File Coverage

blib/lib/Net/EasyTCP.pm

Criterion	Covered	Total	%
statement	592	1117	53.0
branch	238	560	42.5
condition	64	251	25.5
subroutine	35	51	68.6
pod	22	22	100.0
total	951	2001	47.5

package Net::EasyTCP;

#
# $Header: /cvsroot/Net::EasyTCP/EasyTCP.pm,v 1.144 2004/03/17 14:14:31 mina Exp $
#

use strict;
use vars qw($VERSION @ISA @EXPORT @EXPORT_OK $_SERIAL %_COMPRESS_AVAILABLE %_ENCRYPT_AVAILABLE %_MISC_AVAILABLE $PACKETSIZE);

use IO::Socket;
use IO::Select;
use Storable qw(nfreeze thaw);

#
# This block's purpose is to:
# Put the list of available modules in %_COMPRESS_AVAILABLE and %_ENCRYPT_AVAILABLE and %_MISC_AVAILABLE
#
BEGIN {
	my $version;
	my $hasCBC;
	my @_compress_modules = (

		#
		# MAKE SURE WE DO NOT EVER ASSIGN THE SAME KEY TO MORE THAN ONE MODULE, EVEN OLD ONES NO LONGER IN THE LIST
		#
		# HIGHEST EVER USED: 2
		#
		[ '1', 'Compress::Zlib' ],
		[ '2', 'Compress::LZF' ],
	);
	my @_encrypt_modules = (

		#
		# MAKE SURE WE DO NOT EVER ASSIGN THE SAME KEY TO MORE THAN ONE MODULE, EVEN OLD ONES NO LONGER IN THE LIST
		#
		# HIGHEST EVER USED: E
		#
		[ 'B', 'Crypt::RSA',         0, 0 ],
		[ '3', 'Crypt::CBC',         0, 0 ],
		[ 'A', 'Crypt::Rijndael',    1, 1 ],
		[ '9', 'Crypt::RC6',         1, 1 ],
		[ '4', 'Crypt::Blowfish',    1, 1 ],
		[ '6', 'Crypt::DES_EDE3',    1, 1 ],
		[ '5', 'Crypt::DES',         1, 1 ],
		[ 'C', 'Crypt::Twofish2',    1, 1 ],
		[ 'D', 'Crypt::Twofish',     1, 1 ],
		[ 'E', 'Crypt::TEA',         1, 1 ],
		[ '2', 'Crypt::CipherSaber', 0, 1 ],
	);
	my @_misc_modules = (

		#
		# MAKE SURE WE DO NOT EVER ASSIGN THE SAME KEY TO MORE THAN ONE MODULE, EVEN OLD ONES NO LONGER IN THE LIST
		# (this is not as necessary as compress and encrypt since it's not transmitted to peers, but just in case...)
		#
		# HIGHEST EVER USED: 1
		#
		[ '1', 'Crypt::Random' ],
	);

	#
	# Let's reset some variables:
	#
	$hasCBC                      = 0;
	$_COMPRESS_AVAILABLE{_order} = [];
	$_ENCRYPT_AVAILABLE{_order}  = [];
	$_MISC_AVAILABLE{_order}     = [];

	#
	# Now we check the compress array for existing modules
	#
	foreach (@_compress_modules) {
		$@ = undef;
		eval {
			eval("require $_->[1];") || die "$_->[1] not found\n";
			$version = eval("\$$_->[1]::VERSION;") || die "Failed to determine version for $_->[1]\n";
		};
		if (!$@) {
			push(@{ $_COMPRESS_AVAILABLE{_order} }, $_->[0]);
			$_COMPRESS_AVAILABLE{ $_->[0] }{name}    = $_->[1];
			$_COMPRESS_AVAILABLE{ $_->[0] }{version} = $version;
		}
	}

	#
	# Now we check the encrypt array for existing modules
	#
	foreach (@_encrypt_modules) {
		$@ = undef;
		eval {
			eval("require $_->[1];") || die "$_->[1] not found\n";
			$version = eval("\$$_->[1]::VERSION;") || die "Failed to determine version for $_->[1]\n";
		};
		if (!$@) {
			if ($_->[1] eq 'Crypt::CBC') {
				$hasCBC = 1;
			}
			elsif (($hasCBC && $_->[2]) || !$_->[2]) {
				push(@{ $_ENCRYPT_AVAILABLE{_order} }, $_->[0]);
				$_ENCRYPT_AVAILABLE{ $_->[0] }{name}              = $_->[1];
				$_ENCRYPT_AVAILABLE{ $_->[0] }{cbc}               = $_->[2];
				$_ENCRYPT_AVAILABLE{ $_->[0] }{mergewithpassword} = $_->[3];
				$_ENCRYPT_AVAILABLE{ $_->[0] }{version}           = $version;
			}
		}
	}

	#
	# Now we check the misc array for existing modules
	#
	foreach (@_misc_modules) {
		$@ = undef;
		eval {
			eval("require $_->[1];") || die "$_->[1] not found\n";
			$version = eval("\$$_->[1]::VERSION;") || die "Failed to determine version for $_->[1]\n";
		};
		if (!$@) {
			push(@{ $_MISC_AVAILABLE{_order} }, $_->[0]);
			$_MISC_AVAILABLE{ $_->[0] }{name}    = $_->[1];
			$_MISC_AVAILABLE{ $_->[0] }{version} = $version;
		}
	}
}

require Exporter;

@ISA        = qw(Exporter);
@EXPORT     = qw();
$VERSION    = '0.26';
$PACKETSIZE = 4096;

#
# POD DOCUMENTATION:
#

=head1 NAME

Net::EasyTCP - Easily create secure, bandwidth-friendly TCP/IP clients and servers

=head1 FEATURES

=over 4

=item *

One easy module to create both clients and servers

=item *

Object Oriented interface

=item *

Event-based callbacks in server mode

=item *

Internal protocol to take care of all the common transport problems

=item *

Transparent encryption

=item *

Transparent compression

=back

=head1 SYNOPSIS

=over 4

=item SERVER EXAMPLE:

	use Net::EasyTCP;

	#
	# Create the server object
	#
	$server = new Net::EasyTCP(
		mode            =>      "server",
		port            =>      2345,
	)
	|| die "ERROR CREATING SERVER: $@\n";

