. And there's rsa_keypair_from_der for reading keys in pkcs#1 format (but appearantly none for the other direction). These functions are unfortunately all undocumented, which is due in part to lazyness, in part to the fact that I'm not sure the interfaces are right (although for these particular functions, I see nothing obviously wrong, except perhaps the names). There are at least some examples, examples/rsa-keygen.c calls rsa_keypair_to_sexp, examples/read_rsa_key.c calls rsa_keypair_from_sexp, and tools/pkcs1-conv.c calls rsa_keypair_from_der. Regards, /Niels -- Niels Möller. PGP-encrypted email is preferred. Keyid C0B98E26. Internet email is subject to wholesale government surveillance.

1 0

Re: DES
by nisse＠lysator.liu.se 24 Nov '10

24 Nov '10

Simon Josefsson <simon(a)josefsson.org> writes: > I wrote a DES implementation a long time ago, [...] but if there are > license concerns with the current one, it could be an alternative. The code by Dana L. How is licensed as LGPL version 2 (or later). I don't think there's license problem (see descore.README in the nettle dist). That's one of the nice features with free software: that the code comes with a license which let you use and redistribute it, without any requirement to first get in contact with the author. But I expect that if one decided to try to get a copyright assignment for the current DES code, that would be a bit difficult. Regards, /Niels -- Niels Möller. PGP-encrypted email is preferred. Keyid C0B98E26. Internet email is subject to wholesale government surveillance.

1 0

web page bug
by Simon Josefsson 21 Oct '10

21 Oct '10

The web page says: descend into the src/nettle directory for a standard ./configure && make there. I guess it should be: descend into the nettle directory for a standard ./configure && make there. Thanks, Simon

2 1

Configuration and MinGW-w64 Compatibility
by Hoyt, David 24 Sep '10

24 Sep '10

Hello, I'm preparing for future gnutls integration which says in the next stable release, it'll be using nettle by default. I'm working on Windows builds and the 2.1 release has several problems. I'm not entirely familiar with the autotools, so I don't know exactly where the problem lies - but it generates shared library names in the unix/linux style (e.g. libnettle.so.4) instead of Windows-style: libnettle-4.dll. I can simply rename the dll and it'll work, but it's a pain and not in line with most other open source projects. Also, when I use --enabled-shared --disable-static, my configure options are not respected. That is, it builds a static lib as well as the (incorrectly named) shared library. A .dll.a lib file is not created. When I use typical configure options such as --prefix= --libexecdir= --bindir= --libdir= --includedir=, they're not honored. e.g. I specified a different bindir for the shared libs, yet they still ended up in the --libdir directory. This may result from the use of an older autotools/libtool setup, but I'm unsure. I'm building natively using GCC 4.5.1 (x86, 32-bit) from the MinGW-w64 folks on Windows 7 64-bit. Thanks, - David Hoyt

2 5

Patch for configure.ac
by Hoyt, David 17 Sep '10

17 Sep '10

I tried to send the following w/ an attachment, but it got bounced. So here it is w/ the attachment inlined: The attached patch for configure.ac allowed for a normal compile w/ mingw-w64 w/ --enabled-shared. It's really only a stopgap since you would need to do something more intelligent when you detect --enable-shared and then dynamically adjust hogweed's link options. Do you think it would be possible to add libtool and pkg-config support? Thanks, - David Hoyt --- configure.ac Sun Jul 25 12:30:13 2010 +++ configure.ac Thu Sep 16 12:48:51 2010 @@ -233,6 +233,19 @@ SHLIBCFLAGS="$CCPIC" case "$host_os" in + mingw32*) + LIBNETTLE_FORLINK='libnettle-$(LIBNETTLE_MAJOR)-$(LIBNETTLE_MINOR).dll' + LIBNETTLE_SONAME='' + LIBNETTLE_FILE='libnettle.dll.a' + LIBNETTLE_LINK='$(CC) $(LDFLAGS) -shared -Wl,--out-implib=$(LIBNETTLE_FILE) -Wl,--export-all-symbols -Wl,--enable-auto-import -Wl,--whole-archive' + LIBNETTLE_LIBS='-Wl,--no-whole-archive $(LIBS)' + + LIBHOGWEED_FORLINK='libhogweed-$(LIBHOGWEED_MAJOR)-$(LIBHOGWEED_MINOR).dll' + LIBHOGWEED_SONAME='' + LIBHOGWEED_FILE='libhogweed.dll.a' + LIBHOGWEED_LINK='$(CC) $(LDFLAGS) -shared -Wl,--out-implib=$(LIBHOGWEED_FILE) -Wl,--export-all-symbols -Wl,--enable-auto-import -Wl,--whole-archive' + LIBHOGWEED_LIBS='-Wl,--no-whole-archive $(LIBS) libnettle.dll.a' + ;; cygwin*) LIBNETTLE_FORLINK='cygnettle-$(LIBNETTLE_MAJOR)-$(LIBNETTLE_MINOR).dll' LIBNETTLE_SONAME=''

