<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: New Release of GWT Crypto Library</title>
	<atom:link href="http://www.mooreds.com/wordpress/archives/546/feed" rel="self" type="application/rss+xml" />
	<link>http://www.mooreds.com/wordpress/archives/546</link>
	<description></description>
	<lastBuildDate>Tue, 07 Feb 2012 14:11:43 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
	<item>
		<title>By: moore</title>
		<link>http://www.mooreds.com/wordpress/archives/546/comment-page-1#comment-2891</link>
		<dc:creator>moore</dc:creator>
		<pubDate>Wed, 21 Oct 2009 17:12:52 +0000</pubDate>
		<guid isPermaLink="false">http://www.mooreds.com/wordpress/archives/000546#comment-2891</guid>
		<description>Thanks John.  I&#039;m no crypto expert, but appreciate your comments and am sure they will be helpful for others.  If you end up writing up a summary beyond this comment, I&#039;d be happy to link to it (here and from the google code site).</description>
		<content:encoded><![CDATA[<p>Thanks John.  I&#8217;m no crypto expert, but appreciate your comments and am sure they will be helpful for others.  If you end up writing up a summary beyond this comment, I&#8217;d be happy to link to it (here and from the google code site).</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Jon</title>
		<link>http://www.mooreds.com/wordpress/archives/546/comment-page-1#comment-2886</link>
		<dc:creator>Jon</dc:creator>
		<pubDate>Wed, 14 Oct 2009 05:22:28 +0000</pubDate>
		<guid isPermaLink="false">http://www.mooreds.com/wordpress/archives/000546#comment-2886</guid>
		<description>Hey Dan,

Please belay that last query. With a little more playing today I have successfully implemented GWT TripleDES encrytion of data that is decrypted using dotnet TripleDES. 

My findings for others were first that gwt-crypto internally must use a feedback block of the same size as the blocksize (8-byte), PKCS7 padding and an 8-byte &amp; zeroed IV. All of these can be mirrored in dotnet land. Second is that using the encoding objects or inbuilt system frombase64X() methods can muddy the data when deriving key &amp; value byte arrays. However, by checking out and following the same hex encoding and decoding algs as defined within gwt-crypto, the data will marry up nicely (not tested over large data sets yet).

So, cheers on a great gwt library =)
Jon</description>
		<content:encoded><![CDATA[<p>Hey Dan,</p>
<p>Please belay that last query. With a little more playing today I have successfully implemented GWT TripleDES encrytion of data that is decrypted using dotnet TripleDES. </p>
<p>My findings for others were first that gwt-crypto internally must use a feedback block of the same size as the blocksize (8-byte), PKCS7 padding and an 8-byte &amp; zeroed IV. All of these can be mirrored in dotnet land. Second is that using the encoding objects or inbuilt system frombase64X() methods can muddy the data when deriving key &amp; value byte arrays. However, by checking out and following the same hex encoding and decoding algs as defined within gwt-crypto, the data will marry up nicely (not tested over large data sets yet).</p>
<p>So, cheers on a great gwt library =)<br />
Jon</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Jon</title>
		<link>http://www.mooreds.com/wordpress/archives/546/comment-page-1#comment-2884</link>
		<dc:creator>Jon</dc:creator>
		<pubDate>Tue, 13 Oct 2009 23:04:11 +0000</pubDate>
		<guid isPermaLink="false">http://www.mooreds.com/wordpress/archives/000546#comment-2884</guid>
		<description>Hey Dan, 

Following up on your release of gwt-crypto from the other day, I&#039;ve had a play and run into an issue you may be able to help with. Its regarding interoperability with the dotnet TripleDES implementation.

Can you tell me about the feedback incorporated when performing the encryption/decryption? MS enforces a minimum feedback block size for its implementation (8-bits by default), so if I know what size you used in your implementation then I can hopefully align the two. The reason I ask about feedback is that I&#039;ve looked at the exposed dotnet 3DES properties and the defaults as implemented in the source of gwt-crypto - and feedback is one I&#039;m unsure about. 

From what I can see, the IV is 64-bits of zeros by default; which I can emulate in dotnet land. I can ensure that the keys are (reported to be in Intelli-J and VS) identical. Both gwt-crypto and dotnet 3DES support the PKCS7 padding format, so the last property I can see that can be manipulated to align between the two seems to be the feedback block size.

Also, if you have any other notes on interop between gwt-crypt and dotnet world&#039;s 3DES implementations, I&#039;d be appreciative.

