pidgin-devel

[Gaim-devel] RC4 support

[Nathan P. <gai...@gl...>]

I'm working on a protocol that requires RC4 during authentication. 
Should I be modifying cipher.c to support RC4?  or should I handle that 
inside my plugin?

thanks,
-Nathan

Re: [Gaim-devel] RC4 support

[Atamurad H. <ata...@gm...>]

Hi,

Just wanted to inform you,
MySpace IM uses RC4 during authentication too.

I think adding it to cipher.c would be better idea.

On 3/30/07, Nathan Peterson <gai...@gl...> wrote:
> I'm working on a protocol that requires RC4 during authentication.
> Should I be modifying cipher.c to support RC4?  or should I handle that
> inside my plugin?
>
> thanks,
> -Nathan
>
> -------------------------------------------------------------------------
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to share your
> opinions on IT & business topics through brief surveys-and earn cash
> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
> _______________________________________________
> Gaim-devel mailing list
> Gai...@li...
> https://lists.sourceforge.net/lists/listinfo/gaim-devel
>

Re: [Gaim-devel] RC4 support

[Ethan B. <ebl...@cs...>]

Nathan Peterson spake unto us the following wisdom:
> I'm working on a protocol that requires RC4 during authentication.=20
> Should I be modifying cipher.c to support RC4?  or should I handle that=
=20
> inside my plugin?

Assuming that you have found a freely licensed RC4 implementation
which can compatibly be merged with GPL code, it should be added to
cipher.c.  RC4 is a common enough cipher (indeed, as someone has
already stated, MySpaceIM may use it) that it will probably be used
elsewhere.

That said, for testing and development, you can build it as an
external cipher and simply register it with the cipher API.

Ethan

--=20
The laws that forbid the carrying of arms are laws [that have no remedy
for evils].  They disarm only those who are neither inclined nor
determined to commit crimes.
		-- Cesare Beccaria, "On Crimes and Punishments", 1764

Re: [Gaim-devel] RC4 support

[Duane <du...@e1...>]

Ethan Blanton wrote:

> Assuming that you have found a freely licensed RC4 implementation

Or write your own (although RC4 isn't secure) based on the specs, RC4 is
touted as one of the easiest to implement, which is why it's still
kicking about.

http://ciphersaber.gurus.com/

-- 

Best regards,
 Duane

http://www.cacert.org - Free Security Certificates
http://www.nodedb.com - Think globally, network locally
http://www.sydneywireless.com - Telecommunications Freedom
http://e164.org - Because e164.arpa is a tax on VoIP
http://www.freeauth.org - Enterprise Two Factor Authentication

"In the long run the pessimist may be proved right,
    but the optimist has a better time on the trip."

Re: [Gaim-devel] RC4 support

[Nathan P. <gai...@gl...>]

Atamurad Hezretkuliyev wrote:
> Hi,
> 
> Just wanted to inform you,
> MySpace IM uses RC4 during authentication too.

Yeah, that's actually what I'm working on.


Ethan Blanton wrote:
> Assuming that you have found a freely licensed RC4 implementation 
> which can compatibly be merged with GPL code, it should be added to 
> cipher.c. RC4 is a common enough cipher (indeed, as someone has 
> already stated, MySpaceIM may use it) that it will probably be used 
> elsewhere.
> 
> That said, for testing and development, you can build it as an 
> external cipher and simply register it with the cipher API.

Ok yeah, that's what I thought.  Thanks.  I'll probably just write my 
own rc4 code, and then add it into cipher.c once I've tested it.  It 
looks simple enough.

-Nathan