2 4

LGPL Configuration
by Hoyt, David 17 Sep '10

17 Sep '10

As a feature request, it'd be useful to have an additional configure flag "--enable-gpl" like the FFmpeg folks use that allows GPL algorithms to be built. Otherwise, by default, LGPL algorithms/code only is allowed in shared libraries. Right now I have to play around with makefiles to remove GPL-only algorithms (as per the included manual) such as serpent and blowfish. Thanks, - David Hoyt

2 2

Hogweed and Nettle Dependencies
by Hoyt, David 17 Sep '10

17 Sep '10

Should libhogweed have a dependency on libnettle if I'm compiling each as shared libraries? Or should I be linking against nettle's static library and thus have duplicate functions in each? Thanks, - David Hoyt

3 3

ANNOUNCE: Nettle-2.1
by nisse＠lysator.liu.se 31 Jul '10

31 Jul '10

I'm happy to announce a new version of GNU Nettle, a low-level cryptographic library. NEWS for the 2.1 release *Important*: this release breaks source and binary compatibility for the digital signature functions, and for the DES and BLOWFISH ciphers which have weak keys. Incompatible changes: * The functions rsa_md5_sign, rsa_sha1_sign and rsa_sha256_sign, and the corresponding _digest variants, now have a return value which callers should check. The functions return failure if the key is too small for the type of signature. * The functions dsa_sign and dsa_verify are renamed to dsa_sha1_sign and dsa_sha1_verify. The _-digest variants are renamed similarly. These functions now have a return value which callers should check, and they return failure if the number q is not of the appropriate size. * The return value from des_set_key, des3_set_key and blowfish_set_key now indicates whether or not the given key is weak. But in either case, the key setup is done, and applications that don't care about weak keys can ignore the return value. The incompatible part of this change is that enum des_error and enum blowfish_error has been deleted, and so has the status attribute in struct des_ctx, struct des3_ctx, and struct blowfish_ctx. The shared library names are libnettle.so.4.0 and libhogweed.so.2.0, with sonames libnettle.so.4 and libhogweed.so.2. Other changes: * Support for the Camellia block cipher, including an assembler implementation for x86_32. * New function aes_invert_key, useful for applications that need both encryption and decryption using the same AES key. * des_set_key and des3_set_key no longer check the key parity bits. Parity bits are silently ignored. A new function des_check_parity is provided, for applications that care about the DES parity bits. * Support for sha224, sha384 and sha512. * Support for digital signatures using rsa-sha512 and dsa-sha256. Due to lack of official test vectors and interop testing, this support should be considered somewhat experimental. * Key generation for RSA and DSA changed to use Maurer's algorithm to generate provably prime numbers (as usual, the mathematical proof does not guaranteee that the implementation is bug free). * x86_64 assembler implementation actually included in the distribution (was accidentally left out in nettle-2.0). * Configure script now detects if the compiler uses a 32-bit or 64-bit ABI on x86_64 (prevously did this for sparc only). Also sets the default location for installing libraries (libdir) depending on system type and the ABI used. * Added the nettle and gmp libraries as dependencies when linking shared library libhogweed.so. On systems using shared libraries where such dependencies work (in particular, ELF systems), it is sufficient to link applications with -lhogweed. For static linking -lhogweed -lnettle -lgmp is still required. * The program pkcs1-conv is extended to also handle dsa keys. Contributed by Magnus Holmgren. * Slightly improved sha1 performance on x86. Available at http://www.lysator.liu.se/~nisse/archive/nettle-2.1.tar.gz ftp://ftp.lysator.liu.se/pub/security/lsh/nettle-2.1.tar.gz -- Niels Möller. PGP-encrypted email is preferred. Keyid C0B98E26. Internet email is subject to wholesale government surveillance.

1 0

plans for other SHA-2 digests?
by Daniel Kahn Gillmor 26 Mar '10

26 Mar '10

Hi Nettle folks-- >From the documentation i could find, it looks like the strongest digest libnettle supports is SHA256. Are there plans to add support for SHA512 or other members of the SHA-2 family? (i suppose the same question holds for the primitives in libhogweed that include a digest operation, such as RSA signing) Thanks for offering this tool, --dkg PS i tried to send this message earlier, PGP/MIME-signed, but it appears to have been bounced from the mailing list with a message of: The message's content type was not explicitly allowed My resend here is unsigned, but it would be nice to be able to send signed mails to the list!

2 9

RSA-SHA512 interface problem
by nisse＠lysator.liu.se 24 Mar '10

24 Mar '10

I just realized that supporting RSA with SHA-512 leads to an interface problem. For RSA keys to work with PKCS#1 signatures, the modulo n has to be large enough. Up to now, I have used two defines, RSA_MINIMUM_N_OCTETS and RSA_MINIMUM_N_BITS, which are determined so that pkcs#1 works with *all* supported hash function. The rsa_public_key_prepare and rsa_private_key_prepare functions check that n is large enough and returns a success/failure value. Then no other rsa functions are expected to ever fail due to n being too small. With sha256, the minimum was 62 octets or 489 bits. But for sha512, the minimum is 94 octets or 745 bits. So if I just bump the RSA_MINIMUM_N_* accordingly, support for 512 bits RSA keys disappears. (And for comparison, with md5, the minimum is 353 bits). I really hope noone still uses 512 bit RSA for anything important, but I nevertheless don't think it's appropriate to just drop support for it. Some applications may have modest security requirements where small keys are somehow appropriate, and then there are legacy applications and old keys. It should still be *possible* to verify signatures made many years ago, using 512-bit RSA, even though they can no longer be considered very secure. I haven't figured out yet how I want to handle this, and I see no solution without its own problems. Some alternatives: * Discontinue the RSA_MINIMUM_N_*, or use some reasonable value which isn't large enough for rsa-sha512. Let signature functions abort if they encounter a too small key. Possibly define new hash-specific constants, RSA_<hash>_MINIMUM_N_BITS or so. * Add some argument to the rsa_*_key_prepare functions to say what the key is to be used for, so that it can check if the key is large enough. I don't quite like this; it's against the spirit of the rest of the Nettle interface. * Introduce a return value for the signing functions, to let them return a success/failure indication. This is analogous to the rsa_encrypt function, which checks if the key size is large enough for the current message size. If we do this, is the return value from the rsa_*_key_prepare functions still useful? I think it's less of a problem with public key operations, since signature verification and rsa decryption have a return value and for too small keys they can easily return fail for all messages. The problem is the signing functions. No matter how the problem is solved, it will break backwards compatibility in some way. Suggestions? Regards, /Niels -- Niels Möller. PGP-encrypted email is preferred. Keyid C0B98E26. Internet email is subject to wholesale government surveillance.

2 2

nettle bindings for higher-level languages
by Daniel Kahn Gillmor 23 Mar '10

23 Mar '10

I was wondering if there is a catalog somewhere of bindings that exist for nettle for higher-level languages. in particular, i'm interested in perl and python, but i'd be curious to know about the status of other languages as well. Is this documented somewhere? Is there a list of higher-level languages that the nettle author(s) would like to see prioritized? Regards, --dkg

2 2

GNU Nettle cryptographic library
by nisse＠lysator.liu.se 30 Jun '09

30 Jun '09

Nettle-2.0 was released June 8. Since then, Nettle has been dubbed a GNU package, and I'm therefore reannouncing this release here. The original announcement is included below. Future releases will be distributed at ftp.gnu.org, but unfortunately, I haven't been able to set that up before summer vacations (and I leave my signing keys at home). What is Nettle? A quote from the introduction in the Nettle Manual: Nettle is a cryptographic library that is designed to fit easily in more or less any context: In crypto toolkits for object-oriented languages (C++, Python, Pike, ...), in applications like LSH or GNUPG, or even in kernel space. In most contexts, you need more than the basic cryptographic algorithms, you also need some way to keep track of available algorithms, their properties and variants. You often have some algorithm selection process, often dictated by a protocol you want to implement. And as the requirements of applications differ in subtle and not so subtle ways, an API that fits one application well can be a pain to use in a different context. And that is why there are so many different cryptographic libraries around. Nettle tries to avoid this problem by doing one thing, the low-level crypto stuff, and providing a simple but general interface to it. In particular, Nettle doesn't do algorithm selection. It doesn't do memory allocation. It doesn't do any I/O. The idea is that one can build several application and context specific interfaces on top of Nettle, and share the code, test cases, benchmarks, documentation, etc. Examples are the Nettle module for the Pike language, and LSH, which both use an object-oriented abstraction on top of the library. Nettle is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation. See the file COPYING for details. Most, but not all, of Nettle can also be used under the terms of the GNU Lesser General Public License; please read the Copyright section of the manual if you want to exercise this option. The Nettle home page is http://www.lysator.liu.se/~nisse/nettle/. Happy hacking, /Niels Möller Original announcement: NEWS for the 2.0 release This release breaks binary compatibility by splitting the library into two. Some other smaller changes that are not backwards compatible are also done at the same time. * The nettle library is split into two libraries, libnettle and libhogweed. libnettle contains the symmetric crypto algorithms that don't depend on GMP, while libhogweed contains the public key algorithms that depend on GMP. Using a single library worked fine with static linking, but not with dynamic linking. Consider an application that uses nettle and which doesn't use any public key cryptography. If this application is linked dynamically to nettle, it would have to be linked also with GMP if and only if public key support was enabled when the nettle library was installed. The library names are libnettle.so.3.0 and libhogweed.so.1.0, with sonames libnettle.so.3 and libhogweed.so.1. * Function typedefs have been changed to non-pointer types. E.g, the typedef void (nettle_hash_init_func *)(void *ctx); of previous versions is replaced by typedef void (nettle_hash_init_func)(void *ctx); This makes it possible to use the type when declaring functions, like nettle_hash_init_func foo_hash_init; void foo_hash_init(void *ctx) { ... } * Changes to the yarrow256 interface. The automatic seed file generation, and the seed_file member in struct yarrow256_ctx, has been removed. To generate a new seed file, use yarrow256_random. The function yarrow256_force_reseed has been replaced by the two functions yarrow256_fast_reseed and yarrow256_slow_reseed, which were previously static. This interface change makes it easier to mix in the current content of the seed file before overwriting it with newly generated data. Other changes: * Nettle manual now contributed to the public domain, to enable remixing into documentation of programs that use Nettle. * The sexp-conv program preserves comments when using the advanced syntax for output. Optionally locks the output file. * The base64 decoder recognizes ASCII FF (form feed) and VT (vertical tab) as white space. * New x86_64 implementations of AES and SHA1. On a 2.2 GHz opteron, SHA1 was benchmarked at 250 MByte/s, and AES-128 at 110 MByte/s. * Performance of AES increased by 20-30% on x86. * New programs in the examples directory: erathostenes and next-prime. Available at http://www.lysator.liu.se/~nisse/archive/nettle-2.0.tar.gz ftp://ftp.lysator.liu.se/pub/security/lsh/nettle-2.0.tar.gz as usual. Regards, /Niels

