<?xml version="1.0" encoding="UTF-8"?>
<feed xmlns="http://www.w3.org/2005/Atom">
  <title type="html">Packetizer Forums</title>
  <link rel="alternate" type="text/html" href="http://forums.packetizer.com/"/>
  <link rel="self" type="application/atom+xml" href="http://forums.packetizer.com/feeds/"/>
  <updated>2012-05-15T14:27:16Z</updated>
  <author>
    <name>Packetizer Forums</name>
    <uri>http://forums.packetizer.com/</uri>
    <email>webmaster@packetizer.com</email>
  </author>
  <id>http://forums.packetizer.com/feeds/</id>
  <rights>Copyright (C) 2012 Packetizer, Inc. All Rights Reserved.</rights>
  <generator uri="http://www.packetizer.com/">Packetizer ATOM/RSS Feed Generator</generator>
  <logo>http://www.packetizer.com/rss/images/packetizer.png</logo>
  <entry>
    <author><name>paulej</name></author>
    <title type="text">Re: Shouldn't encrypted files be bigger than the original on</title>
    <id>http://forums.packetizer.com/viewtopic.php?f=72&amp;t=258&amp;p=718#p718</id>
    <link rel="alternate" href="http://forums.packetizer.com/viewtopic.php?f=72&amp;t=258&amp;p=718#p718"/>
    <updated>2012-05-15T14:27:16Z</updated>
    <published>2012-05-15T14:27:16Z</published>
    <category term="AES Crypt"/>
    <content type="html">&lt;div&gt;The files produced by AES Crypt are definitely larger, usually more than 132 bytes or so.&lt;/div&gt;</content>
  </entry>
  <entry>
    <author><name>paulej</name></author>
    <title type="text">Re: how long can a password be?</title>
    <id>http://forums.packetizer.com/viewtopic.php?f=72&amp;t=253&amp;p=717#p717</id>
    <link rel="alternate" href="http://forums.packetizer.com/viewtopic.php?f=72&amp;t=253&amp;p=717#p717"/>
    <updated>2012-05-15T14:25:10Z</updated>
    <published>2012-05-15T14:25:10Z</published>
    <category term="AES Crypt"/>
    <content type="html">&lt;div&gt;The password length should be the same. However, if you have a good random password, you do not need more than 256 bits for the password, since everything is no stronger than 256 bits.  We have a password generator that uses a subset of the ASCII character chart to generate passwords.  Since it does not use all of the bits in a byte, one needs more characters.  Per our calculations, 65 characters would be more than enough.  See this page:&lt;br/&gt;
&lt;a href="http://www.packetizer.com/security/pwgen/"&gt;http://www.packetizer.com/security/pwgen/&lt;/a&gt;&lt;/div&gt;</content>
  </entry>
  <entry>
    <author><name>horape</name></author>
    <title type="text">Shouldn't encrypted files be bigger than the original ones?</title>
    <id>http://forums.packetizer.com/viewtopic.php?f=72&amp;t=258&amp;p=716#p716</id>
    <link rel="alternate" href="http://forums.packetizer.com/viewtopic.php?f=72&amp;t=258&amp;p=716#p716"/>
    <updated>2012-05-15T05:56:54Z</updated>
    <published>2012-05-15T05:56:54Z</published>
    <category term="AES Crypt"/>
    <content type="html">&lt;div&gt;I'm not an expert, but AFAIK encrypted files should be bigger than the original ones.&lt;br/&gt;
&lt;br/&gt;
But I tried to encrypt a .zip and a .jpeg, and both created a .aes file of the same size.&lt;br/&gt;
&lt;br/&gt;
Is the real size being hidden or what?&lt;/div&gt;</content>
  </entry>
  <entry>
    <author><name>prost</name></author>
    <title type="text">Re: how long can a password be?</title>
    <id>http://forums.packetizer.com/viewtopic.php?f=72&amp;t=253&amp;p=715#p715</id>
    <link rel="alternate" href="http://forums.packetizer.com/viewtopic.php?f=72&amp;t=253&amp;p=715#p715"/>
    <updated>2012-05-14T11:24:29Z</updated>
    <published>2012-05-14T11:24:29Z</published>
    <category term="AES Crypt"/>
    <content type="html">&lt;div&gt;Is this for the graphical version or the command-line-terminal version?&lt;/div&gt;</content>
  </entry>
  <entry>
    <author><name>willamowius</name></author>
    <title type="text">Re: H.323 Plus and FFmpeg compatibility</title>
    <id>http://forums.packetizer.com/viewtopic.php?f=46&amp;t=256&amp;p=714#p714</id>
    <link rel="alternate" href="http://forums.packetizer.com/viewtopic.php?f=46&amp;t=256&amp;p=714#p714"/>
    <updated>2012-05-13T07:15:31Z</updated>
    <published>2012-05-13T07:15:31Z</published>
    <category term="H.323 Plus"/>
    <content type="html">&lt;div&gt;Hi,&lt;br/&gt;
&lt;br/&gt;
I'm compiling the codecs ffrom H323Plus CVS with ffmpeg 0.9 on Linux and that seems to work fine.&lt;br/&gt;
&lt;br/&gt;
Jan&lt;/div&gt;</content>
  </entry>
  <entry>
    <author><name>brad0</name></author>
    <title type="text">H.323 Plus and FFmpeg compatibility</title>
    <id>http://forums.packetizer.com/viewtopic.php?f=46&amp;t=256&amp;p=712#p712</id>
    <link rel="alternate" href="http://forums.packetizer.com/viewtopic.php?f=46&amp;t=256&amp;p=712#p712"/>
    <updated>2012-05-12T20:41:51Z</updated>
    <published>2012-05-12T20:41:51Z</published>
    <category term="H.323 Plus"/>
    <content type="html">&lt;div&gt;I wanted to reach the author regarding the compatibility issues with H.323 Plus (1.24.0) and older FFmpeg releases (.e.g. 0.7 branch) never mind something fairly new-ish like the 0.10 branch. H.323 Plus is the only project left in the OpenBSD ports tree I'm having issues with trying to build with newer FFmpeg. We've had some minimalist patching to get H.323 Plus to build and run with FFmpeg 0.7 snapshots but as the API has changed even further between 0.7 and 0.8/0.9 and 0.10 snapshots we're using now this is causing further issues trying to build H.323 Plus. I see in the CVS repo you have made some sort of attempt at dealing with this for some parts of H.323 Plus code but then later reverted it. Even with that there was still the issue of fixing the autoconf script as well. Can you comment on when we might see a new release of H.323 Plus that will work with newer FFmpeg releases &amp;quot;out of the box&amp;quot;?&lt;/div&gt;</content>
  </entry>
  <entry>
    <author><name>paulej</name></author>
    <title type="text">Re: invalid Signature error</title>
    <id>http://forums.packetizer.com/viewtopic.php?f=72&amp;t=255&amp;p=711#p711</id>
    <link rel="alternate" href="http://forums.packetizer.com/viewtopic.php?f=72&amp;t=255&amp;p=711#p711"/>
    <updated>2012-05-11T09:34:01Z</updated>
    <published>2012-05-11T09:34:01Z</published>
    <category term="AES Crypt"/>
    <content type="html">&lt;div&gt;The &amp;quot;invalid signature&amp;quot; error is an unfortunate error message.  What it means is that the 'AES' header was not observed at the start of the file.  It's a basic sanity check to ensure that the file format is known before attempting the decryption process. A better message would be &amp;quot;invalid AES file&amp;quot;.  I'll add that to the to-do list.&lt;/div&gt;</content>
  </entry>
  <entry>
    <author><name>lynn123</name></author>
    <title type="text">invalid Signature error</title>
    <id>http://forums.packetizer.com/viewtopic.php?f=72&amp;t=255&amp;p=710#p710</id>
    <link rel="alternate" href="http://forums.packetizer.com/viewtopic.php?f=72&amp;t=255&amp;p=710#p710"/>
    <updated>2012-05-10T13:41:17Z</updated>
    <published>2012-05-10T13:41:17Z</published>
    <category term="AES Crypt"/>
    <content type="html">&lt;div&gt;I tried to open a document that was encrypted but I am getting the error &amp;quot; invalid signature &amp;quot;..I know the password is correct because I encrypted it myself using (wapwolf from my dropbox). What is the problem? Can anyone help us?&lt;/div&gt;</content>
  </entry>
  <entry>
    <author><name>paulej</name></author>
    <title type="text">Re: AES Decryption</title>
    <id>http://forums.packetizer.com/viewtopic.php?f=72&amp;t=254&amp;p=709#p709</id>
