Re: [tor-dev] Attentive Otter: Analysis of xmpp-client

2013-10-08 Thread coderman
On Tue, Oct 8, 2013 at 8:40 PM, Watson Ladd wrote: > ... > The _easy_ fix is to make go.crypto constant time, "You Keep Using That Word, I Do Not Think It Means What You Think It Means" ___ tor-dev mailing list tor-dev@lists.torproject.org https://list

Re: [tor-dev] Attentive Otter: Analysis of xmpp-client

2013-10-08 Thread Watson Ladd
On Tue, Oct 8, 2013 at 4:49 PM, Mike Perry wrote: > Jurre van Bergen: > > > > *OTR* > > OTR support comes from the Go crypto package: > > https://code.google.com/p/go.crypto/ > > This library only has support for OTRv2 and not the latest OTRv3 > > specification. If we want to be resistant to seve

Re: [tor-dev] Attentive Otter: Analysis of xmpp-client

2013-10-08 Thread Mike Perry
Jurre van Bergen: > > *OTR* > OTR support comes from the Go crypto package: > https://code.google.com/p/go.crypto/ > This library only has support for OTRv2 and not the latest OTRv3 > specification. If we want to be resistant to several attacks[1] on the > OTR protocol, we need to reimplement th

Re: [tor-dev] Attentive Otter: Analysis of xmpp-client

2013-10-07 Thread Nima
intrigeri: > Jurre van Bergen wrote (07 Oct 2013 18:50:08 GMT) : >>> Unfortunately, it's not in Debian. I've found no RFP or ITP either. >>> >>> Anyone here with sufficient understanding of both Go and Debian >>> packaging, and wants to add it to Debian? Or should I file a RFP? >> I see: >> [~] apt

Re: [tor-dev] Attentive Otter: Analysis of xmpp-client

2013-10-07 Thread intrigeri
Jurre van Bergen wrote (07 Oct 2013 18:50:08 GMT) : >> Unfortunately, it's not in Debian. I've found no RFP or ITP either. >> >> Anyone here with sufficient understanding of both Go and Debian >> packaging, and wants to add it to Debian? Or should I file a RFP? > I see: > [~] apt-cache search golan

Re: [tor-dev] Attentive Otter: Analysis of xmpp-client

2013-10-07 Thread Claudio
On 10/07/2013 09:05 PM, Runa A. Sandvik wrote: > On Mon, Oct 7, 2013 at 5:21 PM, Jurre van Bergen > wrote: >> *Mac OS X* >> * Package exists for Go - http://golang.org/doc/install#osx > > Packages exist, but I hear installing Go on OS X is not exactly > straight forward (I believe Steven gave thi

Re: [tor-dev] Attentive Otter: Analysis of xmpp-client

2013-10-07 Thread Runa A. Sandvik
On Mon, Oct 7, 2013 at 5:21 PM, Jurre van Bergen wrote: > *Mac OS X* > * Package exists for Go - http://golang.org/doc/install#osx Packages exist, but I hear installing Go on OS X is not exactly straight forward (I believe Steven gave this a try at the previous Tor dev meeting). > * There isn't

Re: [tor-dev] Attentive Otter: Analysis of xmpp-client

2013-10-07 Thread Jurre van Bergen
On 10/07/2013 08:44 PM, intrigeri wrote: > Hi, > > Jurre van Bergen wrote (07 Oct 2013 17:21:42 GMT) : >> Below you can find the analysis of xmpp-client for the Attentive otter >> project, written by dgoulet, nickm, arlo, asn and myself. > Thanks a lot. > >> *Linux* Packaged in most distributions.

Re: [tor-dev] Attentive Otter: Analysis of xmpp-client

2013-10-07 Thread intrigeri
Hi, Jurre van Bergen wrote (07 Oct 2013 17:21:42 GMT) : > Below you can find the analysis of xmpp-client for the Attentive otter > project, written by dgoulet, nickm, arlo, asn and myself. Thanks a lot. > *Linux* Packaged in most distributions. Unfortunately, it's not in Debian. I've found no R

Re: [tor-dev] Attentive Otter: Analysis of xmpp-client

2013-10-07 Thread Leif Ryge
On Mon, Oct 07, 2013 at 07:21:42PM +0200, Jurre van Bergen wrote: > [...] > *Is traffic send over Tor?* > Yes, xmpp-client has support for sending all traffic over Tor, this > includes connecting to onion's. When you connect to jabber.ccc.de or the > riseup.net jabber service, you are automaticall

[tor-dev] Attentive Otter: Analysis of xmpp-client

2013-10-07 Thread Jurre van Bergen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hoi, Below you can find the analysis of xmpp-client for the Attentive otter project, written by dgoulet, nickm, arlo, asn and myself. All the best, Jurre - Intro xmpp-client is a simple XMPP client written in pure Go with OTRv2 support.