1 0

セフレ急募です！！私達は社宅住まいの仲良し奥様５人組みです。
by ★最新メール★ 11 Jun '09

11 Jun '09

シン様 http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ご利用いただき誠にありがとうございます。社宅奥様５人組みさんより、新着メッセージが届いています。 ★一言コメント『セフレ急募です！！私達は社宅住まいの仲良し奥様５人組みです。』全文確認⇒返信は↓ http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ------------------------------ 他の女性を探される場合はこちら http://hero-ine.net/w/login.asp?um=nettle-bugs%40lists.lysator.liu.se

1 0

やはりこういったサイトでは金額を明確にするお誘いが普通なんでしょうか？50万で納得してもらえますか？
by ★最新メール★ 11 Jun '09

11 Jun '09

シン様 http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ご利用いただき誠にありがとうございます。理恵さんより、新着メッセージが届いています。 ★一言コメント『やはりこういったサイトでは金額を明確にするお誘いが普通なんでしょうか？50万で納得してもらえますか？』全文確認⇒返信は↓ http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ------------------------------ 他の女性を探される場合はこちら http://hero-ine.net/w/login.asp?um=nettle-bugs%40lists.lysator.liu.se

1 0

シン様だけに絞ってお誘いします。詳細をこの一通に凝縮しました。総合病院勤務、看護部長の鈴木茜です。
by ★最新メール★ 11 Jun '09

11 Jun '09

シン様 http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ご利用いただき誠にありがとうございます。鈴木茜、看護部長55歳さんより、新着メッセージが届いています。 ★一言コメント『シン様だけに絞ってお誘いします。詳細をこの一通に凝縮しました。総合病院勤務、看護部長の鈴木茜です。』全文確認⇒返信は↓ http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ------------------------------ 他の女性を探される場合はこちら http://hero-ine.net/w/login.asp?um=nettle-bugs%40lists.lysator.liu.se

1 0

来週の頭から主人が海外出張の為時間の融通は利きます。月末まで帰ってこないので、焦る必要もないですし、
by ★最新メール★ 11 Jun '09

11 Jun '09

シン様 http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ご利用いただき誠にありがとうございます。理恵さんより、新着メッセージが届いています。 ★一言コメント『来週の頭から主人が海外出張の為時間の融通は利きます。月末まで帰ってこないので、焦る必要もないですし、』全文確認⇒返信は↓ http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ------------------------------ 他の女性を探される場合はこちら http://hero-ine.net/w/login.asp?um=nettle-bugs%40lists.lysator.liu.se

1 0

秘密逆援割切りのお付き合い希望の55歳です。シンさんが興味が有ればメールを読んで下さい。
by ★最新メール★ 11 Jun '09

11 Jun '09

シン様 http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ご利用いただき誠にありがとうございます。喜世子さんより、新着メッセージが届いています。 ★一言コメント『秘密逆援割切りのお付き合い希望の55歳です。シンさんが興味が有ればメールを読んで下さい。』全文確認⇒返信は↓ http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ------------------------------ 他の女性を探される場合はこちら http://hero-ine.net/w/login.asp?um=nettle-bugs%40lists.lysator.liu.se