    <link rel="alternate" href="http://forums.packetizer.com/viewtopic.php?f=72&amp;t=254&amp;p=709#p709"/>
    <updated>2012-05-08T14:28:31Z</updated>
    <published>2012-05-08T14:28:31Z</published>
    <category term="AES Crypt"/>
    <content type="html">&lt;div&gt;&lt;blockquote style="background-color: #ebeadd; border-left: 3px solid #0179b5;"&gt;&lt;div style="border-left: 1em solid #ebeadd;"&gt;&lt;cite&gt;AESQuest wrote:&lt;/cite&gt;&lt;br/&gt;
I have written down a Formula I would like to know if this will decrypt AES?&lt;/div&gt;&lt;/blockquote&gt;
&lt;br/&gt;
I've seen a lot of math over the years, but I can't read this.  I cannot tell what you're proposing here. Can you present this in a way that is more readable?  Perhaps others can read it, but I cannot.&lt;/div&gt;</content>
  </entry>
  <entry>
    <author><name>aesquest</name></author>
    <title type="text">AES Decryption</title>
    <id>http://forums.packetizer.com/viewtopic.php?f=72&amp;t=254&amp;p=708#p708</id>
    <link rel="alternate" href="http://forums.packetizer.com/viewtopic.php?f=72&amp;t=254&amp;p=708#p708"/>
    <updated>2012-05-08T10:50:10Z</updated>
    <published>2012-05-08T10:50:10Z</published>
    <category term="AES Crypt"/>
    <content type="html">&lt;div&gt;I have written down a Formula I would like to know if this will decrypt AES?&lt;br/&gt;
&lt;br/&gt;
The O after the Y is a (sigma sign)&lt;br/&gt;
&lt;br/&gt;
&lt;img src="http://i1243.photobucket.com/albums/gg546/chewy0914/IMG_1002.jpg" alt="Image"/&gt;&lt;br/&gt;
&lt;br/&gt;
&lt;img src="http://i1243.photobucket.com/albums/gg546/chewy0914/IMG_1003.jpg" alt="Image"/&gt;&lt;br/&gt;
&lt;br/&gt;
&lt;img src="http://i1243.photobucket.com/albums/gg546/chewy0914/IMG_1004.jpg" alt="Image"/&gt;&lt;/div&gt;</content>
  </entry>
  <entry>
    <author><name>paulej</name></author>
    <title type="text">Re: how long can a password be?</title>
    <id>http://forums.packetizer.com/viewtopic.php?f=72&amp;t=253&amp;p=707#p707</id>
    <link rel="alternate" href="http://forums.packetizer.com/viewtopic.php?f=72&amp;t=253&amp;p=707#p707"/>
    <updated>2012-05-06T20:18:37Z</updated>
    <published>2012-05-06T20:18:37Z</published>
    <category term="AES Crypt"/>
    <content type="html">&lt;div&gt;I would need to look at the source code, but it is either 1024 bytes or 1024 Unicode characters. In any case, it is far bigger than necessary.&lt;/div&gt;</content>
  </entry>
  <entry>
    <author><name>prost</name></author>
    <title type="text">how long can a password be?</title>
    <id>http://forums.packetizer.com/viewtopic.php?f=72&amp;t=253&amp;p=706#p706</id>
    <link rel="alternate" href="http://forums.packetizer.com/viewtopic.php?f=72&amp;t=253&amp;p=706#p706"/>
    <updated>2012-05-06T15:02:38Z</updated>
    <published>2012-05-06T15:02:38Z</published>
    <category term="AES Crypt"/>
    <content type="html">&lt;div&gt;For the Windows and Mac versions, how long can a password be? Thanks.&lt;/div&gt;</content>
  </entry>
  <entry>
    <author><name>rjk</name></author>
    <title type="text">Re: AESCrypt for Android</title>
    <id>http://forums.packetizer.com/viewtopic.php?f=72&amp;t=252&amp;p=704#p704</id>
    <link rel="alternate" href="http://forums.packetizer.com/viewtopic.php?f=72&amp;t=252&amp;p=704#p704"/>
    <updated>2012-04-23T11:37:36Z</updated>
    <published>2012-04-23T11:37:36Z</published>
    <category term="AES Crypt"/>
    <content type="html">&lt;div&gt;Because using a fixed value (like DEFAULT_MAC) is not desirable, in generateIv1() I replaced&lt;br/&gt;
&amp;quot;mac = DEFAULT_MAC;&amp;quot; with&lt;br/&gt;
&amp;quot;mac = generateRandomBytes(8);&amp;quot;&lt;br/&gt;
&lt;br/&gt;
I incorporated AESCrypt.java into an Android program that I wrote for myself to decrypt small (&amp;lt;1MB) text files and speed has not been a problem for me.&lt;/div&gt;</content>
  </entry>
  <entry>
    <author><name>paulej</name></author>
    <title type="text">Re: AESCrypt for Android</title>
    <id>http://forums.packetizer.com/viewtopic.php?f=72&amp;t=252&amp;p=703#p703</id>
    <link rel="alternate" href="http://forums.packetizer.com/viewtopic.php?f=72&amp;t=252&amp;p=703#p703"/>
    <updated>2012-04-19T16:28:24Z</updated>
    <published>2012-04-19T16:28:24Z</published>
    <category term="AES Crypt"/>
    <content type="html">&lt;div&gt;The getHardwareAddress() call is only to help in the creation of a random initialization vector.  It is good to have something random, but use of a MAC address is not random.  Use of a fixed value is worse.  The function attempts to make it random by also using the current time and then hashing the MAC and time.  You could replace the call to get the MAC address with a call to Math.random()*256 or similar to get a random byte between 0 and 255.  Do that 8 times (to fill up the IV array), with the time consuming the other 8 octets.  Pseudo-random number generators are not ideal, but still better than a fixed value.  Of course, hash it to make it even more obscure.  (Note: the IV does not have to be random and it's certainly not secret.  It's published in the clear.  That said, we do not want to use the same IV all the time, either, as this would help one launch an attack knowing certain fixed values and results.)&lt;br/&gt;
&lt;br/&gt;
As for performance, I'm not sure.  Can you identify what is consuming the CPU?  If it's the call to Java's AES routines, there is nothing we could do.  If it is in the AES Crypt Java code, then we could address that.&lt;/div&gt;</content>
  </entry>
  <entry>
    <author><name>khushbu</name></author>
    <title type="text">AESCrypt for Android</title>
    <id>http://forums.packetizer.com/viewtopic.php?f=72&amp;t=252&amp;p=702#p702</id>
    <link rel="alternate" href="http://forums.packetizer.com/viewtopic.php?f=72&amp;t=252&amp;p=702#p702"/>
    <updated>2012-04-19T11:23:16Z</updated>
    <published>2012-04-19T11:23:16Z</published>
    <category term="AES Crypt"/>
    <content type="html">&lt;div&gt;I tried AESCrypt.java in my Android application. NetworkInterface.getHardwareAddress() call does not exist in the Android Java library, so I have commented that code and use DEFAULT_MAC as mac. It works fine in my application. I have passed version 2 in encrypt function.&lt;br/&gt;
&lt;br/&gt;
But in this forum there is a question about &amp;quot;Android Version?&amp;quot;. In that topic it is written that this AESCrypt is not for android application.&lt;br/&gt;
If I use this way in android application then is there any chances of problem?&lt;br/&gt;
&lt;br/&gt;
And currently it is very slow to encrypt and decrypt the file in android ? &lt;br/&gt;
&lt;br/&gt;
Any help....&lt;/div&gt;</content>
  </entry>
  <entry>
    <author><name>rjk</name></author>
    <title type="text">Re: Memory Leak in encrypt method on Android</title>
    <id>http://forums.packetizer.com/viewtopic.php?f=72&amp;t=187&amp;p=700#p700</id>
    <link rel="alternate" href="http://forums.packetizer.com/viewtopic.php?f=72&amp;t=187&amp;p=700#p700"/>
    <updated>2012-04-16T12:03:16Z</updated>
    <published>2012-04-16T12:03:16Z</published>
    <category term="AES Crypt"/>
    <content type="html">&lt;div&gt;Have you tried creating the ByteArrayOutputStream within the for loop?&lt;br/&gt;
i.e. put &amp;quot;ByteArrayOutputStream baos = new ByteArrayOutputStream(ONE_MEGABYTE+ONE_KILOBYTE);&amp;quot;  inside the for loop and replace the &amp;quot;baos(reset)&amp;quot; in the for loop with &amp;quot;baos(close)&amp;quot;.&lt;/div&gt;</content>
  </entry>
  <entry>
    <author><name>legyndir</name></author>
    <title type="text">megaco decoding with opal</title>
    <id>http://forums.packetizer.com/viewtopic.php?f=46&amp;t=250&amp;p=698#p698</id>