	#
	# Tell it about the callbacks to call
	# on known events
	#
	$server->setcallback(
		data            =>      \&gotdata,
		connect         =>      \&connected,
		disconnect	=>	\&disconnected,
	)
	|| die "ERROR SETTING CALLBACKS: $@\n";

	#
	# Start the server
	#
	$server->start() || die "ERROR STARTING SERVER: $@\n";

	#
	# This sub gets called when a client sends us data
	#
	sub gotdata {
		my $client = shift;
		my $serial = $client->serial();
		my $data = $client->data();
		print "Client $serial sent me some data, sending it right back to them again\n";
		$client->send($data) || die "ERROR SENDING TO CLIENT: $@\n";
		if ($data eq "QUIT") {
			$client->close() || die "ERROR CLOSING CLIENT: $@\n";
		}
		elsif ($data eq "DIE") {
			$server->stop() || die "ERROR STOPPING SERVER: $@\n";
		}
	}

	#
	# This sub gets called when a new client connects
	#
	sub connected {
		my $client = shift;
		my $serial = $client->serial();
		print "Client $serial just connected\n";
	}

	#
	# This sub gets called when an existing client disconnects
	#
	sub disconnected {
		my $client = shift;
		my $serial = $client->serial();
		print "Client $serial just disconnected\n";
	}

=item CLIENT EXAMPLE:

	use Net::EasyTCP;

	#
	# Create a new client and connect to a server
	#
	$client = new Net::EasyTCP(
		mode            =>      "client",
		host            =>      'localhost',
		port            =>      2345,
	)
	|| die "ERROR CREATING CLIENT: $@\n";

	#
	# Send and receive a simple string
	#
	$client->send("HELLO THERE") || die "ERROR SENDING: $@\n";
	$reply = $client->receive() || die "ERROR RECEIVING: $@\n";

	#
	# Send and receive complex objects/strings/arrays/hashes by reference
	#
	%hash = ("to be or" => "not to be" , "just another" => "perl hacker");
	$client->send(\%hash) || die "ERROR SENDING: $@\n";
	$reply = $client->receive() || die "ERROR RECEIVING: $@\n";
	foreach (keys %{$reply}) {
		print "Received key: $_ = $reply->{$_}\n";
	}

	#
	# Send and receive large binary data
	#
	for (1..8192) {
		for (0..255) {
			$largedata .= chr($_);
		}
	}
	$client->send($largedata) || die "ERROR SENDING: $@\n";
	$reply = $client->receive() || die "ERROR RECEIVING: $@\n";

	#
	# Cleanly disconnect from the server
	#
	$client->close();

=back

=head1 DESCRIPTION

This class allows you to easily create TCP/IP clients and servers and provides an OO interface to manage the connection(s).  This allows you to concentrate on the application rather than on the transport.

You still have to engineer your high-level protocol. For example, if you're writing an SMTP client-server pair, you will have to teach your client to send "HELO" when it connects, and you will have to teach your server what to do once it receives the "HELO" command, and so forth.

What you won't have to do is worry about how the command will get there, about line termination, about binary data, complex-structure serialization, encryption, compression, or about fragmented packets on the received end.  All of these will be taken care of by this class.

=head1 CONSTRUCTOR

=over 4

=item new(%hash)

Constructs and returns a new Net::EasyTCP object.  Such an object behaves in one of two modes (that needs to be supplied to new() on creation time).  You can create either a server object (which accepts connections from several clients) or a client object (which initiates a connection to a server).

new() expects to be passed a hash. The following keys are accepted:

=over 4

=item donotcheckversion

Set to 1 to force a client to continue connecting even if an encryption/compression/Storable module version mismatch is detected. (Using this is highly unrecommended, you should upgrade the module in question to the same version on both ends)
Note that as of Net::EasyTCP version 0.20, this parameter is fairly useless since that version (and higher) do not require external modules to have the same version anymore, but instead determine compatability between different versions dynamically.  See the accompanying Changes file for more details.
(Optional and acceptable when mode is "client")

=item donotcompress

Set to 1 to forcefully disable L even if the appropriate module(s) are found.
(Optional)

=item donotcompresswith

Set to a scalar or an arrayref of compression module(s) you'd like to avoid compressing with.  For example, if you do not want to use Compress::LZF, you can do so by utilizing this option.
(Optional)

=item donotencrypt

Set to 1 to forcefully disable L even if the appropriate module(s) are found.
(Optional)

=item donotencryptwith

Set to a scalar or an arrayref of encryption module(s) you'd like to avoid encrypting with.  For example, Crypt::RSA takes a long time to initialize keys and encrypt/decrypt, so you can avoid using it by utilizing this option.
(Optional)

=item host

Must be set to the hostname/IP address to connect to.
(Mandatory when mode is "client")

=item mode

Must be set to either "client" or "server" according to the type of object you want returned.
(Mandatory)

=item password

Defines a password to use for the connection.  When mode is "server" this password will be required from clients before the full connection is accepted .  When mode is "client" this is the password that the server connecting to requires.

Also, when encryption using a symmetric encryption module is used, this password is included as part of the secret "key" for encrypting the data.
(Optional)

=item port

Must be set to the port the client connects to (if mode is "client") or to the port to listen to (if mode is "server"). If you're writing a client+server pair, they must both use the same port number.
(Mandatory)

=item timeout

Set to an integer (seconds) that a client attempting to establish a TCP/IP connection to a server will timeout after.  If not supplied, the default is 30 seconds. (Optional and acceptable only when mode is "client")

=item welcome

If someone uses an interactive telnet program to telnet to the server, they will see this welcome message.
(Optional and acceptable only when mode is "server")

=back

=back

=head1 METHODS

B<[C] = Available to objects created as mode "client">

B<[H] = Available to "hybrid" client objects, as in "the server-side client objects created when a new client connects". These are the objects passed to your server's callbacks.  Such hybrid clients behave almost exactly like a normal "client" object you create yourself, except for a slight difference in the available methods to retrieve data.>

B<[S] = Available to objects created as mode "server">

=over 4

=item addclientip(@array)

B<[S]> Adds an IP address (or IP addresses) to the list of allowed clients to a server.  If this is done, the server will not accept connections from clients not in it's list.