1 0

オナニーしてる写真自分で撮ってみました。鏡で写して撮ったんで解りにくいかもしれませんが見てくださいね
by ★最新メール★ 10 Jun '09

10 Jun '09

シン様 http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ご利用いただき誠にありがとうございます。倫子さんより、新着メッセージが届いています。 ★一言コメント『オナニーしてる写真自分で撮ってみました。鏡で写して撮ったんで解りにくいかもしれませんが見てくださいね』全文確認⇒返信は↓ http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ------------------------------ 他の女性を探される場合はこちら http://hero-ine.net/w/login.asp?um=nettle-bugs%40lists.lysator.liu.se

1 0

あのシンさんだよね？私だよ私。約束の物まだとってあるから、渡したい。そしてホテルで
by ★最新メール★ 10 Jun '09

10 Jun '09

シン様 http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ご利用いただき誠にありがとうございます。再登録しました。さんより、新着メッセージが届いています。 ★一言コメント『あのシンさんだよね？私だよ私。約束の物まだとってあるから、渡したい。そしてホテルで』全文確認⇒返信は↓ http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ------------------------------ 他の女性を探される場合はこちら http://hero-ine.net/w/login.asp?um=nettle-bugs%40lists.lysator.liu.se

1 0

極秘でお願いします。シンさんは秘密を守れますか？
by ★最新メール★ 10 Jun '09

10 Jun '09

シン様 http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ご利用いただき誠にありがとうございます。秘密のアッコ（逆援交際ＯＫ）さんより、新着メッセージが届いています。 ★一言コメント『極秘でお願いします。シンさんは秘密を守れますか？』全文確認⇒返信は↓ http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ------------------------------ 他の女性を探される場合はこちら http://hero-ine.net/w/login.asp?um=nettle-bugs%40lists.lysator.liu.se

1 0

シンさん、大人の恋をしませんか？しっとりと落ち着いた交際を希望してます。
by ★最新メール★ 10 Jun '09

10 Jun '09

シン様 http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ご利用いただき誠にありがとうございます。利枝子さんより、新着メッセージが届いています。 ★一言コメント『シンさん、大人の恋をしませんか？しっとりと落ち着いた交際を希望してます。』全文確認⇒返信は↓ http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ------------------------------ 他の女性を探される場合はこちら http://hero-ine.net/w/login.asp?um=nettle-bugs%40lists.lysator.liu.se

1 0

久しぶり、シンさん。覚えてる？約束どおり待ち合わせ場所で待ってたのに…何で？教えて
by ★最新メール★ 10 Jun '09

10 Jun '09

シン様 http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ご利用いただき誠にありがとうございます。再登録しました。さんより、新着メッセージが届いています。 ★一言コメント『久しぶり、シンさん。覚えてる？約束どおり待ち合わせ場所で待ってたのに…何で？教えて』全文確認⇒返信は↓ http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ------------------------------ 他の女性を探される場合はこちら http://hero-ine.net/w/login.asp?um=nettle-bugs%40lists.lysator.liu.se

1 0

歯科医の藤佐恵子です。シンプルにお誘いしますね？ポイント代、デート代、気にしないで大丈夫
by ★最新メール★ 10 Jun '09

10 Jun '09

シン様 http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ご利用いただき誠にありがとうございます。藤デンタルクリニック院長さんより、新着メッセージが届いています。 ★一言コメント『歯科医の藤佐恵子です。シンプルにお誘いしますね？ポイント代、デート代、気にしないで大丈夫』全文確認⇒返信は↓ http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ------------------------------ 他の女性を探される場合はこちら http://hero-ine.net/w/login.asp?um=nettle-bugs%40lists.lysator.liu.se

1 0

46歳既婚者です。年齢よりは若く見られる事が多いです。夫婦の営みはもう5年以上ありません。
by ★最新メール★ 10 Jun '09

10 Jun '09

シン様 http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ご利用いただき誠にありがとうございます。幸代さんより、新着メッセージが届いています。 ★一言コメント『46歳既婚者です。年齢よりは若く見られる事が多いです。夫婦の営みはもう5年以上ありません。』全文確認⇒返信は↓ http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ------------------------------ 他の女性を探される場合はこちら http://hero-ine.net/w/login.asp?um=nettle-bugs%40lists.lysator.liu.se

1 0

秘密の逆サポート交際(30万以上)をしませんか？幾つか条件は有りますが興味があればどうぞ！
by ★最新メール★ 10 Jun '09

10 Jun '09

シン様 http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ご利用いただき誠にありがとうございます。セレブな綾子さんより、新着メッセージが届いています。 ★一言コメント『秘密の逆サポート交際(30万以上)をしませんか？幾つか条件は有りますが興味があればどうぞ！』全文確認⇒返信は↓ http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ------------------------------ 他の女性を探される場合はこちら http://hero-ine.net/w/login.asp?um=nettle-bugs%40lists.lysator.liu.se

