Conversation

Notices

1. Embed this notice
   Aaron Toponce ⚛️:debian: (atoponce@fosstodon.org)'s status on Wednesday, 03-Apr-2024 16:05:32 JST Aaron Toponce ⚛️:debian:

   An idea crashed into my head over the weekend and now I'm committed to seeing it through.

   In addition to the Spritz cipher as a DRBG for PassGen3, what if I also added the ChaCha8 and Trivium stream ciphers, allowing the user to choose?

   ChaCha8 is written and passes test vectors. Implementing it though means adding "absorb(data)" and "squeeze(count)" functions so I have a consistent API with Spritz.

   Trivium is written but doesn't pass test vectors. I'm pulling my hair out as to why.

   • Embed this notice
     Ryan Castellucci :nonbinary_flag: (ryanc@infosec.exchange)'s status on Wednesday, 03-Apr-2024 16:05:30 JST Ryan Castellucci :nonbinary_flag:

     in reply to

     @atoponce can you add the eff wordlists?

   • Embed this notice
     Aaron Toponce ⚛️:debian: (atoponce@fosstodon.org)'s status on Wednesday, 03-Apr-2024 16:05:31 JST Aaron Toponce ⚛️:debian:

     in reply to

     Hmm. Passing some, failing others. I *think* I know what the problem is, but I think I might forego it for the time being. I'm using it for randomness extraction to generate passwords, not to encrypt/decrypt data. So it should be fine.

   • Embed this notice
     Aaron Toponce ⚛️:debian: (atoponce@fosstodon.org)'s status on Wednesday, 03-Apr-2024 16:05:31 JST Aaron Toponce ⚛️:debian:

     in reply to

     If you want to play around with it.

     https://atoponce.github.io/passgen3/

   • Embed this notice
     Aaron Toponce ⚛️:debian: (atoponce@fosstodon.org)'s status on Wednesday, 03-Apr-2024 16:05:32 JST Aaron Toponce ⚛️:debian:

     in reply to

     Got the ChaCha RNG working with "absorb" and "squeeze" sponge-like functionality (it's cheating).

     I think I need to completely rewrite my Trivium code and take a different approach. I just can't match the test vectors. Probably something to do with endianess.

   • Embed this notice
     Aaron Toponce ⚛️:debian: (atoponce@fosstodon.org)'s status on Wednesday, 03-Apr-2024 16:05:32 JST Aaron Toponce ⚛️:debian:

     in reply to

     HUZZAH! Trivium test vectors pass. Time to integrate.

     Much excite.

   • Embed this notice
     Aaron Toponce ⚛️:debian: (atoponce@fosstodon.org)'s status on Wednesday, 03-Apr-2024 21:43:52 JST Aaron Toponce ⚛️:debian:

     in reply to

     • Ryan Castellucci :nonbinary_flag:

     @ryanc Let me think about it.. I stuck with Diceware to pay homage to Arnold Reinhold, seeing as though it's based on his PassGen2. But it could probably use another word list.

   • Embed this notice
     Ryan Castellucci :nonbinary_flag: (ryanc@infosec.exchange)'s status on Wednesday, 03-Apr-2024 21:43:52 JST Ryan Castellucci :nonbinary_flag:

     in reply to

     @atoponce I really like the EFF "short" wordlist - diceware has a lot of obscure words which makes it harder to remember.