Gajim-devel May 2014

gajim-devel@gajim.org

2 participants
3 discussions

Start a nNew thread

Re: [Gajim-devel] Gajim on Mac OS X 10.9
by Genghis Khan 31 May '14

31 May '14

1 0

OTR vs. XTLS
by Fedor Brunner 24 May '14

24 May '14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 There was a question about what is the difference between OTR and XTLS . The basic design of the OTR protocol and it's strengths are described here: https://otr.cypherpunks.ca/otr-wpes.pdf https://otr.cypherpunks.ca/Protocol-v3-4.0.0.html The XTLS protocol is using TLS for encryption and authentication. The specification: https://tools.ietf.org/html/draft-meyer-xmpp-e2e-encryption-02 Basic security properties of the protocols: - - Both protocols provide end-to-end protection of XMPP content, they don't protect any information on the XMPP server (contacts, etc.), they don't protect you from traffic analysis (who you are communicating with, when, your IP address) - - Both protocols protect only online messages, offline messages are NOT protected. (XMPP server can change a contact from online to offline at any moment) - - XMPP server can block the initialization of both OTR, XTLS - - OTR protects only text messages, there are proposals to extend the protection also to file transfers - - XTLS protects Jingle sessions XEP-0166, this can be used to protect XML streams - text messages(XEP-0247), file transfers XEP-0234, and with SRTP also audio/video XEP-0167. Cryptographic properties of the protocols: - - Both protocols support Forward secrecy - - OTR uses 128-bit AES in counter mode for encryption - - OTR uses HMAC-SHA-1 for integrity protection - - OTR uses DSA with 1024 bit keys for signatures - - OTR uses Diffie-Hellman key exchange using 1536-bit prime - - Algorithms used for XTLS depend on the TLS library and TLS client/serversettings. For example in Gajim with recent OpenSSL library: - AES-GCM with 256-bit for encryption and integrity protection - Diffie-Hellman key exchange using 4096-bit prime - Signatures using 4096-bit RSA certificates The 1024-bit DSA keys in OTR are very short. According to "Yearly Report on Algorithms and Keysizes (2012)" they provide only "Short-term protection against medium organizations, medium-term protection against small organizations". http://www.ecrypt.eu.org/documents/D.SPA.20.pdf Current implementation in Gajim: - - OTR plugin is used only for text messages - - XTLS is used only for file transfers, the current implementation does NOT do certificate checking = no protection from MiTM attacks. - - Gajim implements also protection using Essions XEP-0218 for text messages. - - Gajim implements also protection using OpenPGP XEP-0027, this protects online and offline messages using PGP -----BEGIN PGP SIGNATURE----- iQJ8BAEBCgBmBQJTgFlwXxSAAAAAAC4AKGlzc3Vlci1mcHJAbm90YXRpb25zLm9w ZW5wZ3AuZmlmdGhob3JzZW1hbi5uZXQ4QkVFQ0NBRDcyNzU1RTk2RTQwMzlEQjc2 RTE3NDA5NTQwNTY2M0FEAAoJEG4XQJVAVmOtDwYP/2Qz7jSmVUB7pGoh5p/wjPzp KYw9dlwIgT2o7vtx3wdpZvcUdQkmjT/X5b2C1BMSlv845SiYDInw9RxE0YViZYBX AvSbGTtgYzp7CJ2L7NI9zSPwM0MlFjuXaWHhk6ErGcpKTqT+dVBVrhe4jp9sepiW 7gMjrXFfip6d5h/js84GrXrqayc8uubyTf2quxGnwb0jesN3IuClLD27XnJQerv+ tlPbmHU22AZDVSFsymLQiexuq9JHQA+DG0HitjGRCfKgLKfgae6A2yTsZa3Kf/gO GFu+9Uwx/363yWAvfjFjotpEr6hmxwkfV75B7PyoLcppvH1fEouogopqWVCI3ru6 ChnC2zEv1UdNDqpO4HybB5jxZAwTzs+V+2F5e1pv/2ugT8TZFUb9zFzFj/SCqzT6 ugYZ9TFMBQrz6xyrM4SmQio3hzYmxVyfQcqiW5fDsE2nweGdl3UNQnYF5RXxnNDl HRaQ9spi+mj/uANPb5Z8BAjaItjgt5PDsCwTHsD4sDe8Rdh+EBLtgDpt9GT1/ezf cEyItmd33CqfiQsQUjv8VJew5NgNwsBoxVAze3n483SJ5mPU1YYELZ6XX5sluL4u IFZlOcUOy3YkglgR59lMX+mXap0XgI5YCHX6ihyYqWOFzwg3H98g/t/UQnAm2Fc8 ii3zhySgvNGOli5qdkMI =Xhfc -----END PGP SIGNATURE-----

1 0

Re: [Gajim-devel] Improve loading of roster items
by Genghis Khan 22 May '14

22 May '14

On Mon, 24 Feb 2014 18:10:46 +0100 Yann Leboulanger <asterix(a)lagaule.org> wrote: > On 02/21/2014 06:46 AM, Genghis Khan wrote: > > Hello, > > > > > > There is a problem with Gajim which, I suspect, is related to SQLite > > file cache.db. > > What is Gajim supposed to read in the DB on startup ? > > What I suspect is more the vcard reading / parsing to show the > avatars in roster. > When ACE preference "ask_avatars_on_startup" is deactivated, the amount of time it takes for roster to be fully loaded is fairly less. The person I queried did not provide precise findings of time period or disk writing I/O rate, just empiric. By "fairly less", I guess he meant that the loading period was noticeably lesser. -- () ascii ribbon campaign - against html e-mail /\ www.asciiribbon.org - against proprietary attachments

1 0

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

Gajim-devel May 2014