nettle-bugs

nettle-bugs@lists.lysator.liu.se

2196 discussions

Building nettle-2.7.1 with static GMP bug
by Alexey Pavlov 29 Nov '13

29 Nov '13

Hi! I'm try to build nettle-2.7.1 with static GMP with mingw-w64 toolchain GCC-4.8.2 and got error while linking with static GMP: i686-w64-mingw32-gcc -march=i686 -mtune=generic -O2 -pipe -I/mingw32/include -ggdb3 -Wno-pointer-sign -Wall -W -Wmissing-prototypes -Wmissing-declarations -Wstrict-prototypes -Wpointer-arith -Wbad-function-cast -Wnested-externs -L.. -pipe -L/mingw32/lib ecc-mod-test.o testutils.o ../nettle-internal.o -lhogweed -lnettle -lgmp -o ecc-mod-test.exe C:/msys64/mingw32/lib/libgmp.a(sub_n.o):(.text+0x0): multiple definition of `__gmpn_sub_n' ../libhogweed.dll.a(d000131.o):(.text+0x0): first defined here collect2.exe: error: ld returned 1 exit status /msys_repo/mingw-w64-nettle/src/nettle-2.7.1/testsuite/.test-rules.make:167: recipe for target 'ecc-mod-test.exe' failed make[1]: *** [ecc-mod-test.exe] Error 1 Is any fix for this? Regards, Alexey.

1 0

Apparent bug in SHA-1 digests
by Paul Tagliamonte 28 Nov '13

28 Nov '13

Hey hackers, I'm seeing some behavior that confuses me a bit. I'm sure I'm doing something wrong, but I can't tell. Here's a minimal example: / | #include <stdio.h> | #include <nettle/rsa.h> | | int main ( int argc, char ** argv ) { | struct sha1_ctx hash_ctx; | uint8_t headers[] = { | 0xDE, 0xEA, 0xAD, | 0xBE, 0xEF | }; | sha1_update(&hash_ctx, 5, headers); | | for (int i = 0; i < 3; ++i) { | uint8_t _fingerprint[SHA1_DIGEST_SIZE]; | sha1_digest(&hash_ctx, SHA1_DIGEST_SIZE, _fingerprint); | for (int i = 0; i < SHA1_DIGEST_SIZE; ++i) | printf("%02X ", _fingerprint[i]); | printf("\n"); | } | } \ The output, when run is: / | 89 22 AA 95 F2 02 C9 BB 35 FC 2D A2 DE 22 BE 48 2B B6 6C 1D | DA 39 A3 EE 5E 6B 4B 0D 32 55 BF EF 95 60 18 90 AF D8 07 09 | DA 39 A3 EE 5E 6B 4B 0D 32 55 BF EF 95 60 18 90 AF D8 07 09 \ (that last line is stable after the inital hash) Does doing the sha1_digest alter state in some way? I can't image it is, but then how does this behavior crop up? Much love, thanks all! Cheers, Paul -- #define sizeof(x) rand() :wq

3 2

poly1305 nonce increments
by nisse＠lysator.liu.se 21 Nov '13

21 Nov '13

As I wrote, I'm working with poly1305. One question: The _digest function will update the nonce value, so that by default one gets a nonce sequence of 0, 1, 2, .... In the code I'm working with (contributed by Nikos), this increment is done in a big-endian fashion, just like increments for CTR mode. Is this going to be the common way to generate nonces for poly1305? Regards, /Niels -- Niels Möller. PGP-encrypted email is preferred. Keyid C0B98E26. Internet email is subject to wholesale government surveillance.

2 2

Make error on CentOS 6.4 x64
by Martin Lambev 16 Nov '13

16 Nov '13

Hello nettle gurus, I'm trying to build GnuTLS 3.2.6 on CentOS 6.4 x64, but having some issues with nettle during compilation. nettle 2.7.1 make errors: configure: summary of build options: Version: nettle 2.7.1 Host type: x86_64-unknown-linux-gnu ABI: 64 Assembly files: x86_64 Install prefix: /usr/local Library directory: ${exec_prefix}/lib64 Compiler: gcc Static libraries: yes Shared libraries: yes Public key crypto: yes Documentation: no During "$ make" exits with error: hogweed-benchmark.c:575: error: ‘struct openssl_ctx’ has no member named ‘key’ hogweed-benchmark.c:576: error: ‘struct openssl_ctx’ has no member named ‘digest’ make[1]: *** [hogweed-benchmark.o] Error 1 make[1]: Leaving directory `/home/mve/Downloads/ocserv/nettle/nettle-2.7.1/examples' make: *** [all] Error 1 It fails "error: ‘struct openssl_ctx’" so I looked configure help options… $ make clean $ ./configure --help #give a few options so I disabled this one as I'm assuming it's not used in my case isn't it? $ ./configre --disable-openssl #Do not include openssl glue in the benchmark program after doing this "make" successfully finished and I can install "nettle" Is this proper workaround or not? If not how should be handed properly? Thank you! Regards, Martin

