Generic CFB implementation in pure Perl. The Cipher Feedback Mode module
constructs a stream cipher from a block cipher or cryptographic hash funtion
and returns it as an object. Any block cipher in the Crypt:: class can be
used, as long as it supports the blocksize and keysize methods. Any hash
function in the Digest:: class can be used, as long as it supports the
add method.
This module is a complete working Perl implementation of the Enigma Machine
used during World War II. The cipher calculations are based on actual Enigma
values and the resulting ciphered values are as would be expected from an
Enigma Machine.
The implementation allows for all of the Rotors and Reflectors available to the
real world Enigma to be used. A Steckerboard has also been implemented,
allowing letter substitutions to be made.
The Digest::SHA1 module allows you to use the NIST SHA-1 message
digest algorithm from within Perl programs. The algorithm takes as
input a message of arbitrary length and produces as output a 160-bit
"fingerprint" or "message digest" of the input.
You will need Perl version 5.004 or better to install this module.
Copyright 1999-2001 Gisle Aas.
Copyright 1997 Uwe Hollerbach.
This library is free software; you can redistribute it and/or
modify it under the same terms as Perl itself.
Module::Signature adds cryptographic authentications to CPAN
distributions, via the special SIGNATURE file.
If you are a module user, all you have to do is to remember
running "cpansign -v" (or just "cpansign") before issuing
"perl Makefile.PL" or "perl Build.PL"; that will ensure the
distribution has not been tampered with.
For module authors, you'd want to add the SIGNATURE file to
your MANIFEST, then type "cpansign -s" before making a distribution.
PScan is a C source code security scanner, which looks for misuse of
libc functions which use varargs and printf-style formatting
operators. In many situations these can cause security vulnerabilities
in the application if it runs with privileges (setugid, or listening
to a network socket, etc).
An example of the kind of situation pscan looks for is the following:
variable = "%s"; /* or malicious user input */
sprintf(buffer, variable); /* BAD! */
Digest::SHA3 is a complete implementation of the NIST SHA-3 cryptographic hash
function, as specified in Draft FIPS 202 (SHA-3 Standard: Permutation-Based
Hash and Extendable-Output Functions).
The module gives Perl programmers a convenient way to calculate SHA3-224,
SHA3-256, SHA3-384, and SHA3-512 message digests, as well as variable-length
hashes using SHAKE128 and SHAKE256. Digest::SHA3 can handle all types of input,
including partial-byte data.
fchksum is a Python module to find the checksum of files. Currently it
supports crc32 and md5 checksums.
The advantage of using fchksum over the python md5 and zlib(.crc32) modules
is both ease of use and speed. You only need to tell it the filename and the
actual work is done by C code. Compared to the implementing a read loop in
python with the standard python modules, fchksum is approximatly 2.0x faster
in md5 and 1.1x faster in crc32.
LibreSSL is an open-source implementation of the Secure Sockets Layer (SSL) and
Transport Layer Security (TLS) protocols. It was forked from the OpenSSL
cryptographic software library in April 2014 as a response by OpenBSD
developers to the Heartbleed security vulnerability in OpenSSL,
with the aim of refactoring the OpenSSL code so as to provide a more secure
implementation.
LibreSSL was forked from the OpenSSL library starting with the 1.0.1g branch
and will follow the security guidelines used elsewhere in the OpenBSD project.
Razorback is a framework for an intelligence driven security solution.
It consists of a Dispatcher at the core of the system, surrounded by
Nuggets of varying types.
The scripting nugget uses XML across named pipes to pass registration,
alerting and logging information back to the system. This allows the
use of any scripting (or even compiled) language that can pass XML out
STDOUT with Razorback.
Graphical certification authority is an interface for managing RSA keys
and certificates, and the creation and signing of PKCS#10 requests. It
uses the OpenSSL library and a Berkeley DB for key and certificate
storage. It supports importing and exporting keys and PEM DER PKCS8
certificates, signing and revoking of PEM DER PKCS12, and selection of
x509v3 extensions. A tree view of certificates is presented.