Cryptographic Library

Introduction

This package consists of a set of Smalltalk classes which implement various cryptographic functions; especially, hashing, encryption, decryption, random number generation, certificate handling and public key ring file parsing.

In addition, a sub-package implementing the SSL protocol (completely in Smalltalk, not using any C-code, and therefore immune to buffer overruns) is also available.

Supported Hash Algorithms

The cryptographic library includes implementations of the following hash algorithms:

HMAC
MD2, MD4 and MD5
MDC-2 (*1)
RipeMD160, RipeMD128
SHA1
SHA2: SHA224, SHA256, SHA384, SHA512
SHA3: SHA3-224, SHA3-256, SHA3-384, SHA3-512
SquareModN
Whirlpool

Supported Password Hash Algorithms

Algorithms for password handling:

CryptBlowfish (modern Unix password hashing)
LMHash (old Windows password hashing)
UnixCrypt (old Unix password encryption)

Supported Encryption/Decryption Algorithms

The cryptographic library includes implementations of the following crypt algorithms:

Blowfish
Carmellia
CAST5
CipherSaber
DES
GOST
IDEA (*2)
RC4 & RC6 (*3)
Rijndael (ie. AES)
RSA
SEED
Salsa20
Serpent
Skipjack
TEA & XTEA
Triple-DES

Key Handling and Support functions

Additional support is provided for:

DiffieHellman
ElGamal key generation
PGP keyring parsing
x509 certificates
pkcs signatures
Prime Number generation
Random Number generation

Documentation

This document is available upon request.

Licensing

These addOn packages are licensed separately from the base ST/X system.
Please contact eXept for license information & pricing.

(1): MDC-2 used to be covered by a patent which was not renewed in 2003 and would have expired anyway in 2007. It can therefore be used without royalties.
(2): IDEA is provided for non-commercial use only (see details in the PGP licence conditions);
for commercial use, a licence agreement with the IDEA patent holder may be required. Notice: the patent was applied in 1991, therefore expires in 2011-2012.
(3): RC6 is covered by a patent which expires 2018.
It is not guaranteed that RC6 can be used royalty-free, as the patent holder has not clearly stated his strategy. For commercial use, a licence agreement with the RC6 patent holder may be required.

<info@exept.de>

Doc $Revision: 1.35 $