[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#668347: marked as done (RFP: d0-blind-id -- library for user identification using RSA blind signatures)

Your message dated Wed, 19 Nov 2025 16:00:28 +0000
with message-id <E1vLkbc-00CKjb-0O@fasolo.debian.org>
and subject line Bug#668347: fixed in d0-blind-id 1.0-1
has caused the Debian Bug report #668347,
regarding RFP: d0-blind-id -- library for user identification using RSA blind signatures
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
668347: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=668347
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message --- 
Package: wnpp
Severity: wishlist
X-Debbugs-Cc: debian-devel-games@lists.debian.org

* Package name    : d0-blind-id (upstream name: d0_blind_id)
  Version         : 0.5
  Upstream Author : Rudolf Polzer <divverent@xonotic.org>
* URL             : https://github.com/divVerent/d0_blind_id
* License         : 3-clause BSD
  Programming Lang: C
  Description     : library for user identification using RSA blind
signatures

d0_blind_id is an implementation of RSA "blind signatures",
Diffie-Hellmann key exchange and Schnorr identification. It can be used
by the DarkPlaces game engine (as used in Xonotic) to perform anonymous
 registration with a central server, providing cryptographic identities
which are used in Xonotic for access control on individual game servers.

This implementation has not been audited independently, and is not
currently recommended for non-game uses.

---

Xonotic upstream tell me that they would prefer Xonotic to not be
packaged at all than to be packaged without d0-blind-id support.

I'm happy to co-maintain/provide advice (I maintain other libraries),
but as with Xonotic itself, I'm not willing to be the only maintainer
for something I don't use myself.

Suggested binary packages: libd0-rijndael0 (AES implementation),
libd0-blind-id0 (the rest), libd0-blind-id-dev.

Privacy implications:

According to the Xonotic developers I spoke to, registration is normally
carried out automatically, once per user of Xonotic. The centralized
Xonotic server performs a "blind signature" on a public key generated by
the user, so it knows the IP address used for registration, but not the
public key or anything else about the user's identity. Individual game
servers receive the user's public key, the blind signature, and the
"blinding factor" necessary to check that the blind signature is valid.

The use of signatures and a centralized server (rather than just having
users present an unsigned public key) seems to be intended to allow
users to be banned from a game server, in the same way server admins for
proprietary games can ban users by an identity corresponding to their
purchase (Steam ID, battle.net ID, Quake III Arena, CD-key, or
whatever). Creation of identities is rate-limited by the server.

--- End Message ---
--- Begin Message --- 
Source: d0-blind-id
Source-Version: 1.0-1
Done: Sébastien Noel <sebastien@twolife.be>

