[IPython-dev] pyzmq authentication

MinRK benjaminrk@gmail....
Thu Jun 2 17:05:06 CDT 2011


Pushed to my hmac branch.  The relevant code is in the sign method:
https://github.com/minrk/ipython/blob/hmac/IPython/parallel/streamsession.py#L231
and the checking in unpack_message:
https://github.com/minrk/ipython/blob/hmac/IPython/parallel/streamsession.py#L448

Note that this class is *not* used in IPython.zmq, but the two classes
will be merged at some point.

On Thu, Jun 2, 2011 at 12:12, MinRK <benjaminrk@gmail.com> wrote:
> On Thu, Jun 2, 2011 at 12:10, Jason Grout <jason-sage@creativetrax.com> wrote:
>> On 6/2/11 1:41 PM, MinRK wrote:
>>>
>>> I'm realizing that, in the parallel code at least, there is no way to
>>> maintain these counters in a synchronized way.  This is because the
>>> connections are in fact many-to-many, not one-to-many, so the receiver
>>> can't know the count for the sender, and for load-balanced execution
>>> the sender doesn't know who the receiver is. What I've done instead to
>>> prevent sniffed duplicates is to simply keep track of previously seen
>>> digests, and don't allow repeats.
>>
>> That makes sense.
>>
>>>
>>> The code is pretty simple, and I'll merge it after the newconfig code is
>>> merged.
>>
>> Did you happen to push it to a github branch somewhere?  If so, we might use
>> it pretty much immediately in our Sage "single-cell" web server.
>>
>> You're right that it should be simple enough to write myself, but I figure
>> (*especially* with crypto) it's better to have two eyes looking at one piece
>> of code rather than two people rewriting the same thing twice.
>
> I'll push it this afternoon, I'm just cleaning up a few things first.
>
>>
>> Jason
>>
>


More information about the IPython-dev mailing list