[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: TOR in Java? [signed]

Java is simply a tool,
use it incorrectly or in the wrong context and yes it can be insecure as insecure as ANY other language
and it can also be very secure indeed.

      any claims made to the contrary are simply that claims

a tor port to java could be feasible for both security and performance reasons provided that the correct context and environments are used(ie crypto accelerators and native compilation as well as systrace environments and binary protections)
and I DONT like programming in JAVA(but I have to do it in real life for now).



           a Tor Operator

ps Christian I dont known about which lib that lexi is using BUT www.cryptix.org seems to have some fairly good code
that is used in the financial crypto community


ADB [c] wrote:

Dudes. For the 80,000th time.... Using Java is a bad idea for security reasons. Granted, an application-level implementation isn't as bad as using web-based applets, but still.
~ADB

Christian Beil wrote:

Hi Lexi,
which crypto library do you use. We were thinking about doing a Tor port to Java using the cryptlib library.
Is your code accessible?

Lexi Pimenidis schrieb:

On Thu, Oct 06, 2005 at 08:51:09PM CEST, Nick Mathewson wrote:

Hi,



need more implementations for the Tor protocol, and Java is a popular
choice these days. You might want to start with the code from the
Java Anon Proxy people; I don't know their current status here, but
for a while, they had a working Tor *client* written in Java.


our group is currently developing a Java-Client for the Tor-protocol in
Java. It's in a pre-alpha version, but we can connect and transmit data.
We expect to have something stable by the end of the year (and yes...
we're doing it in our spare time). We also took a look at the
JAP-Tor-Code and decided to write a new one from scratch.

Taking the code, it would be possible to e.g. compile tor into a
java-application.

Comments are welcome, of course :)

    Lexi











--
The domain Phoenixoflight.org is for sale! <http://www.sedo.com/search/details.php4?tracked=&partnerid=19673&language=us&domain=PHOENIXOFLIGHT.ORG> 

[ SECURITY NOTICE ]
To: or-talk@xxxxxxxxxxxxxx
For your security, firefox-gen@xxxxxxxxxx
digitally signed this message on 22 October 2005 at 01:25:57 UTC.
Verify this digital signature at http://www.ciphire.com/verify.
[ CIPHIRE DIGITAL SIGNATURE ]