We believe that the bug you reported is fixed in the latest version of
d0-blind-id, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 668347@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Sébastien Noel <sebastien@twolife.be> (supplier of updated d0-blind-id package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 05 Aug 2025 13:22:55 +0200
Source: d0-blind-id
Binary: libd0-blind-id-dev libd0-blind-id0 libd0-blind-id0-dbgsym libd0-rijndael0 libd0-rijndael0-dbgsym
Architecture: source amd64
Version: 1.0-1
Distribution: unstable
Urgency: low
Maintainer: Debian Games Team <pkg-games-devel@lists.alioth.debian.org>
Changed-By: Sébastien Noel <sebastien@twolife.be>
Description:
 libd0-blind-id-dev - library for user identification using RSA blind signatures - deve
 libd0-blind-id0 - library for user identification using RSA blind signatures
 libd0-rijndael0 - Advanced Encryption Standard implementation used by libd0-blind-i
Closes: 668347
Changes:
 d0-blind-id (1.0-1) unstable; urgency=low
 .
   [ David Bate ]
   * Initial release (Closes: #668347)
 .
   [ Simon McVittie ]
   * Add myself to Uploaders
   * debian/copyright: quote the form of the BSD license that is actually used
     (s/copyright holder/University/, s/its contributors/contributors/,
     s/REGENTS AND CONTRIBUTORS/AUTHOR AND CONTRIBUTOR(S)/)
   * Quote the (lack of) copyright and license of the PD AES implementation
   * Use dh-autoreconf
   * Add debug symbols
   * Bump priority to optional, since darkplaces will depend on it
   * Don't package /usr/bin/blind_id, it's more of an example or test than
     anything else; install its source code as an example instead
 .
   [ Sébastien Noel ]
   * Add myself to Uploaders
   * Update to 1.0 upstream release.
   * Update standards version to 4.7.2
   * Use recommended debhelper compat level 13
Checksums-Sha1:
 e03743f8af44f17154144a979b44772a865d3d75 2167 d0-blind-id_1.0-1.dsc
 983b993b48bcd706b843370f9f71258eadad9c81 49140 d0-blind-id_1.0.orig.tar.gz
 9083c0c6432a9b09602d586b431e1bc7c4b8dc7b 4276 d0-blind-id_1.0-1.debian.tar.xz
 2d6f96f18307feb1b6c8195d1c036fce7a5bd449 7519 d0-blind-id_1.0-1_amd64.buildinfo
 88d8da4292f3b9a170d1363c9a0b4d8f90671aa2 35248 libd0-blind-id-dev_1.0-1_amd64.deb
 5931ade16fef553ab2b2e12aab85435bce37dfed 52504 libd0-blind-id0-dbgsym_1.0-1_amd64.deb
 af817b0c882c25ca7f7a356c60dd893cd05d4623 21732 libd0-blind-id0_1.0-1_amd64.deb
 337601b9bb595d5ef16af46d871e72bf4dbcfc2e 7748 libd0-rijndael0-dbgsym_1.0-1_amd64.deb
 270b99034cebe40d7afbbaa33bec286328a0130e 12744 libd0-rijndael0_1.0-1_amd64.deb
Checksums-Sha256:
 dcf4e16f58730cd0e965896e7e9a5e4220c3e9e122928ffa1d2380d99803f6e7 2167 d0-blind-id_1.0-1.dsc
 4a8fc98423cfa774fe915473007f429b4923ff33b17dfe8a9e1cb4826a60ae84 49140 d0-blind-id_1.0.orig.tar.gz
 a57ddb5f0fed32275c5aaf6caeb489ce1ac08da3ddc0b1db3a52d294451420c8 4276 d0-blind-id_1.0-1.debian.tar.xz
 f611f6828053b26332610f4e81db39c9b55cc214136cf181cd9037c10ef3ecb7 7519 d0-blind-id_1.0-1_amd64.buildinfo
 1a2cbeaf422da951c5234ca428c8d457d9cdc568ede8ae29b968decc7a8c0f2b 35248 libd0-blind-id-dev_1.0-1_amd64.deb
 755ffbaa5933015f1d188d0e62ecb722a7f51d543e840965085fad56b2a67b79 52504 libd0-blind-id0-dbgsym_1.0-1_amd64.deb
 e453949267f691c71c233d88f32d9fe6f881e5212ab61d3ebe20b55fa76e1ecd 21732 libd0-blind-id0_1.0-1_amd64.deb
 71b1f69d1b2f82a6f67c0ede6a7acd68d9efe72accf01ccacaab4afbe9c5bfc8 7748 libd0-rijndael0-dbgsym_1.0-1_amd64.deb
 9dac1104b7cfae06d6d85ed66b82bed2fcbde22bca4e2b1b031bb0bf7635fe9d 12744 libd0-rijndael0_1.0-1_amd64.deb
Files:
 fb10145dc3177ff695a5ce15b1a0d0a4 2167 libs optional d0-blind-id_1.0-1.dsc
 9288af6a29a631c00ff0c8f506311135 49140 libs optional d0-blind-id_1.0.orig.tar.gz
 9b8bd3c7fb4f0ddb8681730973d1ffa3 4276 libs optional d0-blind-id_1.0-1.debian.tar.xz
 59891e6df1448e49545a6b3f029e6160 7519 libs optional d0-blind-id_1.0-1_amd64.buildinfo
 f704bf8491bba11131abbb8c2c2d549a 35248 libdevel optional libd0-blind-id-dev_1.0-1_amd64.deb
 1ca5d95df34ce39ff9135bb92ba24e02 52504 debug optional libd0-blind-id0-dbgsym_1.0-1_amd64.deb
 16f5827caaf2611482e4f618e1c1bf6d 21732 libs optional libd0-blind-id0_1.0-1_amd64.deb
 67d73c1b5b062283ed7f7684eb9caefc 7748 debug optional libd0-rijndael0-dbgsym_1.0-1_amd64.deb
 0fac0692306480068e22dfd7bca18493 12744 libs optional libd0-rijndael0_1.0-1_amd64.deb

-----BEGIN PGP SIGNATURE-----
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=p7gN
-----END PGP SIGNATURE-----

Attachment: pgpoQBwizWj32.pgp
Description: PGP signature


--- End Message ---
Reply to: