https://sourceforge.net/p/epoint/news/2008-03-11T22:53:36ZRecent posts to news2008-03-11T22:53:36Z2008-03-11T22:53:36ZDaniel A Nagyhttps://sourceforge.net/u/nagydani/https://sourceforge.net2a3fadb7e4e917397f791e7f3569bcb8f5393225

<div class="markdown_content"><p>The development of ePoint System is no longer done via SourceForge. We have moved everything to our own server:<br /> <a href="https://www.epointsystem.org/trac" rel="nofollow">https://www.epointsystem.org/trac</a></p></div>

2005-08-02T21:01:26Z2005-08-02T21:01:26ZDaniel A Nagyhttps://sourceforge.net/u/nagydani/https://sourceforge.neta60e1a42e8478e5bf047c5be0185d8b51a6eedcd

<div class="markdown_content"><p>A simple FastCGI server for issuing ePoints that has been alpha-tested for ten months is now deemed to be ready for general beta-release.<br /> It's been written in C and tested with Apache 1.3 mod_fastcgi.</p></div>

2005-04-08T23:03:20Z2005-04-08T23:03:20ZDaniel A Nagyhttps://sourceforge.net/u/nagydani/https://sourceforge.netca531c502b1dde8caedab86e8e1e50e4f6fdbe58

<div class="markdown_content"><p>This is a feature-freeze release before 1.0<br /> Code cleanup, Bug fixing, Keyserver bug workaround,<br /> String-to-keypair, Modification Detection Code<br /> Enjoy!</p></div>

2005-02-24T02:30:27Z2005-02-24T02:30:27ZDaniel A Nagyhttps://sourceforge.net/u/nagydani/https://sourceforge.netf3e02d3a21b244cc9d538d084af427d616fd323d

<div class="markdown_content"><p>The quick check for symmetric key integrity constitutes a serious vulnerability under certain circumstances, when using ePointPGP in server applications.</p> <p>In short, by repeated attempts at decrypting a number of carefully chosen fake ciphertext messages purporting to have been encrypted with the same symmetric key as the attacked message, the attacker can gain enough information from the fact whether or not it has passed the quick check to decrypt the first two bytes in the next block (and then those in all subsequent blocks).</p> <p>For a detailed analysis and explaination, please read<br /> <a href="http://eprint.iacr.org/2005/033.pdf" rel="nofollow">http://eprint.iacr.org/2005/033.pdf</a></p> <p>Please note that ePointPGP is intended primarily for client-side applications (applets) and we do not recommend it for any server application. On the client side, the quick check is still useful, and cannot be in practice exploited in the above described way.</p> <p>The affected method is net.sourceforge.epoint.pgp.ENCRYPTEDPacket.getCipher(Key k)</p> <p>The comment has been added to its documentation at<br /> <a href="http://epoint.sf.net/java/doc">http://epoint.sf.net/java/doc</a></p></div>

2005-02-04T09:20:33Z2005-02-04T09:20:33ZDaniel A Nagyhttps://sourceforge.net/u/nagydani/https://sourceforge.net98dea2925f6591714943ad2113968092063275f6

<div class="markdown_content"><p>Major bugfix and code/API cleanup</p></div>

2004-11-13T21:33:19Z2004-11-13T21:33:19ZDaniel A Nagyhttps://sourceforge.net/u/nagydani/https://sourceforge.netce372d1f6775ade489b933c91a7642eaf3575568

<div class="markdown_content"><p>Major bugfix release, experimental key generation code</p></div>

2004-09-15T02:59:16Z2004-09-15T02:59:16ZDaniel A Nagyhttps://sourceforge.net/u/nagydani/https://sourceforge.netce0cd48eb6d139a3a383332ad0c0d6c00a08f466

<div class="markdown_content"><p>mod_payment + Apache is an easy micropayment solution for web-based services. While it has been developed in conjunction with the ePoint project, mod_payment can be used independently. This apache module is NOT suitable for the administration of on-line purchases of physical objects.</p></div>

2004-08-28T11:28:28Z2004-08-28T11:28:28ZDaniel A Nagyhttps://sourceforge.net/u/nagydani/https://sourceforge.netcf5ef9c40094d1352a66465d8241ba4af295892d

<div class="markdown_content"><p>Minor enhacements over v0.4. No features added.</p></div>

2004-03-07T12:07:02Z2004-03-07T12:07:02ZDaniel A Nagyhttps://sourceforge.net/u/nagydani/https://sourceforge.netb3398f75028fc01d7e3f98c57531d7facd69fc3b

<div class="markdown_content"><p>Beta release; everything is supposed to work. Features: electronic signature verification and password-based encryption-decryption</p></div>

2004-03-05T19:27:17Z2004-03-05T19:27:17ZDaniel A Nagyhttps://sourceforge.net/u/nagydani/https://sourceforge.netd49880ddc52c40892f68acee6d769f0944c36025

<div class="markdown_content"><p>Cleanup, bugfixes and compressed stream support</p></div>