The compliment of this function is deleteclientip() .

=item callback(%hash)

See setcallback()

=item clients()

B<[S]> Returns all the clients currently connected to the server.  If called in array context will return an array of client objects.  If called in scalar context will return the number of clients connected.

=item close()

B<[C][H]> Instructs a client object to close it's connection with a server.

=item compression()

B<[C][H]> Returns the name of the module used as the compression module for this connection, undef if no compression occurs.

=item data()

B<[H]> Retrieves the previously-retrieved data associated with a hybrid client object.  This method is typically used from inside the callback sub associated with the "data" event, since the callback sub is passed nothing more than a client object.

=item deleteclientip(@array)

B<[S]> Deletes an IP address (or IP addresses) from the list of allowed clients to a server.  The IP address (or IP addresses) supplied will no longer be able to connect to the server.

The compliment of this function is addclientip() .

=item disconnect()

See close()

=item do_one_loop()

B<[S]> Instructs a server object to "do one loop" and return ASAP.  This method needs to be called VERY frequently for a server object to function as expected (either through some sort of loop inside your program if you need to do other things beside serve clients, or via the start() method if your entire program is dedicated to serving clients).  Each one loop will help the server do it's job, including accepting new clients, receiving data from them, firing off the appropriate callbacks etc.

=item encryption()

B<[C][H]> Returns the name of the module used as the encryption module for this connection, undef if no encryption occurs.

=item mode()

B<[C][H][S]> Identifies the mode of the object.  Returns either "client" or "server"

=item receive($timeout)

B<[C]> Receives data sent to the client by a server and returns it.  It will block until data is received or until a certain timeout of inactivity (no data transferring) has occurred.

It accepts an optional parameter, a timeout value in seconds.  If none is supplied it will default to 300.

=item remoteip()

B<[C][H]> Returns the IP address of the host on the other end of the connection.

=item remoteport()

B<[C][H]> Returns the port of the host on the other end of the connection.

=item running()

B<[S]> Returns true if the server is running (started), false if it is not.

=item send($data)

B<[C][H]> Sends data to a server.  It can be used on client objects you create with the new() constructor, clients objects returned by the clients() method, or with client objects passed to your callback subs by a running server.

It accepts one parameter, and that is the data to send.  The data can be a simple scalar or a reference to something more complex.

=item serial()

B<[H]> Retrieves the serial number of a client object,  This is a simple integer that allows your callback subs to easily differentiate between different clients.

=item setcallback(%hash)

B<[S]> Tells the server which subroutines to call when specific events happen. For example when a client sends the server data, the server calls the "data" callback sub.

setcallback() expects to be passed a hash. Each key in the hash is the callback type identifier, and the value is a reference to a sub to call once that callback type event occurs.

Valid keys in that hash are:

=over 4

=item connect

Called when a new client connects to the server

=item data

Called when an existing client sends data to the server

=item disconnect

Called when an existing client disconnects

=back

Whenever a callback sub is called, it is passed a single parameter, a CLIENT OBJECT. The callback code may then use any of the methods available to client objects to do whatever it wants to do (Read data sent from the client, reply to the client, close the client connection etc...)


=item socket()

B<[C][H]> Returns the handle of the socket (actually an L object) associated with the supplied object.  This is useful if you're interested in using L or select() and want to add a client object's socket handle to the select list.

Note that eventhough there's nothing stopping you from reading and writing directly to the socket handle you retrieve via this method, you should never do this since doing so would definately corrupt the internal protocol and may render your connection useless.  Instead you should use the send() and receive() methods.

=item start(subref)

B<[S]> Starts a server and does NOT return until the server is stopped via the stop() method.  This method is a simple while() wrapper around the do_one_loop() method and should be used if your entire program is dedicated to being a server, and does not need to do anything else concurrently.

If you need to concurrently do other things when the server is running, then you can supply to start() the optional reference to a subroutine (very similar to the callback() method).  If that is supplied, it will be called every loop.  This is very similar to the callback subs, except that the called sub will be passed the server object that the start() method was called on (unlike normal client callbacks which are passed a client object).  The other alternative to performing other tasks concurrently is to not use the start() method at all and directly call do_one_loop() repeatedly in your own program.

=item stop()

B<[S]> Instructs a running server to stop and returns immediately (does not wait for the server to actually stop, which may be a few seconds later).  To check if the server is still running or not use the running() method.

=back

=head1 COMPRESSION AND ENCRYPTION

Clients and servers written using this class will automatically compress and/or encrypt the transferred data if the appropriate modules are found.

Compression will be automatically enabled if one (or more) of: L or L are installed on both the client and the server.

As-symmetric encryption will be automatically enabled if L is installed on both the client and the server.

Symmetric encryption will be automatically enabled if one (or more) of: L* or L* or L* or L* or L* or L* or L* or L* or L are installed on both the client and the server.

Strong randomization will be automatically enabled if L is installed; otherwise perl's internal rand() is used to generate random keys.

Preference to the compression/encryption method used is determind by availablity checking following the order in which they are presented in the above lists.

Note that during the negotiation upon connection, servers and clients written using Net::EasyTCP version lower than 0.20 communicated the version of the selected encryption/compression modules.  If a version mismatch is found, the client reported a connection failure stating the reason (module version mismatch).  This behavior was necessary since it was observed that different versions of the same module could produce incompatible output.  If this is encountered, it is strongly recommended you upgrade the module in question to the same version on both ends, or more preferrably, Net::EasyTCP on both ends to the latest version, at a minimum 0.20.  However, if you wish to forcefully connect overlooking a version mismatch (risking instability/random problems/data corruption) you may supply the "donotcheckversion" key to the new() constructor of the client object.  This is no longer a requirement of Net::EasyTCP version 0.20 or higher since these newer versions have the ability to use different-version modules as long as their data was compatible, which was automatically determined at negotiation time.

To find out which module(s) have been negotiated for use you can use the compression() and encryption() methods.

* Note that for this class's purposes, L is a requirement to use any of the encryption modules with a * next to it's name in the above list.  So eventhough you may have these modules installed on both the client and the server, they will not be used unless L is also installed on both ends.

