- Pharo-dev - lists.pharo.org

Re: [Pharo-dev] Recommendation for password encryption?

by Mariano Martinez Peck

Ahh another question, sorry. With this cipher a "salt" would make almost no sense since I already need a key? or it make sense to put a "salt" together with the string to ecnrypt? Thanks On Mon, Jul 15, 2013 at 5:39 PM, Mariano Martinez Peck < marianopeck(a)gmail.com> wrote: > > > >> Blowfish is a 8 byte block cipher so for shorter strings I'll need to pad >> the byte array, and for longer strings I'll need to make it use cipher >> block >> chaining: >> ( >> https://en.wikipedia.org/wiki/Block_cipher_modes_of_operation#Cipher-block_… >> ) >> >> > Ok, I imagined something like that. Thanks for the explanation. > For my usecase, I think this is not the more critical thing since I would > use a 8 character password for sure :) > > >> >> >> If you change #decryptString:with: to: >> >> Blowfish class>>decryptString: aString with: aKey >> |decryptedData | >> decryptedData := (self new ecbDecrypt: aString asByteArray with: aKey >> asByteArray ). >> ^String fromByteArray: decryptedData asByteArray . >> >> Then this workspace code should work: >> >> | enc encryptedString dkey decrString | >> key:='mySecretKey'. >> enc:=Blowfish encryptString:'12345678' with: key. >> encryptedString := enc asByteArray asString. >> Transcript show: ' encrypted: ', encryptedString; cr. >> decrString:=Blowfish decryptString: encryptedString with: key. >> Transcript show: ' decrypted: ', decrString; cr. >> >> >> > Thanks!! That worked. Now...there is no problem with the encoding then? > Because I would need to store/retrieve the string from a file stream...so > I didn't know if I should use a TextConverter or not. > > Thanks in advance, > > > >> But with the password 'test' it will always fail because I'm not yet >> padding >> the byte array to a multiple of 8 bytes before encrypting it. >> >> >> >> Thanks for your patience >> >> >> Paul >> >> >> >> -- >> View this message in context: >> http://forum.world.st/Pharo-dev-Recommendation-for-password-encryption-tp46… >> Sent from the Pharo Smalltalk Developers mailing list archive at >> Nabble.com. >> >> > > > -- > Mariano > http://marianopeck.wordpress.com > -- Mariano http://marianopeck.wordpress.com

July 15, 2013

Re: [Pharo-dev] Recommendation for password encryption?

by Mariano Martinez Peck

> Blowfish is a 8 byte block cipher so for shorter strings I'll need to pad > the byte array, and for longer strings I'll need to make it use cipher > block > chaining: > ( > https://en.wikipedia.org/wiki/Block_cipher_modes_of_operation#Cipher-block_… > ) > > Ok, I imagined something like that. Thanks for the explanation. For my usecase, I think this is not the more critical thing since I would use a 8 character password for sure :) > > > If you change #decryptString:with: to: > > Blowfish class>>decryptString: aString with: aKey > |decryptedData | > decryptedData := (self new ecbDecrypt: aString asByteArray with: aKey > asByteArray ). > ^String fromByteArray: decryptedData asByteArray . > > Then this workspace code should work: > > | enc encryptedString dkey decrString | > key:='mySecretKey'. > enc:=Blowfish encryptString:'12345678' with: key. > encryptedString := enc asByteArray asString. > Transcript show: ' encrypted: ', encryptedString; cr. > decrString:=Blowfish decryptString: encryptedString with: key. > Transcript show: ' decrypted: ', decrString; cr. > > > Thanks!! That worked. Now...there is no problem with the encoding then? Because I would need to store/retrieve the string from a file stream...so I didn't know if I should use a TextConverter or not. Thanks in advance, > But with the password 'test' it will always fail because I'm not yet > padding > the byte array to a multiple of 8 bytes before encrypting it. > > > > Thanks for your patience > > > Paul > > > > -- > View this message in context: > http://forum.world.st/Pharo-dev-Recommendation-for-password-encryption-tp46… > Sent from the Pharo Smalltalk Developers mailing list archive at > Nabble.com. > > -- Mariano http://marianopeck.wordpress.com

July 15, 2013

Re: [Pharo-dev] Job: from Exceptions to Announcements?

by Camillo Bruni

Hi, this actually emerged from a discussion with Sean, because he didn't like exceptions based notifications :). But all in all there is no big change needed. I think the UI will work anyway passively, there should be a refresh loop that checks 15-times per second the status of the active jobs and updates the UI progress bar accordingly. So I think there shouldn't be many more changes? Maybe we can quickly have a look at it together... On 2013-07-15, at 19:00, Martin Dias <tinchodias(a)gmail.com> wrote: > Hi, > > I am looking into SystemProgressMorph and I found this flag in several methods: > > self flag: 'When we go from Exceptions to announcements, delete this > and use show:from:to:during:'. > > I'd like to know more. I see that Jobs are implemented with both > exceptions and announcements... what is the idea? to remove the > exceptions and use only announcements? > > Thank you for your help, > MartÃn >

July 15, 2013

[DOC] Building and deploying

by Paul Davidowitz

Very nice, but perhaps in a future tutorial the mode of presentation can be TDD...