2 1

Re: undefined behaviors
by John Regehr 13 Nov '13

13 Nov '13

> I imagine you intended to mail the nettle-bugs list, rather than > nettle-bugs-owner administrative address? Feel free to reply on list. Ugh, sorry, cut and paste... > That's unexpected. Hmm. The NEWS file for 2.7.1 claims that this problem > was fixed in that release, but appearantly it wasn't. You can check if > the error disappears if you replace the definition of ROT32 in macros.h > by > > #define ROTL32(n,x) (((x)<<(n)) | ((x)>>((-(n)&31)))) I'll check this tonight. >> blowfish.c:353:19: runtime error: left shift of 244 by 24 places >> cannot be represented in type 'int' >> twofish.c:196:54: runtime error: left shift of 184 by 24 places cannot >> be represented in type 'int' > > These should have some casts to uint32_t, I think. Unlikely to cause > real problems. Right, I don't know of any compiler that exploits these, and in fact in C++ (but not C) this particular case is covered by a defect report that makes it defined. Thanks, John

2 4

added functions to zeroize
by Nikos Mavrogiannopoulos 13 Nov '13

13 Nov '13

Hello, Attached is a patch that allows overwriting values (points and scalars) in the ECC API. regards, Nikos

2 4

Re: Git repository down?
by nisse＠lysator.liu.se 17 Oct '13

17 Oct '13

Andrew Walrond <andrew(a)walrond.org> writes: > Is the git repository down? Now it seems to work again. Some deamon had died, for unknown reason, and has been restarted. BTW, switching git.lysator.liu.se from gitorious to some other software is under consideraton. Any recommendations? Regards, /Niels -- Niels Möller. PGP-encrypted email is preferred. Keyid C0B98E26. Internet email is subject to wholesale government surveillance.

2 3

Re: Git repository down?
by nisse＠lysator.liu.se 16 Oct '13

16 Oct '13

Andrew Walrond <andrew(a)walrond.org> writes: > Is the git repository down? Appearantly, yes. The machine is still up, though, and responding to http. I'll ask sysadm what's happening. Regards, /Niels -- Niels Möller. PGP-encrypted email is preferred. Keyid C0B98E26. Internet email is subject to wholesale government surveillance.

1 0

internal bug in pgp_put_public_rsa_key
by Paul Tagliamonte 15 Oct '13

15 Oct '13

Howdy folks! Thanks for working on nettle, pgp_put_public_rsa_key seems to throw an assertion error: > assert(buffer->size == start + length) buffer->size is 3 larger than (start + length). Removing the PGP_LENGTH_TWO_OCTETS works (but this is wrong, since 4880 defines it as it's written, I think, still new with the spec), so I think there might be a bug in the assert. Can someone who groks the code confirm this? Thanks! Paul -- #define sizeof(x) rand() :wq

2 2

loading RSA keys from a PEM file
by Ted Zlatanov 06 Oct '13

06 Oct '13

If I generate a public RSA key into a PEM file and then base64-decode the contents (this is in Emacs): (string-to-unibyte (base64-decode-string "MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAreGA/Qky9W3izQV0kzba 7wKl/wzwxkbbQxvcUqUT1krgAbO/n1tYFjXdJZoWwbMO/qv7NRoMDY4yPWGpsQfY +PSIknAhTZVbgwXrm/wb37+hKRKax2UZ9A/Rx4vJZRYlkpvZ9LbBziseFNN7SMWW qkjBO/NeT8/I9mURDa+4RoYfT6ZwjTvt808PH7uIghk+MHAx9EMBAfafF1Jn9TqW y+Hgdqik9sZteMvCumvGK4grSwzdfPO5I05tt/0I7QVPxlXbHIk/bBsE7mpgOxur P0DAkFKtYDM7oZPBwB6X778ba2EEFKPpVIyzw/jlDPd9PB6gE6dixmax3Hlg69RI EwIDAQAB")) I seem unable to load that as a public key (SCHARS macro == length, SDATA macro == data): struct rsa_public_key key; rsa_public_key_init(&key); rsa_keypair_from_der (&key, NULL, 0, SCHARS (public_key), SDATA (public_key)) It keeps failing. From the docs and example it seems like that should work. Can you see what I'm doing wrong? I've spent a few hours on it and can't trace the problem. If not I will start digging into the key loading functions, but was hoping it's something obvious (and if you have a working example that would be great). As soon as I have this working I will publish my work for review; the RSA signatures are the last piece missing. Ted

3 5

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

nettle-bugs