* Note that the nature of symmetric cryptography dictates sharing the secret keys somehow.  It is therefore highly recommend to use an As-symmetric cryptography module (such as Crypt::RSA) for serious encryption needs; as a determined hacker might find it trivial to decrypt your data with other symmetric modules.

* Note that if symmetric cryptography is used, then it is highly recommended to also use the "password" feature on your servers and clients; since then the "password" will, aside from authentication,  be also used in the "secret key" to encrypt the data.  Without a password, the secret key has to be transmitted to the other side during the handshake, significantly lowering the overall security of the data.

If the above modules are installed but you want to forcefully disable compression or encryption, supply the "donotcompress" and/or "donotencrypt" keys to the new() constructor.  If you would like to forcefully disable the use of only some modules, supply the "donotcompresswith" and/or "donotencryptwith" keys to the new() constructor.  This could be used for example to disable the use of Crypt::RSA if you cannot afford the time it takes to generate it's keypairs etc...

=head1 RETURN VALUES AND ERRORS

The constructor and all methods return something that evaluates to true when successful, and to false when not successful.

There are a couple of exceptions to the above rule and they are the following methods:

=over 4

=item *

clients()

=item *

data()

=back

The above methods may return something that evaluates to false (such as an empty string, an empty array, or the string "0") eventhough there was no error.  In that case check if the returned value is defined or not, using the defined() Perl function.

If not successful, the variable $@ will contain a description of the error that occurred.

=head1 NOTES

=over 4

=item Incompatability with Net::EasyTCP version 0.01

Version 0.02 and later have had their internal protocol modified to a fairly large degree.  This has made compatability with version 0.01 impossible.  If you're going to use version 0.02 or later (highly recommended), then you will need to make sure that none of the clients/servers are still using version 0.01.  It is highly recommended to use the same version of this module on both sides.

=item Internal Protocol

This class implements a miniature protocol when it sends and receives data between it's clients and servers.  This means that a server created using this class cannot properly communicate with a normal client of any protocol (pop3/smtp/etc..) unless that client was also written using this class.  It also means that a client written with this class will not properly communicate with a different server (telnet/smtp/pop3 server for example, unless that server is implemented using this class also).  This limitation will not change in future releases due to the plethora of advantages the internal protocol gives us.

In other words, if you write a server using this class, write the client using this class also, and vice versa.

=item Delays

This class does not use the fork() method whatsoever.  This means that all it's input/output and multi-socket handling is done via select().

This leads to the following limitation:  When a server calls one of your callback subs, it waits for it to return and therefore cannot do anything else.  If your callback sub takes 5 minutes to return, then the server will not be able to do anything for 5 minutes, such as acknowledge new clients, or process input from other clients.

In other words, make the code in your callbacks' subs' minimal and strive to make it return as fast as possible.

=item Deadlocks

As with any client-server scenario, make sure you engineer how they're going to talk to each other, and the order they're going to talk to each other in, quite carefully.  If both ends of the connection are waiting for the other end to say something, you've got a deadlock.

=back

=head1 AUTHOR

Mina Naguib
http://www.topfx.com
[e-mail]

=head1 SEE ALSO

Perl(1), L, L, L, L, L, L, L, L, L, L, L, L, L, L, L, L, defined(), rand()

=head1 COPYRIGHT

Copyright (C) 2001-2003 Mina Naguib.  All rights reserved.  Use is subject to the Perl license.

=cut

#
# The main constructor. This calls either _new_client or _new_server depending on the supplied mode
#
sub new {
	my $class = shift;
	my %para  = @_;

	# Let's lowercase all keys in %para
	foreach (keys %para) {
		if ($_ ne lc($_)) {
			$para{ lc($_) } = $para{$_};
			delete $para{$_};
		}
	}
	if ($para{mode} =~ /^c/i) {
		return _new_client($class, %para);
	}
	elsif ($para{mode} =~ /^s/i) {
		return _new_server($class, %para);
	}
	else {
		$@ = "Supplied mode '$para{mode}' unacceptable. Must be either 'client' or 'server'";
		return undef;
	}
}

#
# Make callback() a synonim to setcallback()
#

sub callback {
	return setcallback(@_);
}

#
# This method adds an ip address(es) to the list of valid IPs a server can accept connections
# from.
#
sub addclientip {
	my $self = shift;
	my @ips  = @_;
	if ($self->{_mode} ne "server") {
		$@ = "$self->{_mode} cannot use method addclientip()";
		return undef;
	}
	foreach (@ips) {
		$self->{_clientip}{$_} = 1;
	}
	return 1;
}

#
# This method does the opposite of addclient(), it removes an ip address(es) from the list
# of valid IPs a server can accept connections from.
#
sub deleteclientip {
	my $self = shift;
	my @ips  = @_;
	if ($self->{_mode} ne "server") {
		$@ = "$self->{_mode} cannot use method deleteclientip()";
		return undef;
	}
	foreach (@ips) {
		delete $self->{_clientip}{$_};
	}
	return 1;
}

#
#
# This method modifies the _callback_XYZ in a server object. These are the routines
# the server calls when an event (data, connect, disconnect) happens
#
sub setcallback {
	my $self = shift;
	my %para = @_;
	if ($self->{_mode} ne "server") {
		$@ = "$self->{_mode} cannot use method setcallback()";
		return undef;
	}
	foreach (keys %para) {
		if (ref($para{$_}) ne "CODE") {
			$@ = "Callback $_ $para{$_} does not exist";
			return 0;
		}
		$self->{_callbacks}->{$_} = $para{$_};
	}
	return 1;
}

#
# This method starts the server and does not return until stop() is called.
# All other behavior is delegated to do_one_loop()
#
sub start {
	my $self     = shift;
	my $callback = shift;
	if ($self->{_mode} ne "server") {
		$@ = "$self->{_mode} cannot use method start()";
		return undef;
	}
	$self->{_running}     = 1;
	$self->{_requeststop} = 0;

	#
	# Let's loop until we're stopped:
	#
	while (!$self->{_requeststop}) {
		$self->do_one_loop() || return undef;
		if ($callback && ref($callback) eq "CODE") {
			&{$callback}($self);
		}
	}

