head	1.1;
access;
symbols
	pkgsrc-2026Q3:1.1.0.100
	pkgsrc-2026Q3-base:1.1
	pkgsrc-2026Q2:1.1.0.98
	pkgsrc-2026Q2-base:1.1
	pkgsrc-2026Q1:1.1.0.96
	pkgsrc-2026Q1-base:1.1
	pkgsrc-2025Q4:1.1.0.94
	pkgsrc-2025Q4-base:1.1
	pkgsrc-2025Q3:1.1.0.92
	pkgsrc-2025Q3-base:1.1
	pkgsrc-2025Q2:1.1.0.90
	pkgsrc-2025Q2-base:1.1
	pkgsrc-2025Q1:1.1.0.88
	pkgsrc-2025Q1-base:1.1
	pkgsrc-2024Q4:1.1.0.86
	pkgsrc-2024Q4-base:1.1
	pkgsrc-2024Q3:1.1.0.84
	pkgsrc-2024Q3-base:1.1
	pkgsrc-2024Q2:1.1.0.82
	pkgsrc-2024Q2-base:1.1
	pkgsrc-2024Q1:1.1.0.80
	pkgsrc-2024Q1-base:1.1
	pkgsrc-2023Q4:1.1.0.78
	pkgsrc-2023Q4-base:1.1
	pkgsrc-2023Q3:1.1.0.76
	pkgsrc-2023Q3-base:1.1
	pkgsrc-2023Q2:1.1.0.74
	pkgsrc-2023Q2-base:1.1
	pkgsrc-2023Q1:1.1.0.72
	pkgsrc-2023Q1-base:1.1
	pkgsrc-2022Q4:1.1.0.70
	pkgsrc-2022Q4-base:1.1
	pkgsrc-2022Q3:1.1.0.68
	pkgsrc-2022Q3-base:1.1
	pkgsrc-2022Q2:1.1.0.66
	pkgsrc-2022Q2-base:1.1
	pkgsrc-2022Q1:1.1.0.64
	pkgsrc-2022Q1-base:1.1
	pkgsrc-2021Q4:1.1.0.62
	pkgsrc-2021Q4-base:1.1
	pkgsrc-2021Q3:1.1.0.60
	pkgsrc-2021Q3-base:1.1
	pkgsrc-2021Q2:1.1.0.58
	pkgsrc-2021Q2-base:1.1
	pkgsrc-2021Q1:1.1.0.56
	pkgsrc-2021Q1-base:1.1
	pkgsrc-2020Q4:1.1.0.54
	pkgsrc-2020Q4-base:1.1
	pkgsrc-2020Q3:1.1.0.52
	pkgsrc-2020Q3-base:1.1
	pkgsrc-2020Q2:1.1.0.48
	pkgsrc-2020Q2-base:1.1
	pkgsrc-2020Q1:1.1.0.28
	pkgsrc-2020Q1-base:1.1
	pkgsrc-2019Q4:1.1.0.50
	pkgsrc-2019Q4-base:1.1
	pkgsrc-2019Q3:1.1.0.46
	pkgsrc-2019Q3-base:1.1
	pkgsrc-2019Q2:1.1.0.44
	pkgsrc-2019Q2-base:1.1
	pkgsrc-2019Q1:1.1.0.42
	pkgsrc-2019Q1-base:1.1
	pkgsrc-2018Q4:1.1.0.40
	pkgsrc-2018Q4-base:1.1
	pkgsrc-2018Q3:1.1.0.38
	pkgsrc-2018Q3-base:1.1
	pkgsrc-2018Q2:1.1.0.36
	pkgsrc-2018Q2-base:1.1
	pkgsrc-2018Q1:1.1.0.34
	pkgsrc-2018Q1-base:1.1
	pkgsrc-2017Q4:1.1.0.32
	pkgsrc-2017Q4-base:1.1
	pkgsrc-2017Q3:1.1.0.30
	pkgsrc-2017Q3-base:1.1
	pkgsrc-2017Q2:1.1.0.26
	pkgsrc-2017Q2-base:1.1
	pkgsrc-2017Q1:1.1.0.24
	pkgsrc-2017Q1-base:1.1
	pkgsrc-2016Q4:1.1.0.22
	pkgsrc-2016Q4-base:1.1
	pkgsrc-2016Q3:1.1.0.20
	pkgsrc-2016Q3-base:1.1
	pkgsrc-2016Q2:1.1.0.18
	pkgsrc-2016Q2-base:1.1
	pkgsrc-2016Q1:1.1.0.16
	pkgsrc-2016Q1-base:1.1
	pkgsrc-2015Q4:1.1.0.14
	pkgsrc-2015Q4-base:1.1
	pkgsrc-2015Q3:1.1.0.12
	pkgsrc-2015Q3-base:1.1
	pkgsrc-2015Q2:1.1.0.10
	pkgsrc-2015Q2-base:1.1
	pkgsrc-2015Q1:1.1.0.8
	pkgsrc-2015Q1-base:1.1
	pkgsrc-2014Q4:1.1.0.6
	pkgsrc-2014Q4-base:1.1
	pkgsrc-2014Q3:1.1.0.4
	pkgsrc-2014Q3-base:1.1
	pkgsrc-2014Q2:1.1.0.2
	pkgsrc-2014Q2-base:1.1;
locks; strict;
comment	@# @;