    <link rel="alternate" href="http://forums.packetizer.com/viewtopic.php?f=46&amp;t=250&amp;p=698#p698"/>
    <updated>2012-04-11T10:09:00Z</updated>
    <published>2012-04-11T10:09:00Z</published>
    <category term="H.323 Plus"/>
    <content type="html">&lt;div&gt;i all,&lt;br/&gt;
&lt;br/&gt;
I am trying to decode H248 megaco messages using opal library. I convert the payload (bytes after udp header) to PPer_Stream and give that to H248Message::Decode() method, but I dont get any meaningful output.&lt;br/&gt;
&lt;br/&gt;
Here's how I use it:&lt;br/&gt;
&lt;br/&gt;
PPER_Stream pstr((const BYTE *) pl, pllen);&lt;br/&gt;
H248_Message msg;&lt;br/&gt;
&lt;br/&gt;
msg.Decode(pstr);&lt;br/&gt;
msg.PrintOn(cout);&lt;br/&gt;
&lt;br/&gt;
Output:&lt;br/&gt;
{&lt;br/&gt;
       version = 33&lt;br/&gt;
       mId = domainName {&lt;br/&gt;
         name = &amp;quot; [10.10.100.4]:2944 T=12449096{C=${A=T00100000003&amp;quot;&lt;br/&gt;
         portNumber = 12338&lt;br/&gt;
       }&lt;br/&gt;
       messageBody = messageError {&lt;br/&gt;
         errorCode = 12336&lt;br/&gt;
       }&lt;br/&gt;
     }&lt;br/&gt;
&lt;br/&gt;
and payload starts like this:&lt;br/&gt;
&amp;quot;!/1 [10.10.100.4]:2944 T=12449096{C=${A=T0010000000302100005{E=12070391{.......&amp;quot;&lt;br/&gt;
&lt;br/&gt;
I also tried H248_MegacoMessage, but didnt help.&lt;br/&gt;
&lt;br/&gt;
Any1 else tried decoding Megaco messages successfully?&lt;/div&gt;</content>
  </entry>
  <entry>
    <author><name>jimm1909</name></author>
    <title type="text">Re: help with SIP compatability</title>
    <id>http://forums.packetizer.com/viewtopic.php?f=3&amp;t=196&amp;p=697#p697</id>
    <link rel="alternate" href="http://forums.packetizer.com/viewtopic.php?f=3&amp;t=196&amp;p=697#p697"/>
    <updated>2012-04-06T19:54:04Z</updated>
    <published>2012-04-06T19:54:04Z</published>
    <category term="Session Initiation Protocol (SIP)"/>
    <content type="html">&lt;div&gt;&lt;blockquote style="background-color: #ebeadd; border-left: 3px solid #0179b5;"&gt;&lt;div style="border-left: 1em solid #ebeadd;"&gt;&lt;cite&gt;aaron wrote:&lt;/cite&gt;&lt;br/&gt;
Thanks for the fast reply! This really helps clear up how the VoIP system will work. I think this will help make the sale.&lt;br/&gt;
Thanks again! &lt;img src="http://forums.packetizer.com/images/smilies/icon_e_biggrin.gif" alt=":D" title="Very Happy" /&gt;&lt;/div&gt;&lt;/blockquote&gt;
&lt;br/&gt;
Just curious if you were able to make the sale?&lt;br/&gt;
&lt;br/&gt;
Let us know!&lt;br/&gt;
&lt;br/&gt;
Thanks,&lt;br/&gt;
&lt;br/&gt;
-Jim&lt;/div&gt;</content>
  </entry>
  <entry>
    <author><name>sabayon</name></author>
    <title type="text">filtrar h323 en wireshark</title>
    <id>http://forums.packetizer.com/viewtopic.php?f=2&amp;t=248&amp;p=696#p696</id>
    <link rel="alternate" href="http://forums.packetizer.com/viewtopic.php?f=2&amp;t=248&amp;p=696#p696"/>
    <updated>2012-04-04T18:11:48Z</updated>
    <published>2012-04-04T18:11:48Z</published>
    <category term="H.323 / Packet-Switched Multimedia Systems"/>
    <content type="html">&lt;div&gt;Hola, conoces como filtrar una llamada en h323 que contenga los protocolos h325 y h245 en wireshark&lt;br/&gt;
&lt;br/&gt;
saludes&lt;/div&gt;</content>
  </entry>
  <entry>
    <author><name>paulej</name></author>
    <title type="text">Re: AES Crypt key generation</title>
    <id>http://forums.packetizer.com/viewtopic.php?f=72&amp;t=247&amp;p=695#p695</id>
    <link rel="alternate" href="http://forums.packetizer.com/viewtopic.php?f=72&amp;t=247&amp;p=695#p695"/>
    <updated>2012-04-04T15:10:44Z</updated>
    <published>2012-04-04T15:10:44Z</published>
    <category term="AES Crypt"/>
    <content type="html">&lt;div&gt;Getting access to the master key (K-2) is dependent on the password (and, thus, K-1).  If one were to somehow guess at K-2 should not bother you.  The fact that K-2 is used to encrypt the file does not compromise security, assuming one has a secure system with a reasonably good RNG; there's simply no way to guess at K-2.  Given that most users do not use strong passwords, K-2 is definitely the more secure key.  With a strong password, K-2 is equally strong.  It's perhaps worth noting that AES Crypt was not the first encryption tool to use this approach.  As one example, PGP did the same thing:&lt;br/&gt;
&lt;a href="http://en.wikipedia.org/wiki/Pretty_Good_Privacy#Confidentiality"&gt;http://en.wikipedia.org/wiki/Pretty_Good_Privacy#Confidentiality&lt;/a&gt;&lt;br/&gt;
&lt;br/&gt;
PGP use a public/private key pair as a &amp;quot;K-1&amp;quot; where we use a symmetric key K-1.  However, PGP's &amp;quot;session key&amp;quot; is more-or-less the same as AES Crypt's K-2.  In both PGP and AES Crypt, &amp;quot;K-2&amp;quot; is encrypted using &amp;quot;K-1&amp;quot;.&lt;br/&gt;
&lt;br/&gt;
With your use of hashing functions (SHA-512 and Whirlpool) to create a key, you should be mindful of the fact that hashing functions are not encryption functions.  They just take input and create something that looks random.  However, the output of a hash function is definitely not random.  Given random input, though, the output random.  Given predictable input, the output is predictable.  So, you can certainly use the hashing functions as you propose to generate a K-1 or K-2, but the input to those functions needs to be random.&lt;/div&gt;</content>
  </entry>
  <entry>
    <author><name>univmalik</name></author>
    <title type="text">Re: AES Crypt key generation</title>
    <id>http://forums.packetizer.com/viewtopic.php?f=72&amp;t=247&amp;p=694#p694</id>
    <link rel="alternate" href="http://forums.packetizer.com/viewtopic.php?f=72&amp;t=247&amp;p=694#p694"/>
    <updated>2012-04-04T08:58:23Z</updated>
    <published>2012-04-04T08:58:23Z</published>
    <category term="AES Crypt"/>
    <content type="html">&lt;div&gt;Yes that seemed to bother me a bit! Master key should be dependent somehow on the password. Maybe instead of using SHA-256 you can use SHA-512 derived from password and random salt (8192 times ofcourse) and cut the 512 bit output into 2 256 bit keys K-1 and K-2 in future designs maybe! That way the master key K-2 is dependent on the password and even if the OS RNG is flawed or doesn't have enough entropy (like mobiles or servers), we still can add entropy from the password... &lt;br/&gt;
&lt;br/&gt;
PS: I am making a software just for fun that uses two hash algorithms SHA-512 and Whirlpool. The hashes are then XORed to each other to produce K-1 and K-2! Will that compromise security?&lt;/div&gt;</content>
  </entry>
  <entry>
    <author><name>paulej</name></author>
    <title type="text">Re: AES Crypt key generation</title>
    <id>http://forums.packetizer.com/viewtopic.php?f=72&amp;t=247&amp;p=693#p693</id>
    <link rel="alternate" href="http://forums.packetizer.com/viewtopic.php?f=72&amp;t=247&amp;p=693#p693"/>
    <updated>2012-04-04T03:42:20Z</updated>
    <published>2012-04-04T03:42:20Z</published>
    <category term="AES Crypt"/>
    <content type="html">&lt;div&gt;AES Crypt uses two different keys.  One key is derived from the user's password (call that K-1).  In order to perform the encryption, we also need an initialization vector (call it IV-1), a value that also needs to be randomly generated in order to improve security.  We then generate a second key (K-2) and initialization vector (IV-2).&lt;br/&gt;
&lt;br/&gt;
We take K-1 and IV-1 and use those to encrypt K-2 and IV-2.  Those are stored in the file, which you have observed.  Given a strong password (and coupled with the way in which we derive K-1), this should be well protected.&lt;br/&gt;
&lt;br/&gt;
We then take K-2 and IV-2 and encrypt the file.&lt;br/&gt;
&lt;br/&gt;