Thanks,
Jon</description>
		<content:encoded><![CDATA[<p>Hey Dan, </p>
<p>Following up on your release of gwt-crypto from the other day, I&#8217;ve had a play and run into an issue you may be able to help with. Its regarding interoperability with the dotnet TripleDES implementation.</p>
<p>Can you tell me about the feedback incorporated when performing the encryption/decryption? MS enforces a minimum feedback block size for its implementation (8-bits by default), so if I know what size you used in your implementation then I can hopefully align the two. The reason I ask about feedback is that I&#8217;ve looked at the exposed dotnet 3DES properties and the defaults as implemented in the source of gwt-crypto &#8211; and feedback is one I&#8217;m unsure about. </p>
<p>From what I can see, the IV is 64-bits of zeros by default; which I can emulate in dotnet land. I can ensure that the keys are (reported to be in Intelli-J and VS) identical. Both gwt-crypto and dotnet 3DES support the PKCS7 padding format, so the last property I can see that can be manipulated to align between the two seems to be the feedback block size.</p>
<p>Also, if you have any other notes on interop between gwt-crypt and dotnet world&#8217;s 3DES implementations, I&#8217;d be appreciative.</p>
<p>Thanks,<br />
Jon</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: moore</title>
		<link>http://www.mooreds.com/wordpress/archives/546/comment-page-1#comment-2882</link>
		<dc:creator>moore</dc:creator>
		<pubDate>Fri, 09 Oct 2009 17:58:24 +0000</pubDate>
		<guid isPermaLink="false">http://www.mooreds.com/wordpress/archives/000546#comment-2882</guid>
		<description>Andrea,

Yes, that makes a lot of sense.  Thanks for the explanation!</description>
		<content:encoded><![CDATA[<p>Andrea,</p>
<p>Yes, that makes a lot of sense.  Thanks for the explanation!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Andrea Giammarchi</title>
		<link>http://www.mooreds.com/wordpress/archives/546/comment-page-1#comment-2881</link>
		<dc:creator>Andrea Giammarchi</dc:creator>
		<pubDate>Fri, 09 Oct 2009 16:20:36 +0000</pubDate>
		<guid isPermaLink="false">http://www.mooreds.com/wordpress/archives/000546#comment-2881</guid>
		<description>&#039;cause the 256 chars key changes randomly and for each session, so I guess it&#039;s secure enough for that purpose: HTML5 sessionStorage emulation in every browser. I would not go for RC4 over static stored data, makes sense?</description>
		<content:encoded><![CDATA[<p>&#8217;cause the 256 chars key changes randomly and for each session, so I guess it&#8217;s secure enough for that purpose: HTML5 sessionStorage emulation in every browser. I would not go for RC4 over static stored data, makes sense?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: moore</title>
		<link>http://www.mooreds.com/wordpress/archives/546/comment-page-1#comment-2880</link>
		<dc:creator>moore</dc:creator>
		<pubDate>Fri, 09 Oct 2009 16:13:26 +0000</pubDate>
		<guid isPermaLink="false">http://www.mooreds.com/wordpress/archives/000546#comment-2880</guid>
		<description>Thanks for the link, Andrea.  Just curious why you went with RC4--it looks like there are some security issues: http://en.wikipedia.org/wiki/RC4</description>
		<content:encoded><![CDATA[<p>Thanks for the link, Andrea.  Just curious why you went with RC4&#8211;it looks like there are some security issues: <a href="http://en.wikipedia.org/wiki/RC4" rel="nofollow">http://en.wikipedia.org/wiki/RC4</a></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Andrea Giammarchi</title>
		<link>http://www.mooreds.com/wordpress/archives/546/comment-page-1#comment-2879</link>
		<dc:creator>Andrea Giammarchi</dc:creator>
		<pubDate>Fri, 09 Oct 2009 16:07:29 +0000</pubDate>
		<guid isPermaLink="false">http://www.mooreds.com/wordpress/archives/000546#comment-2879</guid>
		<description>Hi Dan, not sure this may interest you, but I have recently optimize an RC4 stream cheaper for JavaScript and it works pretty fast with every browser and  very long strings as well.
Have a look: http://sessionstorage.googlecode.com/svn/trunk/src/RC4.js
Regards</description>
		<content:encoded><![CDATA[<p>Hi Dan, not sure this may interest you, but I have recently optimize an RC4 stream cheaper for JavaScript and it works pretty fast with every browser and  very long strings as well.<br />
Have a look: <a href="http://sessionstorage.googlecode.com/svn/trunk/src/RC4.js" rel="nofollow">http://sessionstorage.googlecode.com/svn/trunk/src/RC4.js</a><br />
Regards</p>
]]></content:encoded>
	</item>
</channel>
</rss>
<!-- This Quick Cache file was built for (  www.mooreds.com/wordpress/archives/546/feed ) in 0.25157 seconds, on Feb 8th, 2012 at 10:48 pm UTC. -->
<!-- This Quick Cache file will automatically expire ( and be re-built automatically ) on Feb 8th, 2012 at 11:48 pm UTC -->