	#
	# If we reach here the server's been stopped
	#
	$self->{_running}     = 0;
	$self->{_requeststop} = 0;
	return 1;
}

#
# This method does "one loop" of server work and returns ASAP
# It should be called very frequently, either through a while() loop in the program
# or through the start() method
#
# It accepts new clients, accepts data from them, and fires off any callback events as necessary
#
sub do_one_loop {
	my $self = shift;
	my @ready;
	my $clientsock;
	my $tempdata;
	my $serverclient;
	my $realdata;
	my $result;
	my $negotiatingtimeout = 45;
	my $peername;
	my $remoteport;
	my $remoteip;

	if ($self->{_mode} ne "server") {
		$@ = "$self->{_mode} cannot use method do_one_loop()";
		return undef;
	}
	$self->{_lastglobalkeygentime} ||= time;
	@ready = $self->{_selector}->can_read(0.01);
	foreach (@ready) {
		if ($_ == $self->{_sock}) {

			#
			# The SERVER SOCKET is ready for accepting a new client
			#
			$clientsock = $self->{_sock}->accept();
			if (!$clientsock) {
				$@ = "Error while accepting new connection: $!";
				return undef;
			}

			#
			# We get remote IP and port, we'll need them to see if client is allowed or not
			#
			$peername = getpeername($clientsock) or next;
			($remoteport, $remoteip) = sockaddr_in($peername) or next;
			$remoteip = inet_ntoa($remoteip) or next;

			#
			# We create a new client object and
			# We see if client is allowed to connect to us
			#
			if (scalar(keys %{ $self->{_clientip} }) && !$self->{_clientip}{$remoteip}) {

				#
				# Client's IP is not allowed to connect to us
				#
				close($clientsock);
			}
			else {

				#
				# We add it to our SELECTOR pool :
				#
				$self->{_selector}->add($clientsock);

				#
				# We create a new client object:
				#
				$self->{_clients}->{$clientsock} = _new_client(
					$self,
					"_sock"       => $clientsock,
					"_remoteport" => $remoteport,
					"_remoteip"   => $remoteip
				);

				#
				# We initialize some client variables:
				#
				$self->{_clients}->{$clientsock}->{_serial}                 = ++$_SERIAL;
				$self->{_clients}->{$clientsock}->{_compatabilityscalar}    = _genrandstring(129);
				$self->{_clients}->{$clientsock}->{_compatabilityreference} = _gencompatabilityreference($self->{_clients}->{$clientsock}->{_compatabilityscalar});

				#
				# And we make it inherit some stuff from the server :
				#
				$self->{_clients}->{$clientsock}->{_donotencrypt}      = $self->{_donotencrypt};
				$self->{_clients}->{$clientsock}->{_donotencryptwith}  = $self->{_donotencryptwith};
				$self->{_clients}->{$clientsock}->{_donotcompress}     = $self->{_donotcompress};
				$self->{_clients}->{$clientsock}->{_donotcompresswith} = $self->{_donotcompresswith};
				$self->{_clients}->{$clientsock}->{_password}          = $self->{_password};
				$self->{_clients}->{$clientsock}->{_callbacks}         = $self->{_callbacks};
				$self->{_clients}->{$clientsock}->{_welcome}           = $self->{_welcome};
				$self->{_clients}->{$clientsock}->{_selector}          = $self->{_selector};
			}
		}
		else {

			#
			# One of the CLIENT sockets are ready
			#
			$result = sysread($_, $tempdata, $PACKETSIZE);
			$serverclient = $self->{_clients}->{$_};
			if (!defined $result) {

				#
				# Error somewhere during reading from that client
				#
				_callback($serverclient, "disconnect");
				$serverclient->close();
				delete $self->{_clients}->{$_};
			}
			elsif ($result == 0) {

				#
				# Client closed connection
				#
				_callback($serverclient, "disconnect");
				$serverclient->close();
				delete $self->{_clients}->{$_};
			}
			else {

				#
				# Client sent us some good data (not necessarily a full packet)
				#
				$serverclient->{_databuffer} .= $tempdata;

				#
				# Extract as many data buckets as possible out of the buffer
				#
				_extractdata($serverclient);

				#
				# Process all this client's data buckets
				#
				foreach (@{ $serverclient->{_databucket} }) {
					if ($_->{realdata}) {

						#
						# This bucket is normal data
						#
						_callback($serverclient, "data");
					}
					else {

						#
						# This bucket is internal data
						#
						_parseinternaldata($serverclient);
					}
				}
			}
		}
	}

	#
	# Now we check on all the serverclients still negotiating and help them finish negotiating
	# or weed out the ones timing out
	#
	foreach (keys %{ $self->{_clients} }) {
		$serverclient = $self->{_clients}->{$_};
		if ($serverclient->{_negotiating}) {
			if (_serverclient_negotiate($serverclient)) {
				_callback($serverclient, "connect");
			}
			elsif ((time - $serverclient->{_negotiating}) > $negotiatingtimeout) {
				$serverclient->close();
				delete $self->{_clients}->{$_};
			}
		}
	}

	#
	# Now we re-generate the RSA keys if it's been over an hour
	#
	if (!$self->{_donotencrypt} && !$self->{_donotencryptwith}{"B"} && ((time - $self->{_lastglobalkeygentime}) >= 3600)) {
		if (!_generateglobalkeypair('Crypt::RSA')) {
			$@ = "Could not generate global Crypt::RSA keypairs. $@";
			return undef;
		}
		$self->{_lastglobalkeygentime} = time;
	}
	return 1;
}

#
# This method stops the server and makes it return.
# Note: It doesn't stop the server immediately, it sets a flag
# and the flag should in a few seconds cause the infinite loop in start() method to stop
#
sub stop {
	my $self = shift;
	if ($self->{_mode} ne "server") {
		$@ = "$self->{_mode} cannot call method stop()";
		return undef;
	}
	$self->{_requeststop} = 1;
	return 1;
}

#
# This method sends data to the socket associated with the object
#
sub send {
	my $self = shift;
	my $data = shift;
	if ($self->{_mode} ne "client" && $self->{_mode} ne "serverclient") {
		$@ = "$self->{_mode} cannot use method send()";
		return undef;
	}
	return _send($self, $data);
}

#
# This method returns the serial number associated with the object
#
sub serial {
	my $self = shift;
	if (!$self->{_serial}) {
		$self->{_serial} = ++$_SERIAL;
	}
	return $self->{_serial};
}