So, to be able to break AES Crypt, one needs to be able to get K-2 and IV-2.  This should be virtually impossible unless there is a weakness in the random number generation.  Likewise, breaking K-1 and K-2 in order to then decrypt the file should be virtually impossible, assuming one used a reasonably strong password.  Since we use SHA-256 as a part of the K-1 derivation, one can easily argue that it also depends on the strength of SHA-256.  We're not aware of any weaknesses in that algorithm, and certainly not aware of anything that can be observed from 8192 rounds of SHA-256.&lt;br/&gt;
&lt;br/&gt;
In short, I see nothing insecure about storing K-2 and IV-2 in encrypted form in the file encrypted using another 256-bit key that is equally strong.  If that key can be so easily obtained, then it should be equally as easy to decrypt the entire file had we used K-1 and IV-1.  So, I think we can dismiss that as a flaw.&lt;br/&gt;
&lt;br/&gt;
Now, to your point about the random number generator...&lt;br/&gt;
&lt;br/&gt;
Encryption absolutely requires a strong random number generator (RNG).  In that, there is no doubt.  You are correct that many systems do not have enough entropy to generator too many random numbers, which is another reason why we hash the numbers we do get with SHA-256.  The objective is to try to offset any weaknesses in the RNG by hashing the values with at least some numbers that are random, this avoiding the possibility that we have sequences of digits in the key of IV that are characteristic of a particular RNG implementation.  We do assume that the operating system can generate some numbers that might be viewed as cryptographically strong, but we cannot introduce a better random number generator in software.  The underlying operating system absolutely is the best place to generate and maintain entropy data.  Thus, we rely on /dev/random and the Windows crypto APIs.&lt;br/&gt;
&lt;br/&gt;
The biggest weakness in this approach, we believe, is that the RNG on a system could be compromised.  Perhaps it generates a fixed, known sequence of integers.  If it did that, then that would mean I could fairly easily determine IV-2 and K-2, the most important data that is securing the file.  After all, if I knew the sequence in which numbers would be generated, then I would know exactly what the values for K-2 and IV-2 are.  I would not need to know K-1 or IV-1.&lt;br/&gt;
&lt;br/&gt;
The issue here, though, is that this weakness is the result of the system being compromised.  If somebody has a system that has been compromised, then absolutely no security software is going to protect you.  You may have a stealth random number generator and and use a perfectly random 256-bit key.  But, all I would need to do is get access to your key.  I could do that by logging your keystrokes or even reading through memory of an executing program.&lt;br/&gt;
&lt;br/&gt;
So, while we do not rely on Microsoft or other third parties to perform the encryption function, we do rely on the operating system to be a source of random numbers.  You may classify that as a weakness and I wish we had a better source of random numbers, too.  But the fact remains that if the operating system cannot be trusted to provide random numbers, then it cannot be trusted, period.  There is nothing we can do to address a system that has been compromised and that's really the only concern I have with the approach we take.&lt;/div&gt;</content>
  </entry>
  <entry>
    <author><name>univmalik</name></author>
    <title type="text">AES Crypt key generation</title>
    <id>http://forums.packetizer.com/viewtopic.php?f=72&amp;t=247&amp;p=692#p692</id>
    <link rel="alternate" href="http://forums.packetizer.com/viewtopic.php?f=72&amp;t=247&amp;p=692#p692"/>
    <updated>2012-04-03T12:13:37Z</updated>
    <published>2012-04-03T12:13:37Z</published>
    <category term="AES Crypt"/>
    <content type="html">&lt;div&gt;There seem to be 2 flaws in design. First I don't know why the encrypted key needs to be placed in the encrypted file as well. Like TrueCrypt that never stores a hash of password or the encrypted key.&lt;br/&gt;
&lt;br/&gt;
Secondly, key is randomly created can be a problem which means the key is not actually dependent on the password but the entropy of the system of that time which can be severely compromised and the Windows CryptoAPI is not even open source unlike dev/random, urandom in Linux. Can you explain it to me why you chose this particular design of AES Crypt. Thanks.&lt;/div&gt;</content>
  </entry>
  <entry>
    <author><name>mazilo</name></author>
    <title type="text">Re: ptlib/make/lib.mak no longer available</title>
    <id>http://forums.packetizer.com/viewtopic.php?f=46&amp;t=246&amp;p=691#p691</id>
    <link rel="alternate" href="http://forums.packetizer.com/viewtopic.php?f=46&amp;t=246&amp;p=691#p691"/>
    <updated>2012-04-01T13:31:10Z</updated>
    <published>2012-04-01T13:31:10Z</published>
    <category term="H.323 Plus"/>
    <content type="html">&lt;div&gt;I traced back to PTLib r27227, the last PTLib SVN revision below ptlib/make/lib.mak file gets removed. I created a patch file for src/Makefile file to remove lib.mak dependency as shown below.&lt;br/&gt;
&lt;br/&gt;
&lt;div style="background-color: #eeeeee; border-left: 3px solid #2e8b57; margin-top: 1em"&gt;&lt;code&gt;--- a/src/Makefile&lt;br/&gt;
+++ b/src/Makefile&lt;br/&gt;
@@ -348,8 +348,6 @@ SYSLIBS        += -l$(PTLIB_BASE)$(LIB_T&lt;br/&gt;
 LIB_BASENAME=$(OH323_BASE)&lt;br/&gt;
 LIB_FILENAME=$(OH323_FILE)&lt;br/&gt;
 &lt;br/&gt;
-include $(PTLIBDIR)/make/lib.mak&lt;br/&gt;
-&lt;br/&gt;
 ####################################################&lt;/code&gt;&lt;/div&gt;&lt;br/&gt;
&lt;br/&gt;
If I applied the above patch, the cross compilation will not be able to compile to produce any libh323.* library as shown below:&lt;br/&gt;
&lt;br/&gt;
&lt;div style="background-color: #eeeeee; border-left: 3px solid #2e8b57; margin-top: 1em"&gt;&lt;code&gt;make -j1 -C /opt/openwrt-svn-trunk/build_dir/target-mipsel_uClibc-0.9.33/h323plus_cvs DESTDIR=&amp;quot;/opt/openwrt-svn-trunk/build_dir/target-mipsel_uClibc-0.9.33/h323plus_cvs/ipkg-install&amp;quot; opt install&lt;br/&gt;
make&amp;#91;3&amp;#93;: Entering directory `/opt/openwrt-svn-trunk/build_dir/target-mipsel_uClibc-0.9.33/h323plus_cvs'&lt;br/&gt;
make&amp;#91;4&amp;#93;: Entering directory `/opt/openwrt-svn-trunk/build_dir/target-mipsel_uClibc-0.9.33/h323plus_cvs'&lt;br/&gt;
make&amp;#91;4&amp;#93;: Leaving directory `/opt/openwrt-svn-trunk/build_dir/target-mipsel_uClibc-0.9.33/h323plus_cvs'&lt;br/&gt;
make -C src opt&lt;br/&gt;
make&amp;#91;4&amp;#93;: Entering directory `/opt/openwrt-svn-trunk/build_dir/target-mipsel_uClibc-0.9.33/h323plus_cvs/src'&lt;br/&gt;
make&amp;#91;5&amp;#93;: Entering directory `/opt/openwrt-svn-trunk/build_dir/target-mipsel_uClibc-0.9.33/h323plus_cvs/src'&lt;br/&gt;
make&amp;#91;5&amp;#93;: *** No rule to make target `/opt/openwrt-svn-trunk/build_dir/target-mipsel_uClibc-0.9.33/h323plus_cvs/lib/libh323__.so', needed by `default_target'.  Stop.&lt;br/&gt;
make&amp;#91;5&amp;#93;: Leaving directory `/opt/openwrt-svn-trunk/build_dir/target-mipsel_uClibc-0.9.33/h323plus_cvs/src'&lt;br/&gt;
make&amp;#91;4&amp;#93;: *** &amp;#91;opt&amp;#93; Error 2&lt;br/&gt;
make&amp;#91;4&amp;#93;: Leaving directory `/opt/openwrt-svn-trunk/build_dir/target-mipsel_uClibc-0.9.33/h323plus_cvs/src'&lt;br/&gt;
make&amp;#91;3&amp;#93;: *** &amp;#91;opt&amp;#93; Error 2&lt;br/&gt;
make&amp;#91;3&amp;#93;: Leaving directory `/opt/openwrt-svn-trunk/build_dir/target-mipsel_uClibc-0.9.33/h323plus_cvs'&lt;br/&gt;
make&amp;#91;2&amp;#93;: *** &amp;#91;/opt/openwrt-svn-trunk/build_dir/target-mipsel_uClibc-0.9.33/h323plus_cvs/.built&amp;#93; Error 2&lt;br/&gt;
