Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.maint.python > #11825

Re: [Help] Re: Bug#939181: cycle: Python2 removal in sid/bullseye

Path csiph.com!news.mixmin.net!aioe.org!bofh.it!news.nic.it!robomod
From Michael Kesper <mkesper@schokokeks.org>
Newsgroups linux.debian.maint.python
Subject Re: [Help] Re: Bug#939181: cycle: Python2 removal in sid/bullseye
Date Mon, 16 Sep 2019 12:00:01 +0200
Message-ID <yGVXz-6qj-5@gated-at.bofh.it> (permalink)
References <yGD4C-1Lw-1@gated-at.bofh.it> <yGVEe-6ip-9@gated-at.bofh.it>
X-Mailbox-Line From debian-python-request@lists.debian.org Mon Sep 16 09:57:26 2019
Old-Return-Path <mkesper@schokokeks.org>
X-Amavis-Spam-Status No, score=-11.02 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2, LDO_WHITELIST=-5, MURPHY_DRUGS_REL8=0.02, PGPSIGNATURE=-5, RCVD_IN_DNSWL_LOW=-0.7, SARE_MLH_Stock10=1.66] autolearn=ham autolearn_force=no
X-Policyd-Weight using cached result; rate: -5.5
Openpgp preference=signencrypt
Autocrypt addr=mkesper@schokokeks.org; prefer-encrypt=mutual; keydata= mQGiBEAc3nYRBAD+2hjAskx42DicUcKuvQy1QuCBez7pxhAiUES5JLb/SwcfRhlJIWgfgsSn x0euO8IP+eKp0+V3BSAKUWKYqKboDBzYNdxsI764KnbzBNJI6pxh9KVKlbsSxT1E1Bfp7tyl fQqG8IjTCIywtf2GWRKMrWFmTE0hOOBoaOU67LmdUwCgpdWIWPYgfWYojqItIkFCBLZwa1ED /iAiXKyVQgm4vOmbe9J6NzDsEaK2udPONHgcV5ckunUmdfocuSpFKhedlJ/+y5v2DuKZIWpJ /ASqVACbADBdzj0ogDokkeIUJLBIIjGwtgctTGZNXM5crHomU9BInMVXS4E+R7wr3WIfMsd7 D5216uq1bj2pCDIJWSoDc/cvMaZJA/4zPZL8n1Q0z2DJ9EfO9KvAK6Y6WSpEk60JDkuf9Sq/ krNbaIj1prViZaBE4cjawCo6lCI5jopROCFXudnphUY2A3RxT7ol6pRcEIjgd87Ro+q7TGUT 059nf5KCf9NGMcy2hx9p8O2tBy9SoITejdy0kjaA42G7HZ2/rdsXLNtHf7QnTWljaGFlbCBL ZXNwZXIgPG1rZXNwZXJAc2Nob2tva2Vrcy5vcmc+iGIEExECACIFAlXTjVcCGyMGCwkIBwMC BhUIAgkKCwQWAgMBAh4BAheAAAoJEEIIBcaJB0+tdjMAnR4dEcLKWTTreyyGAwARi2gyzDJ2 AKCXjb6yVzD/pzdRctgg+hC5+B9SybiLBES73PoBBACxm5+NGh2A5fiYezIUwcIUM1+J1M/D hWsDeoXtstuLpb0C+ZI9xjrKj4e7GxeblPxfAjznkL4SjITzINahFsUgsIXVtAgb3B2gd302 e8jSHln9zv9RbVOljwVOnO8NaQhU6fHdGacQBXoFt2VyaNJkoLyJuE1C6OlJuXMvdhyKeQAG KYjmBBgRAgAJBQJEu9z6AhsCAKgJEEIIBcaJB0+tnSAEGQECAAYFAkS73PoACgkQc5ivf1WD EDBbpwQAkm4tjp+HPF8uxtbg4rxaAfzNasaD+adLrXBDdUj+v6s4i3v4cbMhBjcA3wI9iNP7 jcc6+D2/QJfnxQ2tLUNBjHpTEs6PiYYh9EDDY3N/vTh1FAPppiztSZC0ufatmNnHD7q22GVO d3DPSZavVC/OAd830tR32tcDm6TvOL01tpQ+ugCeLp6vwDfdv5hPOtAi01wzahTpIn8Aljqj Do6sDW8yonCtVQKyma7Waie5AQ0EQBzejBAEALp0hrMJeIMZ3FqLyKwVyAQf72kyiOG7ggNf uTBBrYnqg+m2xvaOFi0qU6C4Ucr3wYNf9UCGSE1g8Yet5BOC4XFjxDd9+mSyiDss3tId7hEm N9Bnm6gnOkxoVDp1OEt7fgqLiV6RHeL7CWoQJNE3XTpxdnGcp4j4HeQTuiY6CypLAAMGA/9D yJz8pgcqLLu4WOSvAzncgYg7XiB89tJ4ZINxwMZEalYkSrRnsovQIAZb9Shl6nv+8iJjLTWi K6xBkEp8Rv1ADJqPuFbrvw9I0elPYm4AqDiEl3dGkiyU+ZBY9xdln59dSK2Pyz4NlN6IgGM8 