Announcing krb5dissect

Building on my earlier efforts to document the ccache format, I’ve now created the krb5dissect tool. It will parse your Kerberos ccache file (typically /tmp/krb5cc_$UID) and prints it in a human readable format.

This tool was written in about 1 hour, given the amazing amount of nice modules available from gnulib, and helpful tools such as gengetopt and help2man. Kudos!

Update! Version 2.0 can do the same for Kerberos keytab files (typically /etc/krb5.keytab).

gitco

I have been experimenting with git lately, and one of the results were a replacement for the old ‘cvsco’ tool that I’m highly addicted to.


#!/bin/sh
# gitco - cruel checkout. Discards everything
# that has not been committed, and checkout
# missing files.
#
# Written by Simon Josefsson. Licensed under
# GPLv2 or later. Contributions by Yann Dirson.
git clean -d -x
cg status -w
git reset --hard

LibIDN 0.6.11

Today I released a new version of LibIDN. No major changes, although Alexander Gnauck contributed an update of his C# port.

I’m feeling somewhat saddened how far the IDNAbis proposals are going without any attempts to work with the SASLPrep community. I predict that SASLPrep2 will be a fork of StringPrep1, rather than a profile of StringPrep2.

Update! It seems savannah.gnu.org is down, which seems to affect uploads to alpha.gnu.org. The normal distribution URLs go to a directory checked out from CVS, but I’ve manually made sure the directory contain the latest release even though CVS checkouts doesn’t work.

Cypak LoginKey

Cypak recently launched their new authentication devices LoginKey. I did a security review of it, and it uses a per-device AES-128 key to encrypt information. It emulates a USB keyboard, so it works fine under Windows, Linux and Mac OS X.
LoginKey Plus

Base encoding

My document that describe base encoding (base64, base32 and base16) was published yesterday by the IETF. Unfortunately, the source code could not be included (the IAB said no to including the copyright notice in the code, which is required by the LGPL), but it is available from the home page anyway.

RFC 4648

Base encoding homepage