<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div class="">Equally unfortunate:</div><div class=""><br class=""></div><div class=""><div style="margin: 0px; font-size: 14px; color: rgb(255, 255, 255); background-color: rgb(32, 32, 32);" class="">NotImplementedError: deadlock is Python 3 only, and is only known to run on 3.2 or above.</div></div><div class=""><br class=""></div><div class="">-g</div><br class=""><div style=""><blockquote type="cite" class=""><div class="">On Nov 20, 2014, at 18:21, David Reid <<a href="mailto:dreid@dreid.org" class="">dreid@dreid.org</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div dir="ltr" class="">Unrelated to PyCA there is at least one implementation of <a href="https://github.com/kaepora/miniLock/blob/master/README.md" class="">miniLock</a> written in Python called <a href="https://pypi.python.org/pypi/deadlock" class="">deadlock</a>, but it is unfortunately AGPLv3.<div class=""><div class=""><br class=""></div><div class="">-David<br class=""><div class=""><br class=""></div></div></div></div><div class="gmail_extra"><br class=""><div class="gmail_quote">On Thu, Nov 20, 2014 at 9:13 AM, Alex Gaynor <span dir="ltr" class=""><<a href="mailto:alex.gaynor@gmail.com" target="_blank" class="">alex.gaynor@gmail.com</a>></span> wrote:<br class=""><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">One thing to think about is making sure your scheme isn't vulnerable to truncation attacks.<span class="HOEnZb"><font color="#888888" class=""><br class=""><br class=""><div class="">Alex</div></font></span><div class="HOEnZb"><div class="h5"><br class=""><div class="gmail_quote">On Thu Nov 20 2014 at 9:11:23 AM Paul Kehrer <<a href="mailto:paul.l.kehrer@gmail.com" target="_blank" class="">paul.l.kehrer@gmail.com</a>> wrote:<br class=""><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div style="word-wrap:break-word" class=""><div style="font-family: Helvetica, Arial; font-size: 13px; margin: 0px;" class="">Stefan,</div><div style="font-family: Helvetica, Arial; font-size: 13px; margin: 0px;" class=""><br class=""></div><div style="font-family: Helvetica, Arial; font-size: 13px; margin: 0px;" class="">We’ve talked in the past about a recipe for file encryption. The general consensus has been that the project would prefer to implement an existing spec rather than creating one so for now I’m afraid creating your own is probably the “best” path unless you’re familiar with a standardized format that does this?</div><div style="font-family: Helvetica, Arial; font-size: 13px; margin: 0px;" class=""><br class=""></div><div style="font-family: Helvetica, Arial; font-size: 13px; margin: 0px;" class="">If you do choose to implement your own I’d suggest implementing it on top of Fernet using a frame* size that you consider to be a good trade off between ciphertext length per frame and the size of the HMAC. Ideally a spec similar to <a href="https://github.com/fernet/spec" target="_blank" class="">https://github.com/fernet/spec</a> could come out of it.</div><div style="font-family: Helvetica, Arial; font-size: 13px; margin: 0px;" class=""><br class=""></div><div style="font-family: Helvetica, Arial; font-size: 13px; margin: 0px;" class="">-Paul Kehrer</div> <div class=""><br class=""></div>* I’ve been using frame when talking about this type of encryption to avoid confusing it with the native block size of a block cipher, but record (like a TLS record) would be equally descriptive.</div><div style="word-wrap:break-word" class=""><br class=""><p style="" class="">On November 20, 2014 at 6:27:07 AM, Stefan Pochmann (<a href="mailto:stefan.pochmann@gmail.com" target="_blank" class="">stefan.pochmann@gmail.com</a>) wrote:</p> <blockquote type="cite" class=""><span class=""><div class=""><div class=""></div><div class="">
<div dir="ltr" class="">I like the Fernet recipe, but I'd like a better
recipe for files. One that doesn't want the entire message at once
(bad for big files) and that doesn't bloat with base64. Should I do
it myself with "hazardous materials" (I might adapt the Fernet
code) or will you maybe add such a recipe soon?
<div class=""><br class=""></div>
<div class="">Something like this maybe:</div>
<div class=""><br class=""></div>
<div class="">
<div class="">f = SomethingLikeFernetButForFiles(key)</div>
<div class="">for block in f.encrypt(filename, blocksize):</div>
<div class=""> myhandling(block)</div>
<div class=""><br class=""></div>
<div class="">Or with a handler parameter:</div>
<div class=""><br class=""></div>
<div class="">f = SomethingLikeFernetButForFiles(key)</div>
<div class="">f.encrypt(filename, blocksize, myhandling)</div>
</div>
<div class=""><br class=""></div>
<div class="">Stefan</div>
</div>
_______________________________________________
<br class="">Cryptography-dev mailing list
<br class=""><a href="mailto:Cryptography-dev@python.org" target="_blank" class="">Cryptography-dev@python.org</a>
<br class=""><a href="https://mail.python.org/mailman/listinfo/cryptography-dev" target="_blank" class="">https://mail.python.org/mailman/listinfo/cryptography-dev</a>
<br class=""></div></div></span></blockquote></div>______________________________<u class=""></u>_________________<br class="">
Cryptography-dev mailing list<br class="">
<a href="mailto:Cryptography-dev@python.org" target="_blank" class="">Cryptography-dev@python.org</a><br class="">
<a href="https://mail.python.org/mailman/listinfo/cryptography-dev" target="_blank" class="">https://mail.python.org/<u class=""></u>mailman/listinfo/cryptography-<u class=""></u>dev</a><br class="">
</blockquote></div>
</div></div><br class="">_______________________________________________<br class="">
Cryptography-dev mailing list<br class="">
<a href="mailto:Cryptography-dev@python.org" class="">Cryptography-dev@python.org</a><br class="">
<a href="https://mail.python.org/mailman/listinfo/cryptography-dev" target="_blank" class="">https://mail.python.org/mailman/listinfo/cryptography-dev</a><br class="">
<br class=""></blockquote></div><br class=""></div>
_______________________________________________<br class="">Cryptography-dev mailing list<br class=""><a href="mailto:Cryptography-dev@python.org" class="">Cryptography-dev@python.org</a><br class="">https://mail.python.org/mailman/listinfo/cryptography-dev<br class=""></div></blockquote></div><br class=""></body></html>