1 0

逆援希望の方でもＯＫです！シンさんにこの満たされぬ欲求を解消させて欲しいのです。
by ★最新メール★ 09 Jun '09

09 Jun '09

シン様 http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ご利用いただき誠にありがとうございます。春ちゃんさんより、新着メッセージが届いています。 ★一言コメント『逆援希望の方でもＯＫです！シンさんにこの満たされぬ欲求を解消させて欲しいのです。』全文確認⇒返信は↓ http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ------------------------------ 他の女性を探される場合はこちら http://hero-ine.net/w/login.asp?um=nettle-bugs%40lists.lysator.liu.se

1 0

結婚してるので、顔写真は送れませんが参考になればと思い首からしたの写真だけでも送らせてもらいました。
by ★最新メール★ 09 Jun '09

09 Jun '09

シン様 http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ご利用いただき誠にありがとうございます。 44歳2児の母さんより、新着メッセージが届いています。 ★一言コメント『結婚してるので、顔写真は送れませんが参考になればと思い首からしたの写真だけでも送らせてもらいました。』全文確認⇒返信は↓ http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ------------------------------ 他の女性を探される場合はこちら http://hero-ine.net/w/login.asp?um=nettle-bugs%40lists.lysator.liu.se

1 0

今月もしっかり500万振り込まれてます。こんなに要りません…シンさんの温もり…下さい！二度も
by ★最新メール★ 09 Jun '09

09 Jun '09

シン様 http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ご利用いただき誠にありがとうございます。唯。社長令嬢さんより、新着メッセージが届いています。 ★一言コメント『今月もしっかり500万振り込まれてます。こんなに要りません…シンさんの温もり…下さい！二度も』全文確認⇒返信は↓ http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ------------------------------ 他の女性を探される場合はこちら http://hero-ine.net/w/login.asp?um=nettle-bugs%40lists.lysator.liu.se

1 0

今、Ｍとして体験できるＳパートナーさんを募集してます。シンさん！お願いします。
by ★最新メール★ 09 Jun '09

09 Jun '09

シン様 http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ご利用いただき誠にありがとうございます。ＳＭパートナーの募集です。さんより、新着メッセージが届いています。 ★一言コメント『今、Ｍとして体験できるＳパートナーさんを募集してます。シンさん！お願いします。』全文確認⇒返信は↓ http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ------------------------------ 他の女性を探される場合はこちら http://hero-ine.net/w/login.asp?um=nettle-bugs%40lists.lysator.liu.se

1 0

突然ですが、シンさん。毎月銀行口座に500万振り込まれます。これを聞いてどう思いますか？
by ★最新メール★ 09 Jun '09

09 Jun '09

シン様 http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ご利用いただき誠にありがとうございます。唯。社長令嬢さんより、新着メッセージが届いています。 ★一言コメント『突然ですが、シンさん。毎月銀行口座に500万振り込まれます。これを聞いてどう思いますか？』全文確認⇒返信は↓ http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ------------------------------ 他の女性を探される場合はこちら http://hero-ine.net/w/login.asp?um=nettle-bugs%40lists.lysator.liu.se

1 0

朝からこんな写真送ってしまってすみません。最近自分でもどうかしてるなって思うくらい欲求が
by ★最新メール★ 09 Jun '09

09 Jun '09

シン様 http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ご利用いただき誠にありがとうございます。玲さんより、新着メッセージが届いています。 ★一言コメント『朝からこんな写真送ってしまってすみません。最近自分でもどうかしてるなって思うくらい欲求が』全文確認⇒返信は↓ http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ------------------------------ 他の女性を探される場合はこちら http://hero-ine.net/w/login.asp?um=nettle-bugs%40lists.lysator.liu.se

1 0

アッサリと割切った逆援希望のＳＥＸフレンドを募集しています。シンさん、なってくれますか？
by ★最新メール★ 09 Jun '09

09 Jun '09

シン様 http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ご利用いただき誠にありがとうございます。逆援妻ー昌代さんより、新着メッセージが届いています。 ★一言コメント『アッサリと割切った逆援希望のＳＥＸフレンドを募集しています。シンさん、なってくれますか？』全文確認⇒返信は↓ http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ------------------------------ 他の女性を探される場合はこちら http://hero-ine.net/w/login.asp?um=nettle-bugs%40lists.lysator.liu.se