make&amp;#91;2&amp;#93;: Leaving directory `/opt/OpenWRT/feeds/packages/libs/h323plus_cvs'&lt;br/&gt;
make&amp;#91;1&amp;#93;: *** &amp;#91;package/feeds/local/h323plus_cvs/compile&amp;#93; Error 2&lt;br/&gt;
make&amp;#91;1&amp;#93;: Leaving directory `/opt/openwrt-svn-trunk'&lt;br/&gt;
make: *** &amp;#91;package/h323plus_cvs/compile&amp;#93; Error 2&lt;/code&gt;&lt;/div&gt;&lt;/div&gt;</content>
  </entry>
  <entry>
    <author><name>mazilo</name></author>
    <title type="text">ptlib/make/lib.mak no longer available</title>
    <id>http://forums.packetizer.com/viewtopic.php?f=46&amp;t=246&amp;p=689#p689</id>
    <link rel="alternate" href="http://forums.packetizer.com/viewtopic.php?f=46&amp;t=246&amp;p=689#p689"/>
    <updated>2012-03-27T18:32:41Z</updated>
    <published>2012-03-27T18:32:41Z</published>
    <category term="H.323 Plus"/>
    <content type="html">&lt;div&gt;Looks like H323Plus is now not cross compilable with the latest PTLib. I just did an update to my local PTLib, Opal, and H323Plus with the latest revision. When I tried to cross compile H323Plus, it spitted out an error message saying &lt;span style="font-style: italic"&gt;No such file or directory&lt;/span&gt; for ptlib/make/lib.mak as seen below.&lt;br/&gt;
&lt;br/&gt;
&lt;div style="background-color: #eeeeee; border-left: 3px solid #2e8b57; margin-top: 1em"&gt;&lt;code&gt;make&amp;#91;2&amp;#93;: Entering directory `/opt/OpenWRT/feeds/packages/libs/h323plus_cvs'&lt;br/&gt;
. /opt/openwrt-svn-trunk/include/shell.sh; bzcat /opt/openwrt-svn-trunk/dl/h323plus_cvs-20120327.tar.bz2 | /bin/tar -C /opt/openwrt-svn-trunk/build_dir/target-arm_v5te_uClibc-0.9.33_eabi/h323plus_cvs/.. -xf - --strip-components=1 -C /opt/openwrt-svn-trunk/build_dir/target-arm_v5te_uClibc-0.9.33_eabi/h323plus_cvs &lt;br/&gt;
rm -rf /opt/openwrt-svn-trunk/build_dir/target-arm_v5te_uClibc-0.9.33_eabi/h323plus_cvs/patches; mkdir -p /opt/openwrt-svn-trunk/build_dir/target-arm_v5te_uClibc-0.9.33_eabi/h323plus_cvs/patches&lt;br/&gt;
touch /opt/openwrt-svn-trunk/build_dir/target-arm_v5te_uClibc-0.9.33_eabi/h323plus_cvs/.quilt_used&lt;br/&gt;
touch /opt/openwrt-svn-trunk/build_dir/target-arm_v5te_uClibc-0.9.33_eabi/h323plus_cvs/.prepared&lt;br/&gt;
if &amp;#91; -s &amp;quot;/opt/openwrt-svn-trunk/build_dir/target-arm_v5te_uClibc-0.9.33_eabi/h323plus_cvs/patches/series&amp;quot; &amp;#93;; then (cd &amp;quot;/opt/openwrt-svn-trunk/build_dir/target-arm_v5te_uClibc-0.9.33_eabi/h323plus_cvs&amp;quot;; if quilt --quiltrc=- next &amp;gt;/dev/null 2&amp;gt;&amp;amp;1; then quilt --quiltrc=- push -a; else quilt --quiltrc=- top &amp;gt;/dev/null 2&amp;gt;&amp;amp;1; fi ); fi&lt;br/&gt;
touch &amp;quot;/opt/openwrt-svn-trunk/build_dir/target-arm_v5te_uClibc-0.9.33_eabi/h323plus_cvs/.quilt_checked&amp;quot;&lt;br/&gt;
#(cd /opt/openwrt-svn-trunk/build_dir/target-arm_v5te_uClibc-0.9.33_eabi/h323plus_cvs; &amp;#91; -e configure &amp;#93; &amp;amp;&amp;amp; rm configure)&lt;br/&gt;
#(cd /opt/openwrt-svn-trunk/build_dir/target-arm_v5te_uClibc-0.9.33_eabi/h323plus_cvs; /opt/openwrt-svn-trunk/staging_dir/host/bin/aclocal.real --force)&lt;br/&gt;
#(cd /opt/openwrt-svn-trunk/build_dir/target-arm_v5te_uClibc-0.9.33_eabi/h323plus_cvs; /opt/openwrt-svn-trunk/staging_dir/host/bin/autoconf -f)&lt;br/&gt;
(cd /opt/openwrt-svn-trunk/build_dir/target-arm_v5te_uClibc-0.9.33_eabi/h323plus_cvs/./; if &amp;#91; -x ./configure &amp;#93;; then /usr/bin/find /opt/openwrt-svn-trunk/build_dir/target-arm_v5te_uClibc-0.9.33_eabi/h323plus_cvs/ -name config.guess | xargs -r chmod u+w; /usr/bin/find /opt/openwrt-svn-trunk/build_dir/target-arm_v5te_uClibc-0.9.33_eabi/h323plus_cvs/ -name config.guess | xargs -r -n1 cp /opt/openwrt-svn-trunk/scripts/config.guess; /usr/bin/find /opt/openwrt-svn-trunk/build_dir/target-arm_v5te_uClibc-0.9.33_eabi/h323plus_cvs/ -name config.sub | xargs -r chmod u+w; /usr/bin/find /opt/openwrt-svn-trunk/build_dir/target-arm_v5te_uClibc-0.9.33_eabi/h323plus_cvs/ -name config.sub | xargs -r -n1 cp /opt/openwrt-svn-trunk/scripts/config.sub; AR=arm-openwrt-linux-uclibcgnueabi-ar AS=&amp;quot;arm-openwrt-linux-uclibcgnueabi-gcc -c -Os -pipe -march=armv5te -mtune=xscale -fno-caller-saves -fhonour-copts -Wno-error=unused-but-set-variable -msoft-float&amp;quot; LD=arm-openwrt-linux-uclibcgnueabi-ld NM=arm-openwrt-linux-uclibcgnueabi-nm CC=&amp;quot;arm-openwrt-linux-uclibcgnueabi-gcc&amp;quot; GCC=&amp;quot;arm-openwrt-linux-uclibcgnueabi-gcc&amp;quot; CXX=&amp;quot;arm-openwrt-linux-uclibcgnueabi-g++&amp;quot; RANLIB=arm-openwrt-linux-uclibcgnueabi-ranlib STRIP=arm-openwrt-linux-uclibcgnueabi-strip OBJCOPY=arm-openwrt-linux-uclibcgnueabi-objcopy OBJDUMP=arm-openwrt-linux-uclibcgnueabi-objdump SIZE=arm-openwrt-linux-uclibcgnueabi-size CFLAGS=&amp;quot;-Os -pipe -march=armv5te -mtune=xscale -fno-caller-saves -fhonour-copts -Wno-error=unused-but-set-variable -msoft-float &amp;quot; CXXFLAGS=&amp;quot;-Os -pipe -march=armv5te -mtune=xscale -fno-caller-saves -fhonour-copts -Wno-error=unused-but-set-variable -msoft-float &amp;quot; CPPFLAGS=&amp;quot;-I/opt/openwrt-svn-trunk/staging_dir/target-arm_v5te_uClibc-0.9.33_eabi/usr/include -I/opt/openwrt-svn-trunk/staging_dir/target-arm_v5te_uClibc-0.9.33_eabi/include -I/opt/openwrt-svn-trunk/staging_dir/toolchain-arm_v5te_gcc-4.6-linaro_uClibc-0.9.33_eabi/usr/include -I/opt/openwrt-svn-trunk/staging_dir/toolchain-arm_v5te_gcc-4.6-linaro_uClibc-0.9.33_eabi/include &amp;quot; LDFLAGS=&amp;quot;-L/opt/openwrt-svn-trunk/staging_dir/target-arm_v5te_uClibc-0.9.33_eabi/usr/lib -L/opt/openwrt-svn-trunk/staging_dir/target-arm_v5te_uClibc-0.9.33_eabi/lib -L/opt/openwrt-svn-trunk/staging_dir/toolchain-arm_v5te_gcc-4.6-linaro_uClibc-0.9.33_eabi/usr/lib -L/opt/openwrt-svn-trunk/staging_dir/toolchain-arm_v5te_gcc-4.6-linaro_uClibc-0.9.33_eabi/lib &amp;quot;   ./configure --target=arm-openwrt-linux --host=arm-openwrt-linux --build=x86_64-suse-linux --program-prefix=&amp;quot;&amp;quot; --program-suffix=&amp;quot;&amp;quot; --prefix=/usr --exec-prefix=/usr --bindir=/usr/bin --sbindir=/usr/sbin --libexecdir=/usr/lib --sysconfdir=/etc --datadir=/usr/share --localstatedir=/var --mandir=/usr/man --infodir=/usr/info --disable-nls   --host=arm-openwrt-linux --build=x86_64-suse-linux --prefix=&amp;quot;/usr&amp;quot; --enable-asntracing --enable-audio --disable-aec --enable-file --enable-gnugk --enable-h224 --enable-h230 --enable-h235 --enable-h239 --enable-h248 --enable-h249 --enable-h341 --enable-h350 --enable-h450 --enable-h46017 --enable-h46018 --enable-h46019m --disable-h46023 --enable-h4609 --enable-h460 --enable-h460p --enable-h501 --enable-option-checking --enable-t120 --enable-t38 --enable-versioncheck --enable-video --enable-capi --enable-celt --enable-default-to-full-capabilties --enable-h264 --enable-ixj --enable-libavcodec --enable-libavcodec-stackalign-hack --enable-localgsm --enable-localilbc --enable-localspeex --enable-sbc --enable-spandsp --enable-theora --enable-vpb --enable-x264 --enable-x264-link-static  ; fi; )&lt;br/&gt;
configure: WARNING: unrecognized options: --disable-nls, --enable-capi, --enable-celt, --enable-default-to-full-capabilties, --enable-h264, --enable-ixj, --enable-libavcodec, --enable-libavcodec-stackalign-hack, --enable-localgsm, --enable-localilbc, --enable-localspeex, --enable-sbc, --enable-spandsp, --enable-theora, --enable-vpb, --enable-x264, --enable-x264-link-static&lt;br/&gt;
configure: loading site script /opt/openwrt-svn-trunk/include/site/arm-openwrt-linux-uclibcgnueabi&lt;br/&gt;
checking whether the C++ compiler works... yes&lt;br/&gt;
checking for C++ compiler default output file name... a.out&lt;br/&gt;
checking for suffix of executables... &lt;br/&gt;
