[zeromq-dev] CURVE security on master

Pieter Hintjens ph at imatix.com
Thu Jun 20 18:37:46 CEST 2013


Hi all,

A heads-up that we now have CURVE security partially working on libzmq master.

This implements these RFCs:

* http://rfc.zeromq.org/spec:25/CURVE mechanism
* http://rfc.zeromq.org/spec:26/CurveZMQ
* http://rfc.zeromq.org/spec:27/ZAP - ZeroMQ Authentication Protocol

Messages are not yet encrypted, this is the next step.

I'll write a blog post about how this would work for 0MQ applications.
In gross terms you need to provide public/secret keys via
zmq_setsockopt, and an authentication service via the ZAP protocol (an
inproc:// API).

We are getting very close to (at least theoretical) fully secure
authentication and encryption on ZeroMQ tcp:// connections.

Thanks to Martin Hurton for the detailed work on libzmq.

-Pieter



More information about the zeromq-dev mailing list