Subject: Re: Google contest
To: None <tech-security@netbsd.org>
From: David Maxwell <david@crlf.net>
List: tech-security
Date: 06/02/2005 10:44:29
On Thu, Jun 02, 2005 at 04:39:15PM +0200, Joerg Sonnenberger wrote:
> On Thu, Jun 02, 2005 at 04:33:20PM +0200, Peter Bex wrote:
> > I just mailed Jann Schaumann about the Google `Summer of Code' contest.
> > I would like to try my hand at the implementation of a BSD privacy guard,
> > but I'm afraid this project would be a bit too big to do in the short
> > timespan of the contest.  Also, I don't really have knowledge on
> > cryptography yet.  Are the algorithms difficult to implement?
> 
> No knowledge about cryptography is certainly a problem. I'd advise making
> yourself familiar with OpenSSL first, it already implements all the
> algorithms (missing perhaps the certificate formats). The problem is not
> so much in getting the algorithms working, but getting them right.

OpenSSL's license is BSD-like. So, it would be quite reasonable to use
OpenSSL for the crypto as a starting point, and implement just the PG
portion. That's quite doable over a summer.

der Mouse also has new crypto implementations as part of his SSH, some
of which could be usable.
	
							David