From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Ted Zlatanov Newsgroups: gmane.emacs.devel Subject: Re: [PATCH] package.el: check tarball signature Date: Wed, 02 Oct 2013 07:17:19 -0400 Organization: =?utf-8?B?0KLQtdC+0LTQvtGAINCX0LvQsNGC0LDQvdC+0LI=?= @ Cienfuegos Message-ID: <87li2bvs5c.fsf@flea.lifelogs.com> References: <874n92x9em.fsf@flea.lifelogs.com> Reply-To: emacs-devel@gnu.org NNTP-Posting-Host: plane.gmane.org Mime-Version: 1.0 Content-Type: text/plain X-Trace: ger.gmane.org 1380712660 6877 80.91.229.3 (2 Oct 2013 11:17:40 GMT) X-Complaints-To: usenet@ger.gmane.org NNTP-Posting-Date: Wed, 2 Oct 2013 11:17:40 +0000 (UTC) To: emacs-devel@gnu.org Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Wed Oct 02 13:17:43 2013 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([208.118.235.17]) by plane.gmane.org with esmtp (Exim 4.69) (envelope-from ) id 1VRKR3-0004Pi-HK for ged-emacs-devel@m.gmane.org; Wed, 02 Oct 2013 13:17:41 +0200 Original-Received: from localhost ([::1]:35346 helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1VRKR3-0006Ao-02 for ged-emacs-devel@m.gmane.org; Wed, 02 Oct 2013 07:17:41 -0400 Original-Received: from eggs.gnu.org ([2001:4830:134:3::10]:37522) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1VRKQv-0006Ac-42 for emacs-devel@gnu.org; Wed, 02 Oct 2013 07:17:39 -0400 Original-Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1VRKQm-0005ah-1n for emacs-devel@gnu.org; Wed, 02 Oct 2013 07:17:33 -0400 Original-Received: from plane.gmane.org ([80.91.229.3]:51030) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1VRKQl-0005ad-RY for emacs-devel@gnu.org; Wed, 02 Oct 2013 07:17:23 -0400 Original-Received: from list by plane.gmane.org with local (Exim 4.69) (envelope-from ) id 1VRKQj-000461-G0 for emacs-devel@gnu.org; Wed, 02 Oct 2013 13:17:21 +0200 Original-Received: from c-98-229-61-72.hsd1.ma.comcast.net ([98.229.61.72]) by main.gmane.org with esmtp (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Wed, 02 Oct 2013 13:17:21 +0200 Original-Received: from tzz by c-98-229-61-72.hsd1.ma.comcast.net with local (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Wed, 02 Oct 2013 13:17:21 +0200 X-Injected-Via-Gmane: http://gmane.org/ Mail-Followup-To: emacs-devel@gnu.org Original-Lines: 26 Original-X-Complaints-To: usenet@ger.gmane.org X-Gmane-NNTP-Posting-Host: c-98-229-61-72.hsd1.ma.comcast.net X-Face: bd.DQ~'29fIs`T_%O%C\g%6jW)yi[zuz6; d4V0`@y-~$#3P_Ng{@m+e4o<4P'#(_GJQ%TT= D}[Ep*b!\e,fBZ'j_+#"Ps?s2!4H2-Y"sx" Mail-Copies-To: never User-Agent: Gnus/5.130008 (Ma Gnus v0.8) Emacs/24.3.50 (gnu/linux) Cancel-Lock: sha1:rTCQKm8x9tHlvAq236fwr+RFDlA= X-detected-operating-system: by eggs.gnu.org: Genre and OS details not recognized. X-Received-From: 80.91.229.3 X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:163801 Archived-At: On Mon, 30 Sep 2013 18:56:18 -0400 Stefan Monnier wrote: DU> Well, I still don't understand why this is advertised as such a DU> difficult problem, particularly why package.el would need sign operation DU> with Emacs. Am I missing something? >> Yes, I think so. Checking package signatures in general was mostly >> resolved back in June 2013, I simply didn't have time to work on it >> until just now. SM> But the feature provided with the simple code of Daiki would already be SM> very useful. I know you had similar code working back then. Why not SM> install that already? Daiki Ueno has moved on with his v2 patch and it provides most of the desired functionality. It still lacks two things I consider important: per-archive signing and the verification of any downloaded file in a signed archive. Please let us know if you consider them important too and I'll collaborate with him to implement them. Meanwhile I've got all the Nettle hash functions and the ECB modes for the ciphers working, and am making progress on exposing the CBC and CTR ciphers, exposing RSA and DSA and ECC crypto, and writing ERT tests for the whole. I hope to have that work ready for review soon. Thanks Ted