RQWlSgeJX6nnhxrokeBMtYNz3ohGBBgRAgAGBQJAHN6MAAoJEEIIBcaJB0+tlBoAoKNhh/AB 2lw21kW0GyttzgjBDqV6AKCiuCeKD3s0ObAEIPZt4n89TjAy7LkBDQRV05EMAQgAujRoAXhH Witvpg0BuzrdXaNjPgwQoTHVp47u6Ud+naP2tNSY0A0MLISbyKDUurjCiRifnYX2jx7PRzxR grpg8EoU5NZynWoRTP9D524IiQupXPDtSBrUGEkgAWPVb+2e5ZGyMAmKk+yCeLsihGy1WL+c 9auf5NE5lQV0ftmEx4J4TVSJ9igWSozLXTOik+JtN2jlk3fVBYkcw4CffK77HCnJVfFwwIDd z+AcZBZEh/TFyN776WzLbu0AiilrmKgOidFMmK/Oaovnql/l+ccbzhosKKhKtehnM0zQqMq/ 0OJHy3Mk5+jXZMeKfmZpK21WrjlaavGtMy0pqcGJKY59TwARAQABiEkEGBECAAkFAlXTkQwC GwwACgkQQggFxokHT62u5QCeNQJn0Odo+Kn1C+PAWOAySRFA9vIAoI+UU8fW62GkBtFVwqyp ZHabjgFUuQGNBFXTjuYBDAC0bnCN3PhdzHkRc2MtFr4/e0l0DOxI8cxIPs7rofWQIKL9Jkbp Amp9Vt6HMYfhrkpX+ou4i/a0A+3xJ3Qq6PsQ7bsi3Qz56BcJtWJToD8fkQ6KUPiXOYpouLcv WAzukl+psx+xPO6OFCss6kkksCY2geDIOw50fqKoNqIryod/jAQrqkogNeZWwBKBmZoaEUd4 V0bIVuO/0iwiXcDCgb2msRsb2/BYWh5XvUMLg0dWDiLWloPyHJhusOQLH02dg4VQPU40GoRg qbWmb+rWuyaalOQ7HCTUElGszI2GxksGbCvhMup8VlpivP5yzgFY/74Tw+kLYqiWRfFO8CIV VMGAvi5ZvhYlmQn7lt1tAgAiTXGHW7xuh1W6PJ0TLr+O7p22yjBGCxm/JNvHe4aDYqil7VyT R7cEn8+9OuFeA6l7F9yiQYx+nnbYWYkF0PznSvVMehV80pKY9VvFNcIR5Q95Xy0u8hoHnqm1 x7pC04gdb5OGUvZoN9gf+uTrJHbu9vcAEQEAAYkB6AQYEQIACQUCVdOO5gIbAgGpCRBCCAXG iQdPrcDdIAQZAQIABgUCVdOO5gAKCRBg0UcEw+MusFjtC/4zqNcVEwwlm2yA9J1ZiAeI8goE Vqy0mdLnVJNHzWsRZSFU4Y4B5TZsK2DK8eqne9y4yGBJGoVQE7Rwlekp3ptVaImrZcKVo2q/ Nci8H4WViYX1UlVBiB4vA4KVBjcBbLpO518xDI57MHkKmR5CKsposTf0JwdsxSBB8kXuTFlE qkoaQjo0ISnpyaBJOx5UYiSnOmctP6Dxm9LbrV/RmQISJ+qUp4Ha/U8c2Af7YiATCn6bPODC evBWBKyTvUdzkyCYhwICe8sOIW/nngq/jAlMjcu+3yLFwaUho24WuciOLotZQ03CFBif7MQ6 1AxnDLGCNi3ptzZnpRs1T8R012I9sD/0pMk84DMZo/TZflvFWtfsawtmYzCkKf0WAXcUwCQh L4yVtRfOEls2cL+FVzzhVLC6hcnQTcGOv/LoXmgBR19c64NEiRDulC+WHna+TRcePy1yzi50 2llEyY+YZv99i+g/+lTAb9/iwPgxxSaMJn2qzehp1djYIXPnmuVKVlOsdwCfTdqmK1MjUNFk AT7xTyqzhNgjISEAnjcaKMPSZ6ngaA+2ciQ9Jkl6PLRe
User-Agent Mozilla/5.0 (X11; Linux x86_64; rv:60.0) Gecko/20100101 Thunderbird/60.8.0
MIME-Version 1.0
Content-Type multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="=_zucker.schokokeks.org-10525-1568627833-0001-2"
X-Mailing-List <debian-python@lists.debian.org> archive/latest/17361
List-ID <debian-python.lists.debian.org>
List-URL <https://lists.debian.org/debian-python/>
List-Archive https://lists.debian.org/msgid-search/14f9d1ff-52e5-084f-94a1-e31ea1b9f09d@schokokeks.org
Approved robomod@news.nic.it
Lines 92
Organization linux.* mail to news gateway
Sender robomod@news.nic.it
X-Original-Date Mon, 16 Sep 2019 11:56:48 +0200
X-Original-Message-ID <14f9d1ff-52e5-084f-94a1-e31ea1b9f09d@schokokeks.org>
X-Original-References <55ac32fe-a848-25c7-90ac-7eb7ede78eb7@p10link.net> <20190916093849.stchjxhwibsb7ydx@an3as.eu>
Xref csiph.com linux.debian.maint.python:11825

