13:03:39 #startmeeting 13:03:39 Meeting started Mon Apr 27 13:03:39 2015 UTC. The chair is evilaliv3. Information about MeetBot at http://wiki.debian.org/MeetBot. 13:03:39 Useful Commands: #action #agreed #help #info #idea #link #topic. 13:03:58 hello! 13:04:42 as now usual i've opened the dayliy scrum meeting, for who is working today on globaleaks :) 13:05:15 elv, hellais here is the pad: http://piratepad.net/lH0RT3enZy 13:05:30 i'm still finishing to fill it 13:05:57 hellais can you please answer me on this comment? https://github.com/globaleaks/GlobaLeaks/commit/d490d05302c0c2f5776645316cae75ae68bedcac#commitcomment-10902566 13:06:41 i'm still thinking how we could solve the issue of generating the deterministic key inside a webworker 13:07:27 ths issue lie in the fact that the postMessage() used when working with webworkers does not allow to pass objects 13:07:58 so all should be something like a json serializable object 13:08:43 my idea so is to modify the "prnd" hook you thought in order to accept two possible types: 13:09:09 - an object (as you currently did) 13:11:13 - an array (usable with webworkers); in case an array is passed we will implement inside the worker (and so inside the openpgp new feature) the circular array as you already did 13:12:28 do you have any suggestion on this idea? i'm currently not finding any other solution to this issue 13:16:02 evilaliv3: it's not just that 13:16:24 even if you put the Seed object creation inside the web worker 13:16:45 you have the problem that Web Workers have a partial implementation on the Web Crypto API 13:17:37 have you also tested this? 13:18:01 nope as i switched on other topics 13:18:10 i'm now restarting working on it 13:21:40 oky give it a try also, so you have the whole picture 13:22:20 anyway the problem that would make the browser inresponsive during key generation, is the fact that Seed is slow 13:23:32 the official implementation takes less than a second on my machine, so probably web workers are not needed for key generation as long as we are able to optimize Seed 13:24:06 ok i see 13:24:25 that should be a task for hellais, he took a look at the internals to code Seed 13:25:42 is the new end2end branch aligned at my last commit? 13:26:03 not yet 13:26:28 I'm writing to vec about the progress of the tests so he can take a look at the code for his tasks about testing 13:26:33 can proceed on your branch for today? 13:26:48 ok i'm linking my repo for now 13:26:53 i swear that by tomorrow i'll align it all :) 13:27:54 anyway concerning the Seed(), the keygeneration for sure should be done inside webworkerrs 13:29:02 i will give a try viewing why your were not able to get the Seed() inside web workers 13:31:16 it does not use any crypto API but simply implement a circular array 13:40:10 hi 13:40:45 evilaliv3: can you pass strings through webworkers? 13:42:01 yep all that is json serializable i think 13:42:44 I don't understand your proposed "array" solution 13:43:01 your seed function implement a circular array right? 13:43:18 i would implement it internally, and pass via postMessage() only the array 13:43:30 anyway: 13:43:31 aMessage 13:43:32 The object to deliver to the worker; this will be in the data field in the event delivered to the DedicatedWorkerGlobalScope.onmessage handler. This may be any value or JavaScript object handled by the structured clone algorithm, which includes cyclical references. 13:43:38 essage 13:43:39 The object to deliver to the worker; this will be in the data field in the event delivered to the DedicatedWorkerGlobalScope.onmessage handler. This may be any value or JavaScript object handled by the structured clone algorithm, which includes cyclical references. 13:43:41 an array of what? 13:43:44 ops sorry 13:43:53 an array containing the circular array 13:44:14 the one used internally by the seed 13:44:56 anyway i'm now interested to see why the scrutctured clone argument is not able to clone the Seed object 13:45:09 yeah ok, so it means adding notion of deterministic key generation to openpgp.js 13:45:19 yep 13:45:35 if @tanx likes it good for me 13:45:52 do you foresee any different solution ? 13:46:35 not really 13:46:58 if we must use webworkers and they can only accept as parameters things that are serilizable in JSON that is very reduced subset of stuff 13:47:56 i said this thin of json serializable but i'm still not sure of that 13:48:14 i pasted the reference above: https://developer.mozilla.org/en-US/docs/Web/API/Worker/postMessage 13:48:50 https://developer.mozilla.org/en-US/docs/Web/Guide/API/DOM/The_structured_clone_algorithm 13:48:58 Error and Function objects cannot be duplicated by the structured clone algorithm; attempting to do so will throw a DATA_CLONE_ERR exception. 13:49:16 so no functions can be passed at all 13:54:24 that sucks then 13:54:29 since you can't pass hooks and stuff like that 13:54:42 so I think you are stuck with passing something that is reconducible to a string 13:55:02 (an array in the end is just a string serialization) 13:56:08 yep so we have two viable solutions: 13:56:31 1) the one i described above, that would require putting the circular array logic inside openpgp.js 13:57:20 2) try to avoid using the webworker defined by openpgp.js but define one by ourselves 13:58:08 evilaliv3: Seed does not use Crypto API but openpgpjs internally does (I guess) 13:58:42 elv openpgp.js is able to do all openpgp.js stuff inside webworkers 13:58:49 look at: https://github.com/openpgpjs/openpgpjs/blob/master/dist/openpgp.worker.js 13:59:50 i'm now thinking that all the work done by hellais could be written inside a patched openpgp.worker.js 14:00:01 this way in the meantime we would solve two issues: 14:00:15 evilaliv3: probably the best thing is to patch openpgp.worker.js and add 'generate-deterministic-key-pair' 14:00:26 and put Seed inside the WW 14:00:29 1) we would not need @tanx to merge the pull requests 14:00:38 hellais: anyway Seed is *VERY* slow 14:00:38 2) we would be able to fix the Seed issue 14:01:07 elv: i've already seen the possible drawbacks of the seed and i'm able to fix it 14:01:39 good! 14:02:30 it's not a matter of simply generate deterministic keypays, but also to be able to do all the streaming work that hellais did 14:02:50 i will investigate today if this all is doable with a simple worker patch 14:05:12 those are different openpgpjs calls 14:05:25 so u have to work on them separately anyway 14:14:10 #stopmeeting 14:14:39 #endmeeting