checking whether we are cross compiling... yes&lt;br/&gt;
checking for suffix of object files... o&lt;br/&gt;
checking whether we are using the GNU C++ compiler... yes&lt;br/&gt;
checking whether arm-openwrt-linux-uclibcgnueabi-g++ accepts -g... yes&lt;br/&gt;
checking for arm-openwrt-linux-gcc... arm-openwrt-linux-uclibcgnueabi-gcc&lt;br/&gt;
checking whether we are using the GNU C compiler... yes&lt;br/&gt;
checking whether arm-openwrt-linux-uclibcgnueabi-gcc accepts -g... yes&lt;br/&gt;
checking for arm-openwrt-linux-uclibcgnueabi-gcc option to accept ISO C89... none needed&lt;br/&gt;
checking how to run the C preprocessor... arm-openwrt-linux-uclibcgnueabi-gcc -E&lt;br/&gt;
checking for grep that handles long lines and -e... /usr/bin/grep&lt;br/&gt;
checking for egrep... /usr/bin/grep -E&lt;br/&gt;
checking for ANSI C header files... yes&lt;br/&gt;
OpenH323 version is 1.24.1&lt;br/&gt;
checking for sys/types.h... yes&lt;br/&gt;
checking for sys/stat.h... yes&lt;br/&gt;
checking for stdlib.h... yes&lt;br/&gt;
checking for string.h... yes&lt;br/&gt;
checking for memory.h... yes&lt;br/&gt;
checking for strings.h... yes&lt;br/&gt;
checking for inttypes.h... yes&lt;br/&gt;
checking for stdint.h... yes&lt;br/&gt;
checking for unistd.h... yes&lt;br/&gt;
checking /opt/openwrt-svn-trunk/build_dir/target-arm_v5te_uClibc-0.9.33_eabi/ptlib2_svn/version.h usability... yes&lt;br/&gt;
checking /opt/openwrt-svn-trunk/build_dir/target-arm_v5te_uClibc-0.9.33_eabi/ptlib2_svn/version.h presence... yes&lt;br/&gt;
checking for /opt/openwrt-svn-trunk/build_dir/target-arm_v5te_uClibc-0.9.33_eabi/ptlib2_svn/version.h... yes&lt;br/&gt;
PTLib prefix set to.... /opt/openwrt-svn-trunk/build_dir/target-arm_v5te_uClibc-0.9.33_eabi/ptlib2_svn&lt;br/&gt;
checking Checking PTLib version 2.11.2... ok&lt;br/&gt;
configure: Disabling H.460.23/.24&lt;br/&gt;
configure: Enabling T.38&lt;br/&gt;
configure: AEC disabled&lt;br/&gt;
checking for a BSD-compatible install... /usr/bin/install -c&lt;br/&gt;
configure: creating ./config.status&lt;br/&gt;
config.status: creating openh323u.mak&lt;br/&gt;
config.status: creating Makefile&lt;br/&gt;
config.status: creating include/openh323buildopts.h&lt;br/&gt;
=== configuring in plugins (/opt/openwrt-svn-trunk/build_dir/target-arm_v5te_uClibc-0.9.33_eabi/h323plus_cvs/plugins)&lt;br/&gt;
configure: running /bin/sh ./configure --disable-option-checking '--prefix=/usr'  '--target=arm-openwrt-linux' '--program-prefix=' '--program-suffix=' '--exec-prefix=/usr' '--bindir=/usr/bin' '--sbindir=/usr/sbin' '--libexecdir=/usr/lib' '--sysconfdir=/etc' '--datadir=/usr/share' '--localstatedir=/var' '--mandir=/usr/man' '--infodir=/usr/info' '--disable-nls' '--host=arm-openwrt-linux' '--build=x86_64-suse-linux' '--enable-asntracing' '--enable-audio' '--disable-aec' '--enable-file' '--enable-gnugk' '--enable-h224' '--enable-h230' '--enable-h235' '--enable-h239' '--enable-h248' '--enable-h249' '--enable-h341' '--enable-h350' '--enable-h450' '--enable-h46017' '--enable-h46018' '--enable-h46019m' '--disable-h46023' '--enable-h4609' '--enable-h460' '--enable-h460p' '--enable-h501' '--enable-option-checking' '--enable-t120' '--enable-t38' '--enable-versioncheck' '--enable-video' '--enable-capi' '--enable-celt' '--enable-default-to-full-capabilties' '--enable-h264' '--enable-ixj' '--enable-libavcodec' '--enable-libavcodec-stackalign-hack' '--enable-localgsm' '--enable-localilbc' '--enable-localspeex' '--enable-sbc' '--enable-spandsp' '--enable-theora' '--enable-vpb' '--enable-x264' '--enable-x264-link-static' 'build_alias=x86_64-suse-linux' 'host_alias=arm-openwrt-linux' 'target_alias=arm-openwrt-linux' 'CXX=arm-openwrt-linux-uclibcgnueabi-g++' 'CXXFLAGS=-Os -pipe -march=armv5te -mtune=xscale -fno-caller-saves -fhonour-copts -Wno-error=unused-but-set-variable -msoft-float ' 'LDFLAGS=-L/opt/openwrt-svn-trunk/staging_dir/target-arm_v5te_uClibc-0.9.33_eabi/usr/lib -L/opt/openwrt-svn-trunk/staging_dir/target-arm_v5te_uClibc-0.9.33_eabi/lib -L/opt/openwrt-svn-trunk/staging_dir/toolchain-arm_v5te_gcc-4.6-linaro_uClibc-0.9.33_eabi/usr/lib -L/opt/openwrt-svn-trunk/staging_dir/toolchain-arm_v5te_gcc-4.6-linaro_uClibc-0.9.33_eabi/lib ' 'CPPFLAGS=-I/opt/openwrt-svn-trunk/staging_dir/target-arm_v5te_uClibc-0.9.33_eabi/usr/include -I/opt/openwrt-svn-trunk/staging_dir/target-arm_v5te_uClibc-0.9.33_eabi/include -I/opt/openwrt-svn-trunk/staging_dir/toolchain-arm_v5te_gcc-4.6-linaro_uClibc-0.9.33_eabi/usr/include -I/opt/openwrt-svn-trunk/staging_dir/toolchain-arm_v5te_gcc-4.6-linaro_uClibc-0.9.33_eabi/include ' 'CC=arm-openwrt-linux-uclibcgnueabi-gcc' 'CFLAGS=-Os -pipe -march=armv5te -mtune=xscale -fno-caller-saves -fhonour-copts -Wno-error=unused-but-set-variable -msoft-float ' --cache-file=/dev/null --srcdir=.&lt;br/&gt;
configure: WARNING: unrecognized options: --disable-nls, --enable-asntracing, --enable-audio, --disable-aec, --enable-file, --enable-gnugk, --enable-h224, --enable-h230, --enable-h235, --enable-h239, --enable-h248, --enable-h249, --enable-h341, --enable-h350, --enable-h450, --enable-h46017, --enable-h46018, --enable-h46019m, --disable-h46023, --enable-h4609, --enable-h460, --enable-h460p, --enable-h501, --enable-t120, --enable-t38, --enable-versioncheck, --enable-video&lt;br/&gt;
configure: loading site script /opt/openwrt-svn-trunk/include/site/arm-openwrt-linux-uclibcgnueabi&lt;br/&gt;
checking pkg-config is at least version 0.9.0... yes&lt;br/&gt;
checking build system type... x86_64-suse-linux-gnu&lt;br/&gt;
checking host system type... arm-openwrt-linux-gnu&lt;br/&gt;
checking target system type... arm-openwrt-linux-gnu&lt;br/&gt;
checking Debugging support... no&lt;br/&gt;
checking for C++ compiler default output file name... a.out&lt;br/&gt;
checking whether the C++ compiler works... yes&lt;br/&gt;
checking whether we are cross compiling... yes&lt;br/&gt;
checking for suffix of executables... &lt;br/&gt;
checking for suffix of object files... o&lt;br/&gt;
checking whether we are using the GNU C++ compiler... yes&lt;br/&gt;
checking whether arm-openwrt-linux-uclibcgnueabi-g++ accepts -g... yes&lt;br/&gt;
checking for arm-openwrt-linux-gcc... arm-openwrt-linux-uclibcgnueabi-gcc&lt;br/&gt;
checking whether we are using the GNU C compiler... yes&lt;br/&gt;
checking whether arm-openwrt-linux-uclibcgnueabi-gcc accepts -g... yes&lt;br/&gt;
checking for arm-openwrt-linux-uclibcgnueabi-gcc option to accept ISO C89... none needed&lt;br/&gt;
checking for a BSD-compatible install... /usr/bin/install -c&lt;br/&gt;
checking for arm-openwrt-linux-ranlib... arm-openwrt-linux-uclibcgnueabi-ranlib&lt;br/&gt;
checking for arm-openwrt-linux-nm... arm-openwrt-linux-uclibcgnueabi-nm&lt;br/&gt;
checking for arm-openwrt-linux-ldd... no&lt;br/&gt;
checking for ldd... ldd&lt;br/&gt;
configure: WARNING: using cross tools not prefixed with host triplet&lt;br/&gt;
checking for arm-openwrt-linux-objdump... arm-openwrt-linux-uclibcgnueabi-objdump&lt;br/&gt;
checking how to run the C preprocessor... arm-openwrt-linux-uclibcgnueabi-gcc -E&lt;br/&gt;
checking for grep that handles long lines and -e... /usr/bin/grep&lt;br/&gt;
checking for egrep... /usr/bin/grep -E&lt;br/&gt;
checking for ANSI C header files... yes&lt;br/&gt;
checking for sys/types.h... yes&lt;br/&gt;
checking for sys/stat.h... yes&lt;br/&gt;
checking for stdlib.h... yes&lt;br/&gt;
checking for string.h... yes&lt;br/&gt;
checking for memory.h... yes&lt;br/&gt;
checking for strings.h... yes&lt;br/&gt;
checking for inttypes.h... yes&lt;br/&gt;
checking for stdint.h... yes&lt;br/&gt;
checking for unistd.h... yes&lt;br/&gt;
checking stddef.h usability... yes&lt;br/&gt;
checking stddef.h presence... yes&lt;br/&gt;
checking for stddef.h... yes&lt;br/&gt;
