[Pharo-project] SSL/HTTPS - SecureSocketStream/SSLSessionforPharo/Squeak and other Smalltalk implementations

Rob Withers reefedjib at gmail.com
Thu May 12 16:38:20 CEST 2011

Hi Sven,

It is a complete implementation with the bare minimum of supported 
algorithms, based on the spec.   It is 100% in Smalltalk.  It worked last 
time I tested in, several years ago.  I will be able to tell you more this 
weekend.   Others have been adding fixes/small features since, but not a 
lot - the base is pretty solid.  I painstakingly followed the RFC for SSL - 
I think I read it over 20 times!  The only issue would be algorithm support. 
I never benchmarked it, but seeing the difference in performance between 
Smlltalk crypto code like 3DES and plugin code, there is a SIGNIFICANT 
improvement (10x?).   I do not know the state of Profiling under Pharo.  If 
someone could help set me up, then I will profile it this weekend.  I 
imagine both performance and certification were the reasons for SqueakSSL.

There is also an SSH implementation I wrote that does dynamic window 
resizing on net latency.


-----Original Message----- 
From: Sven Van Caekenberghe
Sent: Thursday, May 12, 2011 10:16 AM
To: Pharo-project at lists.gforge.inria.fr
Subject: Re: [Pharo-project] SSL/HTTPS - 
SecureSocketStream/SSLSessionforPharo/Squeak and other Smalltalk 

Hi Rob,

On 12 May 2011, at 15:52, Rob Withers wrote:

> Try this, after loading the Crypto packages.  I haven't tried it myself, 
> yet, as I only got on this list and loaded Pharo a few days ago, but I 
> will probably dig into it over the weekend.  I did load Crypto, though.
> http://www.squeaksource.com/Cryptography/SSL-mtf.16.mcz
> Is there a Pharo repository I could drop ported code into?

This looks like a quite impressive code base. I think I once heard about 
this, but never really looked at it.

If I understand this correctly, browsing in SqueakSource, this is actually 
an SSL implementation, 100% done in Smalltalk ?

Some questions then:

- in what state is the code, does it work ?

- how compatible is it wrt SSL standards ?

- how fast is it, is it useable ?

- why was it not used for SqueakSSL ?


More information about the Pharo-project mailing list