1.1
date	2014.04.18.21.31.26;	author wiz;	state Exp;
branches;
next	;
commitid	OQyI1tB9ZG6U7dxx;


desc
@@


1.1
log
@Import spiped-1.3.1 as security/spiped.

spiped (pronounced "ess-pipe-dee") is a utility for creating symmetrically
encrypted and authenticated pipes between socket addresses, so that one may
connect to one address (e.g., a UNIX socket on localhost) and transparently
have a connection established to another address (e.g., a UNIX socket on a
different system).  This is similar to 'ssh -L' functionality, but does not
use SSH and requires a pre-shared symmetric key.

Note that spiped:
1. Requires a strong key file: The file specified via the -k option should
have at least 256 bits of entropy.  ('dd if=/dev/urandom bs=32 count=1' is
your friend.)
2. Does not provide any protection against information leakage via packet
timing: Running telnet over spiped will protect a password from being directly
read from the network, but will not obscure the typing rhythm.
3. Can significantly increase bandwidth usage for interactive sessions: It
sends data in packets of 1024 bytes, and pads smaller messages up to this
length, so a 1 byte write could be expanded to 1024 bytes if it cannot be
coalesced with adjacent bytes.
4. Uses a symmetric key -- so anyone who can connect to an spiped "server" is
also able to impersonate it.
@
text
@spiped (pronounced "ess-pipe-dee") is a utility for creating symmetrically
encrypted and authenticated pipes between socket addresses, so that one may
connect to one address (e.g., a UNIX socket on localhost) and transparently
have a connection established to another address (e.g., a UNIX socket on a
different system).  This is similar to 'ssh -L' functionality, but does not
use SSH and requires a pre-shared symmetric key.

Note that spiped:
1. Requires a strong key file: The file specified via the -k option should
have at least 256 bits of entropy.  ('dd if=/dev/urandom bs=32 count=1' is
your friend.)
2. Does not provide any protection against information leakage via packet
timing: Running telnet over spiped will protect a password from being directly
read from the network, but will not obscure the typing rhythm.
3. Can significantly increase bandwidth usage for interactive sessions: It
sends data in packets of 1024 bytes, and pads smaller messages up to this
length, so a 1 byte write could be expanded to 1024 bytes if it cannot be
coalesced with adjacent bytes.
4. Uses a symmetric key -- so anyone who can connect to an spiped "server" is
also able to impersonate it.
@