#
# Takes nothing, returns the oldest entry from the data bucket for a client/serverclient
# In array context returns data and realdata flag, otherwise just data
# (typically the code in the callback assigned to callback_data would access this method)
#
sub data {
	my $self = shift;
	my $data;
	if ($self->{_mode} ne "client" && $self->{_mode} ne "serverclient") {
		$@ = "$self->{_mode} cannot use method data()";
		return undef;
	}

	$data = shift(@{ $self->{_databucket} });

	return wantarray ? ($data->{data}, $data->{realdata}) : $data->{data};
}

#
# This method reads data from the socket associated with the object and returns it
# Accepts an optional timeout as a first parameter, otherwise defaults to timeout
# Returns the data if successful, undef if not
#
sub receive {
	my $self               = shift;
	my $timeout            = shift || 0;
	my $returninternaldata = shift || 0;
	my $temp;
	my $realdata;
	my $result;
	my $lastactivity = time;
	my $selector;
	my @ready;
	my $fatalerror;

	if ($self->{_mode} ne "client" && $self->{_mode} ne "serverclient") {
		$@ = "$self->{_mode} cannot use method receive()";
		return undef;
	}

	$selector = new IO::Select;
	$selector->add($self->{_sock});

	#
	# Let's try to read from the socket
	#
	while ($timeout ? ((time - $lastactivity) < $timeout) : 1) {
		@ready = $selector->can_read($timeout);
		if (!@ready) {

			#
			# Socket is not ready for reading
			#
			if (!$!) {

				#
				# Because of timeout
				#
				if (!$timeout) {

					#
					# We're doing an initial reading without blocking
					#
					last;
				}
				else {

					#
					# We're blocking - let the while look take care of timeout
					#
					next;
				}
			}
			elsif ($! =~ /interrupt/i) {

				#
				# Because of select() interrupted - ignore that
				#
				next;
			}
			else {

				#
				# Because of some unknown error
				#
				last;
			}
		}
		else {

			#
			# Socket is ready for reading
			#
			$result = sysread($self->{_sock}, $temp, $PACKETSIZE);
			if (!defined $result) {

				#
				# Error reading from socket
				#
				$fatalerror = "Failed to read from socket: $!";
				if (!$timeout) {

					#
					# However we won't crap out right away, as we're doing a cursory, no-timeout read
					#
					last;
				}
				else {
					$@ = $fatalerror;
					return undef;
				}
			}
			elsif ($result == 0) {

				#
				# Socket closed while reading
				#
				$fatalerror = "Socket closed when attempted reading";
				if (!$timeout) {

					# However we won't crap out right away, as we're doing a cursory, no-timeout read
					last;
				}
				else {
					$@ = $fatalerror;
					return undef;
				}
			}
			else {

				#
				# Read good data - add it to the databuffer
				#
				$self->{_databuffer} .= $temp;
				$lastactivity = time;

				if ($timeout && $result != $PACKETSIZE && _extractdata($self)) {

					#
					# We're doing blocking reads, we extracted something into the bucket, and there's probably nothing else at the end of the socket
					# No point looping to block again
					#
					last;
				}
			}
		}
	}

	#
	# Now there's nothing waiting to be received
	# Try to extract all possible data buckets out of the data buffer
	#
	_extractdata($self);

	#
	# Now the databuffer has no full packets.  If there's any data to be returned it's in the data buckets
	#
	while ((($result, $realdata) = $self->data()) && defined $result) {

		#
		# We got something from the bucket
		#
		if ($realdata) {

			#
			# And it's real data - return it
			#
			return $result;
		}
		else {

			#
			# It's internal data
			#
			if ($returninternaldata) {

				#
				# But we've been asked to return it
				#
				return $result;
			}
			else {

				#
				# Don't know what to do with the internal data
				#
				_parseinternaldata($self, $result);
			}
		}
	}
	if (defined($result = $self->data())) {

		#
		# We have good data to return
		#
		return $result;
	}

	#
	# If we've reached here we have no data to return
	#
	if (!$timeout) {

		#
		# We were doing a quick no-block read
		#
		if ($fatalerror) {

			#
			# And we have a fatal error - don't attempt a blocking read
			#
			$@ = $fatalerror;
			return undef;
		}
		else {

			#
			# Attempt a blocking read
			#
			return $self->receive(300);
		}
	}
	else {

		#
		# We did a blocking read
		#
		$@ = "Timed out waiting to receive data";
		return undef;
	}
}

#
# This method is a synonym for close()
#
sub disconnect {
	return close(@_);
}

#
# This method closes the socket associated with the object
#
sub close {
	my $self = shift;
	if ($self->{_mode} ne "client" && $self->{_mode} ne "serverclient") {
		$@ = "$self->{_mode} cannot use method close()";
		return undef;
	}
	if ($self->{_selector} && $self->{_selector}->exists($self->{_sock})) {

		# If the server selector reads this, let's make it not...
		$self->{_selector}->remove($self->{_sock});
	}
	$self->{_sock}->close() if defined $self->{_sock};
	$self->{_sock}       = undef;
	$self->{_databucket} = [];
	$self->{_databuffer} = undef;
	return 1;
}

#
# This method returns true or false, depending on if the server is running or not
#
sub running {
	my $self = shift;
	if ($self->{_mode} ne "server") {
		$@ = "$self->{_mode} cannot use method running()";
		return undef;
	}
	return $self->{_running};
}

#
# This replies saying what type of object it's passed
#
sub mode {
	my $self = shift;
	my $mode = ($self->{_mode} eq "server") ? "server" : "client";
	return $mode;
}

#
# This method replies saying what type of encryption is used, undef if none
#
sub encryption {
	my $self      = shift;
	my $modulekey = $self->{_encrypt};
	if ($self->{_donotencrypt} || !$modulekey) {
		return undef;
	}
	return $_ENCRYPT_AVAILABLE{$modulekey}{name} || "Unknown module name for modulekey [$modulekey]";
}

#
# This method replies saying what type of compression is used, undef if none
#
sub compression {
	my $self      = shift;
	my $modulekey = $self->{_compress};
	if ($self->{_donotcompress} || !$modulekey) {
		return undef;
	}
	return $_COMPRESS_AVAILABLE{$modulekey}{name} || "Unknown module name for modulekey [$modulekey]";
}

