[ANN] Buddy 0.6.0: Security library for clojure.

216 views
Skip to first unread message

Andrey Antukh

unread,
Jul 5, 2015, 3:30:23 AM7/5/15
to clo...@googlegroups.com
Hi!

I am happy to announce a new release of buddy, a security library for clojure.

Since the buddy is split in different modules, here relevant changes across all modules:

buddy-core:

- Improved padding's namespace api (has a little breaking change: `unpad!` function is replaced by `unpad`)
- Add high level interface for encrypt arbitrary length data using an encryption scheme. With initial support for: `:aes128-cbc-hmac-sha256`, `:aes192-cbc-hmac-sha384`, `:aes256-cbc-hmac-sha512`, `:aes128-gcm`, `:aes192-gcm` and `:aes256-gcm`.

buddy-sign:

- Code cleaning (removed many builtin crypto primitives that are already implemented and part of the public api of buddy-core).
- Fix some hidden bugs related to wrong padding's on the JWE implementation (thanks to new crypto primitives on the buddy-core).
- Dependencies updates.

buddy-auth:

- Dependencies updates.

buddy-hashers:

- More tests.
- Dependencies updates.

Github:


Documentation:


Cheers.
Andrey

--
Andrey Antukh - Андрей Антух - <ni...@niwi.nz>

Stéphane Tavera

unread,
Jul 6, 2015, 4:43:10 AM7/6/15
to clo...@googlegroups.com
Hey Andrey,

I have just begun looking at buddy.core, by following the documentation here:

It seems there is an error here (or there is something I did not get ??):
(-> (hmac/verify "foo bar" "61849448bdbb67b..." "mysecretkey" :sha256)
    (codecs/bytes->hex))
;; => true
Correct example in unit tests shows that verify works with a byte array and returns a boolean.


Let me know if I can help.
In the meantime, keep up the good work.

Cheers,
__
Stéphane Tavera

Andrey Antukh

unread,
Jul 6, 2015, 11:27:34 AM7/6/15
to clo...@googlegroups.com
Hi Stéphane Tavera!

Thank you very much for notice me about that documentation inconsistency. 
It is already fixed in master!

Cheers.
Andrey

--
You received this message because you are subscribed to the Google
Groups "Clojure" group.
To post to this group, send email to clo...@googlegroups.com
Note that posts from new members are moderated - please be patient with your first post.
To unsubscribe from this group, send email to
clojure+u...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/clojure?hl=en
---
You received this message because you are subscribed to the Google Groups "Clojure" group.
To unsubscribe from this group and stop receiving emails from it, send an email to clojure+u...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Stéphane Tavera

unread,
Jul 6, 2015, 12:44:44 PM7/6/15
to clo...@googlegroups.com
Hello,

you're welcome.

I still have an issue with the signature using String (instead of bytes array):
See this gist: 


Regards,
__
s t
Reply all
Reply to author
Forward
0 new messages