checking limits.h usability... yes&lt;br/&gt;
checking limits.h presence... yes&lt;br/&gt;
checking for limits.h... yes&lt;br/&gt;
checking float.h usability... yes&lt;br/&gt;
checking float.h presence... yes&lt;br/&gt;
checking for float.h... yes&lt;br/&gt;
checking fcntl.h usability... yes&lt;br/&gt;
checking fcntl.h presence... yes&lt;br/&gt;
checking for fcntl.h... yes&lt;br/&gt;
checking OPAL Version... 1.24.1&lt;br/&gt;
checking Plugin install directory... /usr/lib/opal-1.24.1&lt;br/&gt;
checking sys/time.h usability... yes&lt;br/&gt;
checking sys/time.h presence... yes&lt;br/&gt;
checking for sys/time.h... yes&lt;br/&gt;
checking sys/file.h usability... yes&lt;br/&gt;
checking sys/file.h presence... yes&lt;br/&gt;
checking for sys/file.h... yes&lt;br/&gt;
checking netinet/in.h usability... yes&lt;br/&gt;
checking netinet/in.h presence... yes&lt;br/&gt;
checking for netinet/in.h... yes&lt;br/&gt;
checking vfork.h usability... no&lt;br/&gt;
checking vfork.h presence... no&lt;br/&gt;
checking for vfork.h... no&lt;br/&gt;
checking for fork... yes&lt;br/&gt;
checking for vfork... yes&lt;br/&gt;
checking for working fork... cross&lt;br/&gt;
configure: WARNING: result yes guessed because of cross compilation&lt;br/&gt;
checking for working vfork... (cached) yes&lt;br/&gt;
configure: Forcing use of local GSM sources&lt;br/&gt;
checking size of short... (cached) 2&lt;br/&gt;
checking size of int... (cached) 4&lt;br/&gt;
checking size of long... (cached) 4&lt;br/&gt;
checking size of long long... (cached) 8&lt;br/&gt;
checking internal Speex version... 1.1.11.1&lt;br/&gt;
configure: forcing use of local Speex sources&lt;br/&gt;
configure: forcing use of local iLBC sources&lt;br/&gt;
checking for src_get_version in -lsamplerate... no&lt;br/&gt;
checking default to full capabilities at empty fmtp lines... yes&lt;br/&gt;
checking for LIBAVCODEC... no&lt;br/&gt;
checking libavcodec source... disabled&lt;br/&gt;
checking for X264... no&lt;br/&gt;
checking for THEORA... no&lt;br/&gt;
checking for CELT... no&lt;br/&gt;
checking dlfcn.h usability... yes&lt;br/&gt;
checking dlfcn.h presence... yes&lt;br/&gt;
checking for dlfcn.h... yes&lt;br/&gt;
checking if dlopen is available... yes&lt;br/&gt;
checking for dlopen in -ldl... yes&lt;br/&gt;
configure: h264 support disabled due to disabled dependency HAVE_X264&lt;br/&gt;
configure: h264 support disabled due to disabled dependency HAVE_H264_DECODER&lt;br/&gt;
checking enable H.264 support... no&lt;br/&gt;
checking IXJ... yes&lt;br/&gt;
checking linux/telephony.h usability... yes&lt;br/&gt;
checking linux/telephony.h presence... yes&lt;br/&gt;
checking for linux/telephony.h... yes&lt;br/&gt;
checking IXJ... yes&lt;br/&gt;
checking enable voicetronix vpb... yes&lt;br/&gt;
checking capi20.h usability... no&lt;br/&gt;
checking capi20.h presence... no&lt;br/&gt;
checking for capi20.h... no&lt;br/&gt;
checking CAPI... no&lt;br/&gt;
checking for fax_free in -lspandsp... no&lt;br/&gt;
checking for posix_memalign... yes&lt;br/&gt;
configure: creating ./config.status&lt;br/&gt;
config.status: creating audio/G722/Makefile&lt;br/&gt;
config.status: creating audio/G.722.1/Makefile&lt;br/&gt;
config.status: creating audio/G.722.2/Makefile&lt;br/&gt;
config.status: creating audio/GSM0610/Makefile&lt;br/&gt;
config.status: creating audio/gsm-amr/Makefile&lt;br/&gt;
config.status: creating audio/iLBC/Makefile&lt;br/&gt;
config.status: creating audio/Speex/Makefile&lt;br/&gt;
config.status: creating audio/LPC_10/Makefile&lt;br/&gt;
config.status: creating audio/G726/Makefile&lt;br/&gt;
config.status: creating audio/IMA_ADPCM/Makefile&lt;br/&gt;
config.status: creating audio/SBC/Makefile&lt;br/&gt;
config.status: creating audio/celt/Makefile&lt;br/&gt;
config.status: creating video/H.261-vic/Makefile&lt;br/&gt;
config.status: creating video/H.263-ffmpeg/Makefile&lt;br/&gt;
config.status: creating video/H.263-1998/Makefile&lt;br/&gt;
config.status: creating video/H.264/Makefile&lt;br/&gt;
config.status: creating video/H.264/gpl/Makefile&lt;br/&gt;
config.status: creating Makefile&lt;br/&gt;
config.status: creating audio/Speex/libspeex/speex_config_types.h&lt;br/&gt;
configure: WARNING: unrecognized options: --disable-nls, --enable-asntracing, --enable-audio, --disable-aec, --enable-file, --enable-gnugk, --enable-h224, --enable-h230, --enable-h235, --enable-h239, --enable-h248, --enable-h249, --enable-h341, --enable-h350, --enable-h450, --enable-h46017, --enable-h46018, --enable-h46019m, --disable-h46023, --enable-h4609, --enable-h460, --enable-h460p, --enable-h501, --enable-t120, --enable-t38, --enable-versioncheck, --enable-video&lt;br/&gt;
configure: creating ./config.status&lt;br/&gt;
config.status: creating audio/G722/Makefile&lt;br/&gt;
config.status: creating audio/G.722.1/Makefile&lt;br/&gt;
config.status: creating audio/G.722.2/Makefile&lt;br/&gt;
config.status: creating audio/GSM0610/Makefile&lt;br/&gt;
config.status: creating audio/gsm-amr/Makefile&lt;br/&gt;
config.status: creating audio/iLBC/Makefile&lt;br/&gt;
config.status: creating audio/Speex/Makefile&lt;br/&gt;
config.status: creating audio/LPC_10/Makefile&lt;br/&gt;
config.status: creating audio/G726/Makefile&lt;br/&gt;
config.status: creating audio/IMA_ADPCM/Makefile&lt;br/&gt;
config.status: creating audio/SBC/Makefile&lt;br/&gt;
config.status: creating audio/celt/Makefile&lt;br/&gt;
config.status: creating video/H.261-vic/Makefile&lt;br/&gt;
config.status: creating video/H.263-ffmpeg/Makefile&lt;br/&gt;
config.status: creating video/H.263-1998/Makefile&lt;br/&gt;
config.status: creating video/H.264/Makefile&lt;br/&gt;
config.status: creating video/H.264/gpl/Makefile&lt;br/&gt;
config.status: creating Makefile&lt;br/&gt;
config.status: creating audio/Speex/libspeex/speex_config_types.h&lt;br/&gt;
config.status: creating plugin-config.h&lt;br/&gt;
configure: WARNING: unrecognized options: --disable-nls, --enable-asntracing, --enable-audio, --disable-aec, --enable-file, --enable-gnugk, --enable-h224, --enable-h230, --enable-h235, --enable-h239, --enable-h248, --enable-h249, --enable-h341, --enable-h350, --enable-h450, --enable-h46017, --enable-h46018, --enable-h46019m, --disable-h46023, --enable-h4609, --enable-h460, --enable-h460p, --enable-h501, --enable-t120, --enable-t38, --enable-versioncheck, --enable-video&lt;br/&gt;
&lt;br/&gt;
=================== Plugin configuration ======================&lt;br/&gt;
 prefix                           : /usr&lt;br/&gt;
 exec_prefix                      : /usr&lt;br/&gt;
 libdir                           : ${exec_prefix}/lib&lt;br/&gt;
 Audio Codec plugin install dir   : ${libdir}/opal-1.24.1/codecs/audio&lt;br/&gt;
 Video Codec plugin install prefix: ${libdir}/opal-1.24.1/codecs/video&lt;br/&gt;
 LID plugin install prefix        : ${libdir}/opal-1.24.1/lid&lt;br/&gt;
 FAX plugin install prefix        : ${libdir}/opal-1.24.1/fax&lt;br/&gt;
&lt;br/&gt;
                              GSM :  yes (internal)&lt;br/&gt;
                          gsm-amr :  yes&lt;br/&gt;
                             iLBC :  yes (internal)&lt;br/&gt;
                            Speex :  yes (internal, version 1.1.11.1)&lt;br/&gt;
                            LPC10 :  yes&lt;br/&gt;
                            G.726 :  yes&lt;br/&gt;
                        IMA_ADPCM :  yes&lt;br/&gt;
                              SBC :  no&lt;br/&gt;
&lt;br/&gt;
                           H.261  :  yes&lt;br/&gt;
                           H.263  :  no (ffmpeg version)&lt;br/&gt;
                     H.263/H.263+ :  no&lt;br/&gt;
                           H.264  :  no&lt;br/&gt;
                          THEORA  :  no&lt;br/&gt;
                    MPEG4 Part 2  :  no&lt;br/&gt;
                            CELT  :  no&lt;br/&gt;
&lt;br/&gt;
                     SpanDSP FAX  :  no&lt;br/&gt;
&lt;br/&gt;
                            CAPI  :  no&lt;br/&gt;
           Quicknet xJACK support :  yes&lt;br/&gt;
         Voicetronics VPB support :  yes&lt;br/&gt;
&lt;br/&gt;
                         OS Type  :  linux-gnu&lt;br/&gt;
                    Machine Type  :  arm&lt;br/&gt;
&lt;br/&gt;
 If all settings are OK, type make and make install &lt;br/&gt;
========================================================&lt;br/&gt;
configure: WARNING: unrecognized options: --disable-nls, --enable-capi, --enable-celt, --enable-default-to-full-capabilties, --enable-h264, --enable-ixj, --enable-libavcodec, --enable-libavcodec-stackalign-hack, --enable-localgsm, --enable-localilbc, --enable-localspeex, --enable-sbc, --enable-spandsp, --enable-theora, --enable-vpb, --enable-x264, --enable-x264-link-static&lt;br/&gt;
rm -f /opt/openwrt-svn-trunk/build_dir/target-arm_v5te_uClibc-0.9.33_eabi/h323plus_cvs/.configured_&lt;br/&gt;
touch /opt/openwrt-svn-trunk/build_dir/target-arm_v5te_uClibc-0.9.33_eabi/h323plus_cvs/.configured_&lt;br/&gt;
make -j1 -C /opt/openwrt-svn-trunk/build_dir/target-arm_v5te_uClibc-0.9.33_eabi/h323plus_cvs DESTDIR=&amp;quot;/opt/openwrt-svn-trunk/build_dir/target-arm_v5te_uClibc-0.9.33_eabi/h323plus_cvs/ipkg-install&amp;quot;&lt;br/&gt;
make&amp;#91;3&amp;#93;: Entering directory `/opt/openwrt-svn-trunk/build_dir/target-arm_v5te_uClibc-0.9.33_eabi/h323plus_cvs'&lt;br/&gt;
make&amp;#91;4&amp;#93;: Entering directory `/opt/openwrt-svn-trunk/build_dir/target-arm_v5te_uClibc-0.9.33_eabi/h323plus_cvs'&lt;br/&gt;
make&amp;#91;4&amp;#93;: Leaving directory `/opt/openwrt-svn-trunk/build_dir/target-arm_v5te_uClibc-0.9.33_eabi/h323plus_cvs'&lt;br/&gt;
make -C src optshared&lt;br/&gt;
make&amp;#91;4&amp;#93;: Entering directory `/opt/openwrt-svn-trunk/build_dir/target-arm_v5te_uClibc-0.9.33_eabi/h323plus_cvs/src'&lt;br/&gt;
Makefile:351: /opt/openwrt-svn-trunk/build_dir/target-arm_v5te_uClibc-0.9.33_eabi/ptlib2_svn/make/lib.mak: No such file or directory&lt;br/&gt;
make&amp;#91;4&amp;#93;: *** No rule to make target `/opt/openwrt-svn-trunk/build_dir/target-arm_v5te_uClibc-0.9.33_eabi/ptlib2_svn/make/lib.mak'.  Stop.&lt;br/&gt;
make&amp;#91;4&amp;#93;: Leaving directory `/opt/openwrt-svn-trunk/build_dir/target-arm_v5te_uClibc-0.9.33_eabi/h323plus_cvs/src'&lt;br/&gt;
make&amp;#91;3&amp;#93;: *** &amp;#91;optshared&amp;#93; Error 2&lt;br/&gt;
make&amp;#91;3&amp;#93;: Leaving directory `/opt/openwrt-svn-trunk/build_dir/target-arm_v5te_uClibc-0.9.33_eabi/h323plus_cvs'&lt;br/&gt;
make&amp;#91;2&amp;#93;: *** &amp;#91;/opt/openwrt-svn-trunk/build_dir/target-arm_v5te_uClibc-0.9.33_eabi/h323plus_cvs/.built&amp;#93; Error 2&lt;br/&gt;
make&amp;#91;2&amp;#93;: Leaving directory `/opt/OpenWRT/feeds/packages/libs/h323plus_cvs'&lt;/code&gt;&lt;/div&gt;&lt;/div&gt;</content>
  </entry>
  <entry>
    <author><name>paulej</name></author>
    <title type="text">Re: Windows Movie Maker won't play MP4s</title>
    <id>http://forums.packetizer.com/viewtopic.php?f=12&amp;t=245&amp;p=688#p688</id>
    <link rel="alternate" href="http://forums.packetizer.com/viewtopic.php?f=12&amp;t=245&amp;p=688#p688"/>
    <updated>2012-03-27T15:44:31Z</updated>
    <published>2012-03-27T15:44:31Z</published>
    <category term="Video Codecs"/>
    <content type="html">&lt;div&gt;Have you tried installing DivX?&lt;/div&gt;</content>
  </entry>
  <entry>
    <author><name>hendrick</name></author>
    <title type="text">Windows Movie Maker won't play MP4s</title>
    <id>http://forums.packetizer.com/viewtopic.php?f=12&amp;t=245&amp;p=687#p687</id>
    <link rel="alternate" href="http://forums.packetizer.com/viewtopic.php?f=12&amp;t=245&amp;p=687#p687"/>
    <updated>2012-03-27T06:42:54Z</updated>
    <published>2012-03-27T06:42:54Z</published>
    <category term="Video Codecs"/>
    <content type="html">&lt;div&gt;What codec do I need to downlad for Windows Movie Maker to be able to play MP4s? My Windows Movie Maker won't play MP4s because it says I need to download the codec to play and edit my movie. Can anyone help and give me the site for the codec I need?&lt;/div&gt;</content>
  </entry>
  <entry>
    <author><name>paulej</name></author>
    <title type="text">Re: AES crypt installed- not shows as running</title>
    <id>http://forums.packetizer.com/viewtopic.php?f=72&amp;t=244&amp;p=686#p686</id>
    <link rel="alternate" href="http://forums.packetizer.com/viewtopic.php?f=72&amp;t=244&amp;p=686#p686"/>
    <updated>2012-03-18T05:20:30Z</updated>
    <published>2012-03-18T05:20:30Z</published>
    <category term="AES Crypt"/>
    <content type="html">&lt;div&gt;AES Crypt installs as a Windows shell extension. If you right click on a file on your desktop or elsewhere, you should see a menu option for AES Encrypt.  That will handle the encryotion. The program that produces that error you mention is just a program to help make things work when you double click on a .as file. It can be called from the command line, but that was not the intent. If you want a command line (console) version, there is a separate download for that.&lt;/div&gt;</content>
  </entry>
  <entry>
    <author><name>sunmaster57</name></author>
    <title type="text">AES crypt installed- not shows as running</title>
    <id>http://forums.packetizer.com/viewtopic.php?f=72&amp;t=244&amp;p=685#p685</id>
    <link rel="alternate" href="http://forums.packetizer.com/viewtopic.php?f=72&amp;t=244&amp;p=685#p685"/>
    <updated>2012-03-18T00:43:12Z</updated>
    <published>2012-03-18T00:43:12Z</published>
    <category term="AES Crypt"/>
    <content type="html">&lt;div&gt;Hi All,&lt;br/&gt;
 I am a beginner using AES crypt, I have 32 version installed on laptop running XP &amp;amp; runs normal, however I've been trying to run it on Windows 7 &amp;quot; N version&amp;quot; Professional 64 bit version ( Yes I live in US &amp;amp; this is legit copy from my access to M$ TechNet standard account) running on Dual core Toshiba Laptop.&lt;br/&gt;
&lt;br/&gt;
  This seems to install OK trying to start it up via &amp;quot;Run as Administrator&amp;quot; permission ( I normally run as Limited user)  nothing works, tried installing 32 bit version as well. there are only 3 files in AEScrypt folder under &amp;quot;program files folder on C drive&lt;br/&gt;
when I run one of the programs it generates this error message:&lt;br/&gt;
   Usage: aescrypt32 [/d|/e] filename&lt;br/&gt;
 when other icon is run DOS type box briefly flashes &amp;amp; nothing happens.&lt;br/&gt;
 Am I overlooking something? if so, what is it?&lt;br/&gt;
&lt;br/&gt;
Thanks&lt;br/&gt;
Sunmaster57&lt;/div&gt;</content>
  </entry>
  <entry>
    <author><name>rgeorge</name></author>
    <title type="text">Re: Project Still Active?</title>
    <id>http://forums.packetizer.com/viewtopic.php?f=73&amp;t=236&amp;p=684#p684</id>
    <link rel="alternate" href="http://forums.packetizer.com/viewtopic.php?f=73&amp;t=236&amp;p=684#p684"/>
    <updated>2012-03-17T17:58:58Z</updated>
    <published>2012-03-17T17:58:58Z</published>
    <category term="OpenID Provider Server"/>
    <content type="html">&lt;div&gt;Just wanted to chime in real quick.&lt;br/&gt;
Everything is in sourceforge right now, including my changes. I have discovered some minor bugs relating to sreg and attribute exchange that need to be fixed before I post a release that includes my changes. (The trunk code works, but sometimes sreg and attribute exchange will not be sent when it should.)&lt;br/&gt;
I will upload a release for the packetizer version in the next day or so, and hopefully shortly after that I will post a new release to include my changes.&lt;/div&gt;</content>
  </entry>
</feed>