Show key headers only | View raw


[Multipart message — attachments visible in raw view] - view raw

Hi Andreas,

On 16.09.19 11:38, Andreas Tille wrote:
> Hi Peter,
> 
> On Sun, Sep 15, 2019 at 02:47:50PM +0100, peter green wrote:
>>>> tmp = rt.encrypt('Cycle{}'.format(pickle.dumps(objSave)))
>>>
>>> Thanks to this hint
>> This hint was *wrong*, it will introduce garbage into the string and the "rotor" code is clearly designed to work with byte strings, not unicode strings.
>>
>> Change it to
>>
>> "tmp=rt.encrypt( b'Cycle'+pickle.dumps(objSave) )"

Oops, got that backwards. Thanks for spotting this.
 
> Thanks a lot for your patience.  Unfortunately this is not
> yet the final solution:
> 
> ...
> Traceback (most recent call last):
>   File "/usr/bin/cycle", line 83, in OnCloseWindow
>     Save_Cycle(cycle.name, cycle.passwd, cycle.file)
>   File "/usr/share/cycle/save_load.py", line 46, in Save_Cycle
>     tmp=rt.encrypt( b'Cycle'+pickle.dumps(objSave) )
>   File "/usr/share/cycle/p_rotor.py", line 63, in encrypt
>     return self.cryptmore(buf, 0)
>   File "/usr/share/cycle/p_rotor.py", line 88, in cryptmore
>     c = rotors[i][c ^ pos[i]]
> TypeError: unsupported operand type(s) for ^: 'int' and 'float'

That code could be patched by using int() around potentially float
numbers. But honestly, it should better be ripped out and use
real encryption. The docstring tells so:
The rotor module has been removed from the Python 2.4
distribution because

      the rotor module uses an insecure algorithm and is deprecated.
      ==============================================================

Best wishes
Michael

Back to linux.debian.maint.python | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Bug#939181: [Help] Re: Bug#939181: cycle: Python2 removal in sid/bullseye peter green <plugwash@p10link.net> - 2019-09-15 16:00 +0200
  Bug#939181: [Help] Re: Bug#939181: cycle: Python2 removal in sid/bullseye Andreas Tille <andreas@an3as.eu> - 2019-09-16 11:50 +0200
    Re: [Help] Re: Bug#939181: cycle: Python2 removal in sid/bullseye Michael Kesper <mkesper@schokokeks.org> - 2019-09-16 12:00 +0200
      Re: [Help] Re: Bug#939181: cycle: Python2 removal in sid/bullseye Andreas Tille <andreas@an3as.eu> - 2019-09-18 17:50 +0200

csiph-web