July 15, 2013

Roassal 3d progress

by Alexandre Bergel

Hi! Milton, Ronie and I had a very fun programming session. Here some random screenshots during our programming session. Igor, would it be possible to have in the same window Athens and OpenGL? Maybe the question does not make sense, just I prefer the ask. On some point we would like to some popup in 2D above a 3D scene. All the examples are available on: http://smalltalkhub.com/#!/~ronsaldo/roassal3d You need to download first NBOpenGL to play with Roassal3d Cheers, Ronie, Milton & Alexandre -- _,.;:~^~:;._,.;:~^~:;._,.;:~^~:;._,.;:~^~:;._,.;: Alexandre Bergel http://www.bergel.eu ^~:;._,.;:~^~:;._,.;:~^~:;._,.;:~^~:;._,.;:~^~:;.

July 15, 2013

Open GL and Athens?

by Alexandre Bergel

Hi! Milton, Ronie and I had a very fun programming session. Here some random screenshots during our programming session. Igor, would it be possible to have in the same window Athens and OpenGL? Maybe the question does not make sense, just I prefer the ask. On some point we would like to some popup in 2D above a 3D scene. All the examples are available on: http://smalltalkhub.com/#!/~ronsaldo/roassal3d You need to download first NBOpenGL to play with Roassal3d Cheers, Ronie, Milton & Alexandre -- _,.;:~^~:;._,.;:~^~:;._,.;:~^~:;._,.;:~^~:;._,.;: Alexandre Bergel http://www.bergel.eu ^~:;._,.;:~^~:;._,.;:~^~:;._,.;:~^~:;._,.;:~^~:;.

July 15, 2013

Re: [Pharo-dev] Recommendation for password encryption?

by Paul DeBruicker

Mariano Martinez Peck wrote > On Sun, Jul 14, 2013 at 9:46 PM, Paul DeBruicker < > pdebruic@ > > wrote: > >> >> Hi Mariano, >> >> You shouldn't use it. Its broken. I didn't realize until just now. But >> I >> also haven't been using it. >> >> > ohh what a pity :( > I was planning to use it! > > >> >> To encrypt the db password do >> >> enc:=Blowfish encryptString:'myDbPassword' with: 'mySecretKey' >> >> and to decrypt it later do >> >> Blowfish decryptToString: enc with: 'mySecretKey' >> >> > I tried that. But..in my case, the "enc" I should store it in a file, so I > need the string rather than the bytearray. So I did: > > | enc encryptedString decr decrString | > enc:=Blowfish encryptString:'test' with: 'mySecretKey'. > encryptedString := enc asByteArray asString. > Transcript show: ' encrypted: ', encryptedString; cr. > > and encryptedString is that I would store in the file. > > And then to decrypt: > > decr := Blowfish decryptString: encryptedString with: 'mySecretKey'. > decrString := decr asByteArray asString. > Transcript show: ' decrypted: ', decrString; cr. > > but there are several problems: > > 1) I cannot encrypt passwords smaller than 8 characters neither bigger (as > you noted). Not a big problem. But I may be using this same algorithm for > something else in where I may have smaller paswords (but I am not sure). > 2) I am not sure I am doing fine with the encoding and the strings... > (conversion between bytearray and string) > 3) the decryption doesn't work for me... :( > > If you fix, please let me know!! If I can help/test, also. > > > Thanks, > > > > -- > Mariano > http://marianopeck.wordpress.com Blowfish is a 8 byte block cipher so for shorter strings I'll need to pad the byte array, and for longer strings I'll need to make it use cipher block chaining: (https://en.wikipedia.org/wiki/Block_cipher_modes_of_operation#Cipher-block_…) If you change #decryptString:with: to: Blowfish class>>decryptString: aString with: aKey |decryptedData | decryptedData := (self new ecbDecrypt: aString asByteArray with: aKey asByteArray ). ^String fromByteArray: decryptedData asByteArray . Then this workspace code should work: | enc encryptedString dkey decrString | key:='mySecretKey'. enc:=Blowfish encryptString:'12345678' with: key. encryptedString := enc asByteArray asString. Transcript show: ' encrypted: ', encryptedString; cr. decrString:=Blowfish decryptString: encryptedString with: key. Transcript show: ' decrypted: ', decrString; cr. But with the password 'test' it will always fail because I'm not yet padding the byte array to a multiple of 8 bytes before encrypting it. Thanks for your patience Paul -- View this message in context: http://forum.world.st/Pharo-dev-Recommendation-for-password-encryption-tp46… Sent from the Pharo Smalltalk Developers mailing list archive at Nabble.com.

July 15, 2013

Job: from Exceptions to Announcements?

by Martin Dias

Hi, I am looking into SystemProgressMorph and I found this flag in several methods: self flag: 'When we go from Exceptions to announcements, delete this and use show:from:to:during:'. I'd like to know more. I see that Jobs are implemented with both exceptions and announcements... what is the idea? to remove the exceptions and use only announcements? Thank you for your help, MartÃn

July 15, 2013

Re: [Pharo-dev] [Pharo-users] [DOC] Building and deploying your first web app with Pharo

by Attila Magyar

This is really nice. I hope it will reach people who develop webapps in ruby/php/java or whatever. On Mon, Jul 15, 2013 at 6:42 PM, Sven Van Caekenberghe <sven(a)stfx.eu> wrote: > > On 15 Jul 2013, at 18:41, Sven Van Caekenberghe <sven(a)stfx.eu> wrote: > > > I should revive it. > > But it is still running live ;-) > > http://caretaker.wolf359.be:8080/reddit > > Sven > >

July 15, 2013

Re: [Pharo-dev] [DOC] Building and deploying your first web app with Pharo

by Sven Van Caekenberghe

On 15 Jul 2013, at 18:41, Sven Van Caekenberghe <sven(a)stfx.eu> wrote: > I should revive it. But it is still running live ;-) http://caretaker.wolf359.be:8080/reddit Sven

July 15, 2013