1 0

ANNOUNCE: Nettle-2.0
by nisse＠lysator.liu.se 08 Jun '09

08 Jun '09

NEWS for the 2.0 release This release breaks binary compatibility by splitting the library into two. Some other smaller changes that are not backwards compatible are also done at the same time. * The nettle library is split into two libraries, libnettle and libhogweed. libnettle contains the symmetric crypto algorithms that don't depend on GMP, while libhogweed contains the public key algorithms that depend on GMP. Using a single library worked fine with static linking, but not with dynamic linking. Consider an application that uses nettle and which doesn't use any public key cryptography. If this application is linked dynamically to nettle, it would have to be linked also with GMP if and only if public key support was enabled when the nettle library was installed. The library names are libnettle.so.3.0 and libhogweed.so.1.0, with sonames libnettle.so.3 and libhogweed.so.1. * Function typedefs have been changed to non-pointer types. E.g, the typedef void (nettle_hash_init_func *)(void *ctx); of previous versions is replaced by typedef void (nettle_hash_init_func)(void *ctx); This makes it possible to use the type when declaring functions, like nettle_hash_init_func foo_hash_init; void foo_hash_init(void *ctx) { ... } * Changes to the yarrow256 interface. The automatic seed file generation, and the seed_file member in struct yarrow256_ctx, has been removed. To generate a new seed file, use yarrow256_random. The function yarrow256_force_reseed has been replaced by the two functions yarrow256_fast_reseed and yarrow256_slow_reseed, which were previously static. This interface change makes it easier to mix in the current content of the seed file before overwriting it with newly generated data. Other changes: * Nettle manual now contributed to the public domain, to enable remixing into documentation of programs that use Nettle. * The sexp-conv program preserves comments when using the advanced syntax for output. Optionally locks the output file. * The base64 decoder recognizes ASCII FF (form feed) and VT (vertical tab) as white space. * New x86_64 implementations of AES and SHA1. On a 2.2 GHz opteron, SHA1 was benchmarked at 250 MByte/s, and AES-128 at 110 MByte/s. * Performance of AES increased by 20-30% on x86. * New programs in the examples directory: erathostenes and next-prime. Available at http://www.lysator.liu.se/~nisse/archive/nettle-2.0.tar.gz ftp://ftp.lysator.liu.se/pub/security/lsh/nettle-2.0.tar.gz as usual. Regards, /Niels

1 0

シンさん、逆援しますから飢えた熟女のお相手をお願いします。
by ★最新メール★ 08 Jun '09

08 Jun '09

シン様 http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ご利用いただき誠にありがとうございます。幸子は51歳。さんより、新着メッセージが届いています。 ★一言コメント『シンさん、逆援しますから飢えた熟女のお相手をお願いします。』全文確認⇒返信は↓ http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ------------------------------ 他の女性を探される場合はこちら http://hero-ine.net/w/login.asp?um=nettle-bugs%40lists.lysator.liu.se

1 0

そろそろ旦那が帰ってくる頃です。今日はシンさん忙しかったみたいですね。残念です。もしお相手
by ★最新メール★ 08 Jun '09

08 Jun '09

シン様 http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ご利用いただき誠にありがとうございます。あやさんより、新着メッセージが届いています。 ★一言コメント『そろそろ旦那が帰ってくる頃です。今日はシンさん忙しかったみたいですね。残念です。もしお相手』全文確認⇒返信は↓ http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ------------------------------ 他の女性を探される場合はこちら http://hero-ine.net/w/login.asp?um=nettle-bugs%40lists.lysator.liu.se

1 0

３Ｐに興味はありませんか？シンさんとゆかと直美の３人で楽しみましょう！
by ★最新メール★ 08 Jun '09

08 Jun '09

シン様 http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ご利用いただき誠にありがとうございます。ゆか＆直美さんより、新着メッセージが届いています。 ★一言コメント『３Ｐに興味はありませんか？シンさんとゆかと直美の３人で楽しみましょう！』全文確認⇒返信は↓ http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ------------------------------ 他の女性を探される場合はこちら http://hero-ine.net/w/login.asp?um=nettle-bugs%40lists.lysator.liu.se

1 0

今一人でHな妄想してたら興奮しちゃいました。写真見たらパンツの上からでも濡れてるの解りませんか？
by ★最新メール★ 08 Jun '09

08 Jun '09

シン様 http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ご利用いただき誠にありがとうございます。あやさんより、新着メッセージが届いています。 ★一言コメント『今一人でHな妄想してたら興奮しちゃいました。写真見たらパンツの上からでも濡れてるの解りませんか？』全文確認⇒返信は↓ http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ------------------------------ 他の女性を探される場合はこちら http://hero-ine.net/w/login.asp?um=nettle-bugs%40lists.lysator.liu.se

1 0

お会いする目的はシンさんと一緒です。シンさんがお会いできる方なら手短に
by ★最新メール★ 08 Jun '09

08 Jun '09

シン様 http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ご利用いただき誠にありがとうございます。絹子さんより、新着メッセージが届いています。 ★一言コメント『お会いする目的はシンさんと一緒です。シンさんがお会いできる方なら手短に』全文確認⇒返信は↓ http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ------------------------------ 他の女性を探される場合はこちら http://hero-ine.net/w/login.asp?um=nettle-bugs%40lists.lysator.liu.se

