[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#451355: marked as done (ITP: libgfshare -- library and utilities for multi-way secret sharing)

Your message dated Tue, 04 Dec 2007 23:37:49 +0000
with message-id <E1IzhKn-0000a2-3u@ries.debian.org>
and subject line Bug#451355: fixed in libgfshare 1.0.2-1
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)
--- Begin Message --- 
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Package: wnpp
Severity: wishlist
Owner: Simon McVittie <smcv@ianadd.pseudorandom.co.uk>


* Package name    : libgfshare
  Version         : 1.0.2+bzr20070822
  Upstream Author : Daniel Silverstone <dsilvers@digital-scurf.org>
* URL             : http://www.digital-scurf.org/software/libgfshare
* License         : MIT
  Programming Lang: C
  Description     : library and utilities for multi-way secret sharing

 This library implements Shamir's method for secret sharing, which can be
 used to split a secret (like a GPG secret key) into multiple parts, so that
 at least some number of those parts are needed to recover the original file,
 but any smaller combination of parts is useless to an attacker.
 .
 For instance, you might split a GPG key using a 3-of-5 share and put one
 share on each of three computers, and two shares on a USB memory stick; then
 you can use the GPG key on any of those three computers using the memory
 stick, but if the memory stick is lost, you can recover the key by
 bringing the three computers together.

As well as a set of library packages, I intend to package the gfsplit and
gfcombine command-line utilities as a binary package gfshare-utils.
I'm in contact with the upstream author, and have asked him to release
current bzr as 1.0.3, but until then I'm going to package what's in bzr.

If anyone's interested: I have vague plans to write a FUSE filesystem that
works like a cross between gfcombine and unionfs, and the upstream author has
told me that Søren Hansen <http://warma.dk/blog/> has similar plans.

Packaging in progress: http://bzr.debian.org/~smcv-guest/bzr/libgfshare
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: OpenPGP key: http://www.pseudorandom.co.uk/2003/contact/ or pgp.net

iD8DBQFHPBlFWSc8zVUw7HYRAn3OAKDi2iX/nIW7bRmgkci/J2qVP7w49ACgslX7
iYrFI4psVNiHb81bVGjBbIY=
=QFEv
-----END PGP SIGNATURE-----

--- End Message ---
--- Begin Message --- 
Source: libgfshare
Source-Version: 1.0.2-1

We believe that the bug you reported is fixed in the latest version of
libgfshare, which is due to be installed in the Debian FTP archive:

libgfshare-bin_1.0.2-1_amd64.deb
  to pool/main/libg/libgfshare/libgfshare-bin_1.0.2-1_amd64.deb
libgfshare-dbg_1.0.2-1_amd64.deb
  to pool/main/libg/libgfshare/libgfshare-dbg_1.0.2-1_amd64.deb
libgfshare-dev_1.0.2-1_amd64.deb
  to pool/main/libg/libgfshare/libgfshare-dev_1.0.2-1_amd64.deb
libgfshare1_1.0.2-1_amd64.deb
  to pool/main/libg/libgfshare/libgfshare1_1.0.2-1_amd64.deb
libgfshare_1.0.2-1.diff.gz
  to pool/main/libg/libgfshare/libgfshare_1.0.2-1.diff.gz
libgfshare_1.0.2-1.dsc
  to pool/main/libg/libgfshare/libgfshare_1.0.2-1.dsc
libgfshare_1.0.2.orig.tar.gz
  to pool/main/libg/libgfshare/libgfshare_1.0.2.orig.tar.gz



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 451355@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Simon McVittie <smcv@ianadd.pseudorandom.co.uk> (supplier of updated libgfshare package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.7
Date: Sun, 25 Nov 2007 15:28:27 +0000
Source: libgfshare
Binary: libgfshare1 libgfshare-bin libgfshare-dev libgfshare-dbg
Architecture: source amd64
Version: 1.0.2-1
Distribution: unstable
Urgency: low
Maintainer: Simon McVittie <smcv@ianadd.pseudorandom.co.uk>
Changed-By: Simon McVittie <smcv@ianadd.pseudorandom.co.uk>
Description: 
 libgfshare-bin - utilities for multi-way secret-sharing
 libgfshare-dbg - library for multi-way secret-sharing (debug symbols)
 libgfshare-dev - library for multi-way secret-sharing (headers)
 libgfshare1 - library for multi-way secret-sharing
Closes: 451355
Changes: 
 libgfshare (1.0.2-1) unstable; urgency=low
 .
   * Initial release in Debian. (Closes: #451355)
   * debian/patches/0042-allow-2of2.patch, upstream bzr r42:
     Allow degenerate case (2-of-2 share) for least astonishment
   * debian/patches/0043-devurandom.patch, part of upstream bzr r43:
     In gfsplit, use /dev/urandom rather than rand() for randomness, for
     better cryptographic safety
   * debian/patches/0044-fallback.patch, upstream bzr r44: Fall back from
     /dev/urandom to rand(), with a warning, if necessary
 .
   * Packaged from scratch, but should be basically compatible with the
     version in Ubuntu. Changes relative to Ubuntu, for information:
     - the above patches from upstream bzr
     - does not have Soren Hansen's patch to allow gfcombine to output to
       stdout (not yet upstream)
     - better package descriptions (IMO)
     - machine-readable debian/copyright file with explicit licensing for
       packaging (the same as the source)
     - libgfshare-dev does not depend on libc6-dev, to be installable on
       alpha, ia64 etc.
     - libgfshare(5) is in libgfshare-dev rather than libgfshare1 (so the
       former Replaces: Ubuntu versions of the latter)
     - libgfshare-dev is in Section: libdevel
     - libgfshare-dbg added
     - debian/watch added
Files: 
 5afcc4a4729755bb6af6bd1982f79250 780 devel extra libgfshare_1.0.2-1.dsc
 cf0aa6a08f23687b6435bcc6119454ba 312037 devel extra libgfshare_1.0.2.orig.tar.gz
 19c5ce443c58ebb32ff2e09b942994dd 3635 devel extra libgfshare_1.0.2-1.diff.gz
 813fb4ae542a42fbba2478e0a912efa4 14934 utils extra libgfshare-bin_1.0.2-1_amd64.deb
 ba3ac5db4f6b016be3697ea47fbfb1b4 7214 libs extra libgfshare1_1.0.2-1_amd64.deb
 7cd61abbd71e7500e6c7c8d13f69f287 6842 libdevel extra libgfshare-dev_1.0.2-1_amd64.deb
 c11aad7591a0cb670855985e9c049914 12646 libdevel extra libgfshare-dbg_1.0.2-1_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFHTqDuWSOgCCdjSDsRAjWWAJ9gd5oLJ1DwiEnG3fmCk/ciIAQpZwCbBGtw
eJIQQzNECcBBlWPXvNSReJo=
=AASO
-----END PGP SIGNATURE-----

--- End Message ---
Reply to: