Ironclad

Ironclad is a Common Lisp Cryptography package; several block encryption algorithms and hash functions are included with the initial release. Its initial impetus was to unify several of the cryptographic packages for Common Lisp (such as the MD5 and SHA1 implementations floating around), but it aims at providing a cryptographic toolkit similar in scope to something like OpenSSL or Crypto++.

The Ironclad homepage and package documentation can be found at:

http://method-combination.net/lisp/ironclad/

Ironclad can be downloaded from:

Download ASDF package from http://www.method-combination.net/lisp/files/ironclad.tar.gz

An ASDF package-definition file is included, and the current release should be ASDF-installable.

The SHA-1 and SHA-256 hash functions do not work under CLISP versions earlier than 2.34. Please upgrade your CLISP installation. (The failures are related to CLISP's handling of (LOOP ... FINALLY ...).)

Ironclad is distributed under a liberal X11/MIT-like license.

Debian package

Ironclad has been packaged for Debian. You can just apt-get install it.

The latest Debian package sources can be found among the CL-Debian repositories.

Note however that the Debian package lacks some cryptographic algorithms, removed due to patent issues. More information here.

Using Ironclad

Tell us how you are using Ironclad:

To encrypt passwords for a web site, for that I created the following function:

(defun hash-password (password)
  (ironclad:byte-array-to-hex-string 
   (ironclad:digest-sequence :sha256 
			     (ironclad:ascii-string-to-byte-array password))))

Very simple example of encrypting and decrypting a message using the blowfish algorithm :

(push "/home/mcarter/ironclad_0.20.1/" asdf:*central-registry*) ;or something similar
(asdf:oos 'asdf:load-op 'ironclad)

(defun cipher-example (message password)
  (let (iv cipher)
    (setf iv (ironclad:ascii-string-to-byte-array password))
    (setf cipher (ironclad:make-cipher :blowfish  :mode :ecb  :key iv))
    (setf message (ironclad:ascii-string-to-byte-array message))
    (format t "original message as bytes:~A~%" message)
    (ironclad:encrypt-in-place cipher message)   
    (format t "encrypted message as bytes:~A~%" message)
    (ironclad:decrypt-in-place cipher message)
    ;; convert the message back to a string
    (setf message (coerce message 'list))
    (setf message (mapcar #'code-char message))
    (setf message (coerce message 'string))
    (format t "your original message was:*~A*~%" message)
    nil))


(setf message "ironclad is a way of encrypting and decrypting messages")
(cipher-example message "my password")

This page is linked from: CL-MD5 cl-net-snmp MD5 rtm-lisp-api sb-sha1

CLiki pages can be edited by anyone at any time. Imagine a fearsomely comprehensive disclaimer of liability. Now fear, comprehensively