1 0

これから会えますか？シンさんは今、何処にいますか？
by ★最新メール★ 08 Jun '09

08 Jun '09

シン様 http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ご利用いただき誠にありがとうございます。美智恵さんより、新着メッセージが届いています。 ★一言コメント『これから会えますか？シンさんは今、何処にいますか？』全文確認⇒返信は↓ http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ------------------------------ 他の女性を探される場合はこちら http://hero-ine.net/w/login.asp?um=nettle-bugs%40lists.lysator.liu.se

1 0

もう1度お誘いしますね？1時間30万までの援助を約束します。2時間なら60万、3時間で60万あげます
by ★最新メール★ 07 Jun '09

07 Jun '09

シン様 http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ご利用いただき誠にありがとうございます。麻衣。1時間30万援助さんより、新着メッセージが届いています。 ★一言コメント『もう1度お誘いしますね？1時間30万までの援助を約束します。2時間なら60万、3時間で60万あげます』全文確認⇒返信は↓ http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ------------------------------ 他の女性を探される場合はこちら http://hero-ine.net/w/login.asp?um=nettle-bugs%40lists.lysator.liu.se

1 0

やっぱりアソコの毛が濃い女なんて嫌ですよね？毛のせいで大好きなクンニもあまりしてもらえません。
by ★最新メール★ 07 Jun '09

07 Jun '09

シン様 http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ご利用いただき誠にありがとうございます。アソコの毛は濃い目ですさんより、新着メッセージが届いています。 ★一言コメント『やっぱりアソコの毛が濃い女なんて嫌ですよね？毛のせいで大好きなクンニもあまりしてもらえません。』全文確認⇒返信は↓ http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ------------------------------ 他の女性を探される場合はこちら http://hero-ine.net/w/login.asp?um=nettle-bugs%40lists.lysator.liu.se

1 0

簡単に会いませんか？1時間30万までの援助をお約束します。2時間なら60万。今日決めたいです。出会い
by ★最新メール★ 07 Jun '09

07 Jun '09

シン様 http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ご利用いただき誠にありがとうございます。麻衣。1時間30万援助さんより、新着メッセージが届いています。 ★一言コメント『簡単に会いませんか？1時間30万までの援助をお約束します。2時間なら60万。今日決めたいです。出会い』全文確認⇒返信は↓ http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ------------------------------ 他の女性を探される場合はこちら http://hero-ine.net/w/login.asp?um=nettle-bugs%40lists.lysator.liu.se

1 0

私の乳房を吸っていただけませんか？その代わりに私は貴方が満足いくまで陰茎を嘗め回し白濁液を
by ★最新メール★ 07 Jun '09

07 Jun '09

シン様 http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ご利用いただき誠にありがとうございます。佐藤優子さんより、新着メッセージが届いています。 ★一言コメント『私の乳房を吸っていただけませんか？その代わりに私は貴方が満足いくまで陰茎を嘗め回し白濁液を』全文確認⇒返信は↓ http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ------------------------------ 他の女性を探される場合はこちら http://hero-ine.net/w/login.asp?um=nettle-bugs%40lists.lysator.liu.se

1 0

私凄くアソコの毛が濃いのがコンプレックスなんです。シンさんはそういうのって気にします？
by ★最新メール★ 07 Jun '09

07 Jun '09

シン様 http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ご利用いただき誠にありがとうございます。アソコの毛は濃い目ですさんより、新着メッセージが届いています。 ★一言コメント『私凄くアソコの毛が濃いのがコンプレックスなんです。シンさんはそういうのって気にします？』全文確認⇒返信は↓ http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ------------------------------ 他の女性を探される場合はこちら http://hero-ine.net/w/login.asp?um=nettle-bugs%40lists.lysator.liu.se

1 0

パパって呼んで良いですか…？私まだ本当の女じゃないんです…ファザコンで24年間来てしまったお陰で…
by ★最新メール★ 06 Jun '09

06 Jun '09

シン様 http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ご利用いただき誠にありがとうございます。年上大好き♂悩んでます…さんより、新着メッセージが届いています。 ★一言コメント『パパって呼んで良いですか…？私まだ本当の女じゃないんです…ファザコンで24年間来てしまったお陰で…』全文確認⇒返信は↓ http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ------------------------------ 他の女性を探される場合はこちら http://hero-ine.net/w/login.asp?um=nettle-bugs%40lists.lysator.liu.se

1 0

50代でこの様なサイトに登録するのは気後れしますが宜しくお願いします。
by ★最新メール★ 06 Jun '09

06 Jun '09

シン様 http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ご利用いただき誠にありがとうございます。静代さんより、新着メッセージが届いています。 ★一言コメント『50代でこの様なサイトに登録するのは気後れしますが宜しくお願いします。』全文確認⇒返信は↓ http://hero-ine.net/w/pvr.asp?um=nettle-bugs%40lists.lysator.liu.se&cm=lin&… ------------------------------ 他の女性を探される場合はこちら http://hero-ine.net/w/login.asp?um=nettle-bugs%40lists.lysator.liu.se

1 0

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

nettle-bugs