06:16:36 <Kernspin> Guten Morgen / Bonjour / Доброе утро / Good morning.
11:25:50 <Abhoerschutz> Guten Mittag, Bon midi, Хороший полдень, Good noon.
13:54:31 <gitomat> [illumos-gate] 15025 hald can't anymore receive events with newer glib versions than 2.63.4 -- Carsten Grzemba <cgrzemba⊙oo>
21:14:16 <richlowe> maybe I'll regret this, but I can't resist asking.  What's "NIS+ extended Diffie-Hellman"?
21:14:31 <richlowe> (system/library/security/gss/diffie-hellman)
21:37:03 <arekinath> oh you will definitely regret asking that
21:40:51 <arekinath> it's a gss mech that publishes pubkeys for 1024-bit DH with a fixed group in NIS+
21:41:15 <richlowe> so it should have gone away with NIS+?
21:41:22 <arekinath> and uses them to establish TDEA (3 key 3DES) sessions
21:43:02 <arekinath> well, you can use it with the files backend as well
21:43:18 <arekinath> put the DH keys in /etc somewhere that momentarily escapes my memory
21:43:47 <arekinath> so you can actually test GSS with something that isn't krb5 haha
21:44:37 <arekinath> I actually use it for audit record sending, because it needs a GSS mech, the dummy one isn't built by default, and I don't actually care that much about the security level haha
21:45:51 <arekinath> it does also support 192-bit and 640-bit DH groups which is pretty amazing
21:46:06 <arekinath> you can probably break those in a couple of hours these days
21:47:49 <richlowe> you're right.  I didn't want to know.
21:48:15 <rmustacc> it feels like if you were able to do something less dh that might not be as bad?
21:49:46 <arekinath> also I say "session keys" but they're the same every time
21:50:02 <arekinath> and it takes them straight out of the DH output, not even any hashing
21:51:59 <arekinath> (same every time between a given pair of hosts)
21:52:30 <arekinath> so it's fixed-fixed DH, the worst kind
21:53:43 <arekinath> and capturing multiple sessions will probably let you do all sorts of nasty things
21:54:32 <arekinath> (so yeah it should probably go)
21:55:11 <arekinath> (learning about this thing was my inspiration for the tweet about making a gss mech plugin for the noise protocol)
21:56:12 <arekinath> (because it's kinda close to something useful, if it wasn't a cryptographic disaster zone -- wouldn't be that bad to be able to register host keys in a file or out of LDAP or whatever and use them to establish gss)
22:01:19 <arekinath> it also uses XDR, but in a kinda ugly way
22:01:29 <arekinath> anyway I would vote for deletion
22:01:57 <arekinath> suspect I'm the only one who has used it in the last 10 years, maybe 20
22:11:12 <arekinath> you'll probably also want to go remove or nop-out the bits of NSS which support getting the keys out of NIS/LDAP/files too
23:04:42 <richlowe> I haven't got further than going "What the heck is this?" while on an unrelated project jaunt
23:04:57 <richlowe> because even my non-crypto non-infosec brain said "God, these numbers after 'dh' are small"
23:06:38 <richlowe> but then the pkg checks decided to tell me something I got wrong _by inode number_
23:06:44 <richlowe> so I'm on a whole different angry journey