#
# This returns the IO::Socket object associated with a connection
#
sub socket {
	my $self = shift;
	if ($self->{_mode} ne "client" && $self->{_mode} ne "serverclient") {
		$@ = "$self->{_mode} cannot use method socket()";
		return undef;
	}
	return ($self->{_sock} || undef);
}

#
# This returns an array of all the clients connected to a server in array context
# or the number of clients in scalar context
# or undef if there are no clients or error
#
sub clients {
	my $self = shift;
	my @clients;
	if ($self->{_mode} ne "server") {
		$@ = "$self->{_mode} cannot use method clients()";
		return undef;
	}
	foreach (values %{ $self->{_clients} }) {
		if (!$_->{_negotiating}) {
			push(@clients, $_);
		}
	}
	if (@clients) {
		return wantarray ? @clients : scalar @clients;
	}
	else {
		return undef;
	}
}

#
# This takes a client object and returns the IP address of the remote connection
#
sub remoteip {
	my $self = shift;
	my $temp;
	if ($self->{_mode} ne "client" && $self->{_mode} ne "serverclient") {
		$@ = "$self->{_mode} cannot use method remoteip()";
		return undef;
	}
	return $self->{_remoteip};
}

#
# This takes a client object and returns the PORT of the remote connection
#
sub remoteport {
	my $self = shift;
	my $temp;
	if ($self->{_mode} ne "client" && $self->{_mode} ne "serverclient") {
		$@ = "$self->{_mode} cannot use method remoteport()";
		return undef;
	}
	return $self->{_remoteport};
}

###########################################################
###########################################################
###########################################################
#
# The following are private functions (not object methods)
#

#
# This takes 2 items (references to simple structures, or simple scalars)
# And returns true if they're the same, false if they're not
# It does NOT work for blessed objects. only scalars, hashrefs and arrayrefs
#
sub _comparereferences {
	my $item1 = shift;
	my $item2 = shift;
	my $ref1  = ref($item1);
	my $ref2  = ref($item2);
	my $num1;
	my $num2;
	my @keys1;
	my @keys2;
	my $temp;

	if ($ref1 ne $ref2) {
		$@ = "References not same type [$ref1] [$ref2]";
		return 0;
	}
	elsif (!$ref1 && $item1 ne $item2) {

		#Scalars  - do not match
		$@ = "Values of two scalar values not same";
		return 0;
	}
	elsif ($ref1 eq "ARRAY") {
		$num1 = scalar @{$item1};
		$num2 = scalar @{$item2};
		if ($num1 != $num2) {

			# Not same # of elements
			$@ = "Number of array elements not equal";
			return 0;
		}
		else {
			for $temp (0 .. $num1 - 1) {
				if (!_comparereferences($item1->[$temp], $item2->[$temp])) {
					return 0;
				}
			}
		}
	}
	elsif ($ref1 eq "HASH") {
		@keys1 = sort keys %{$item1};
		@keys2 = sort keys %{$item2};
		if (scalar @keys1 != scalar @keys2) {

			# Not same # of elements
			$@ = "Number of hash keys not equal";
			return 0;
		}
		else {
			for $temp (0 .. $#keys1) {
				if ($keys1[$temp] ne $keys2[$temp]) {
					$@ = "Hash key names not equal";
					return 0;
				}
				if (!_comparereferences($item1->{ $keys1[$temp] }, $item2->{ $keys2[$temp] })) {
					return 0;
				}
			}
		}
	}
	elsif ($ref1) {

		# Unknown reference
		$@ = "Unknown reference type [$ref1] [$ref2] [$item1] [$item2]";
		return 0;
	}

	#
	# Everything's good
	#
	return 1;
}

#
# This generates a global keypair and stores it globally
# Takes the name of a module, returns true or false
#
sub _generateglobalkeypair {
	my $module = shift || return undef;
	foreach (keys %_ENCRYPT_AVAILABLE) {
		if ($_ ne "_order" && $_ENCRYPT_AVAILABLE{$_}{name} eq $module) {
			($_ENCRYPT_AVAILABLE{$_}{localpublickey}, $_ENCRYPT_AVAILABLE{$_}{localprivatekey}) = ();
			($_ENCRYPT_AVAILABLE{$_}{localpublickey}, $_ENCRYPT_AVAILABLE{$_}{localprivatekey}) = _genkey($_) or return undef;
			last;
		}
	}
	return 1;
}

#
# This takes any string and returns it in ascii format
#
sub _bin2asc {
	my $data = shift;
	$data =~ s/(.)/ '%' . sprintf('%02x',ord($1)) /ges;
	$data = uc($data);
	return $data;
}

#
# This does the opposite of _bin2asc
#
sub _asc2bin {
	my $data = shift;
	$data =~ s/\%([0-9A-F]{2})/ sprintf("%c",hex($1)) /ges;
	return $data;
}

#
# This does very very primitive 2-way encryption & decryption (kinda like ROT13.. works both ways)
# Takes a client and a string, returns the enc/dec/rypted string
#
# This encryption is used to protect the encrypted password and the public key transmitted over the wire
# It's a last resort of security in case none of the encryption modules were found
#
sub _munge {
	my $client = shift || return undef;
	my $data = shift;
	my ($c, $t);

	#
	# Munge's tricky because is existed on and off in different versions
	#
	if (defined $data && ($client->{_version} == 0.07 || $client->{_version} == 0.08 || $client->{_version} >= 0.15)) {

		#
		# Peer supports munge
		#
		for (0 .. length($data) - 1) {
			$c = substr($data, $_, 1);
			$t = vec($c, 0, 4);
			vec($c, 0, 4) = vec($c, 1, 4);
			vec($c, 1, 4) = $t;
			substr($data, $_, 1) = $c;
		}
		$data = reverse($data);
	}
	else {

		# Our peer doesn't munge, so we won't either
	}
	return $data;
}

#
# This takes a client object and a callback keyword and calls back the associated sub if possible
#
sub _callback {
	my $client = shift;
	my $type   = shift;
	if (!$client->{_negotiating} && $client->{_callbacks}->{$type}) {
		&{ $client->{_callbacks}->{$type} }($client);
	}
}

#
# This sub takes a scalar key
# Returns a reference to a compatability compex object made up of repeating
# the scalar in different combinations
#
sub _gencompatabilityreference {
	my $key = shift;
	return [
		$key,
		{
			$key => $key,
			$key => $key,
		},
		[ $key, { $key => $key, }, $key, ],
	];
}

#
# This takes in an encryption key id and an optional "forcompat" boolean flag
# Generates a keypair (public, private) and returns them according to the type of encryption specified
# Returns undef on error
# The 2 returned keys are guaranteed to be: 1. Scalars and 2. Null-character-free. weather by their nature, or serialization or asci-fi-cation
# If "forcompat" is not specified and there are already a keypair for the specified module stored globally,
# it will return that instead of generating new ones.
# If "forcompat" is supplied, you're guaranteed to receive a new key that wasn't given out in the past to
# non-compat requests. It may be a repeat of a previous "forcompat" pair. However, the strength of that key
# could be possibly reduced.  Such keys are safe to reveal the private portion of publicly, as during the
# compatability negotiation phase, however such keys must NEVER be used to encrypt any real data, as they
# are no longer secret.
#
sub _genkey {
	my $modulekey = shift;
	my $forcompat = shift;
	my $module    = $_ENCRYPT_AVAILABLE{$modulekey}{name};
	my $key1      = undef;
	my $key2      = undef;
	my $temp;
	$@ = undef;
	if (!$forcompat && $_ENCRYPT_AVAILABLE{$modulekey}{localpublickey} && $_ENCRYPT_AVAILABLE{$modulekey}{localprivatekey}) {
		$key1 = $_ENCRYPT_AVAILABLE{$modulekey}{localpublickey};
		$key2 = $_ENCRYPT_AVAILABLE{$modulekey}{localprivatekey};
	}
	elsif ($forcompat && $_ENCRYPT_AVAILABLE{$modulekey}{localcompatpublickey} && $_ENCRYPT_AVAILABLE{$modulekey}{localcompatprivatekey}) {
		$key1 = $_ENCRYPT_AVAILABLE{$modulekey}{localcompatpublickey};
		$key2 = $_ENCRYPT_AVAILABLE{$modulekey}{localcompatprivatekey};
	}
	elsif ($module eq 'Crypt::RSA') {
		eval {
			$temp = Crypt::RSA->new() || die "Failed to create new Crypt::RSA object for key generation: $! $@\n";
			($key1, $key2) = $temp->keygen(
				Size      => 512,
				Verbosity => 0,
			  )
			  or die "Failed to create RSA keypair: " . $temp->errstr() . "\n";
		};
		if ($key1 && $key2) {
			$key1 = _bin2asc(nfreeze($key1));

			# RSA private keys are NOT serializable with the Serialize module - we MUST use Crypt::RSA::Key::Private's undocumented serialize() method:
			$key2 = $key2->serialize();
			if ($forcompat) {
				$_ENCRYPT_AVAILABLE{$modulekey}{localcompatpublickey}  = $key1;
				$_ENCRYPT_AVAILABLE{$modulekey}{localcompatprivatekey} = $key2;
			}
		}
	}
	elsif ($module eq 'Crypt::Rijndael') {
		$key1 = _genrandstring(32);
		$key2 = $key1;
	}
	elsif ($module eq 'Crypt::RC6') {
		$key1 = _genrandstring(32);
		$key2 = $key1;
	}
	elsif ($module eq 'Crypt::Blowfish') {
		$key1 = _genrandstring(56);
		$key2 = $key1;
	}
	elsif ($module eq 'Crypt::DES_EDE3') {
		$key1 = _genrandstring(24);
		$key2 = $key1;
	}
	elsif ($module eq 'Crypt::DES') {
		$key1 = _genrandstring(8);
		$key2 = $key1;
	}
	elsif ($module eq 'Crypt::Twofish2') {
		$key1 = _genrandstring(32);
		$key2 = $key1;
	}
	elsif ($module eq 'Crypt::Twofish') {
		$key1 = _genrandstring(32);
		$key2 = $key1;
	}
	elsif ($module eq 'Crypt::TEA') {
		$key1 = _genrandstring(16);
		$key2 = $key1;
	}
	elsif ($module eq 'Crypt::CipherSaber') {
		$key1 = _genrandstring(32);
		$key2 = $key1;
	}
	else {
		$@ = "Unknown encryption module [$module] modulekey [$modulekey]";
	}

	if (!$key1 || !$key2) {
		$@ = "Could not generate encryption keys. $@";
		return undef;
	}
	else {
		return ($key1, $key2);
	}

}

#
# This takes client object, and a reference to a scalar
# And if it can, compresses scalar, modifying the original, via the specified module in the client object
# Returns true if successful, false if not
#
sub _compress {
	my $client    = shift;
	my $rdata     = shift;
	my $modulekey = $client->{_compress} || return undef;
	my $module    = $_COMPRESS_AVAILABLE{$modulekey}{name};
	my $newdata;

	#
	# Compress the data
	#
	if ($module eq 'Compress::Zlib') {
		$newdata = Compress::Zlib::compress($$rdata);
	}
	elsif ($module eq 'Compress::LZF') {
		$newdata = Compress::LZF::compress($$rdata);
	}
	else {
		$@ = "Unknown compression module [$module] modulekey [$modulekey]";
	}

	#
	# Finally, override reference if compression succeeded
	#
	if ($newdata) {
		$$rdata = $newdata;
		return 1;
	}
	else {
		return undef;
	}

}

#
# This does the opposite of _compress()
#
sub _decompress {
	my $client    = shift;
	my $rdata     = shift;
	my $modulekey = $client->{_compress};
	my $module    = $_COMPRESS_AVAILABLE{$modulekey}{name};
	my $newdata;

	if ($module eq 'Compress::Zlib') {
		$newdata = Compress::Zlib::uncompress($$rdata);
	}
	elsif ($module eq 'Compress::LZF') {
		$newdata = Compress::LZF::decompress($$rdata);
	}
	else {
		$@ = "Unknown decompression module [$module] modulekey [$modulekey]";
	}

	#
	# Finally, override reference if decompression succeeded
	#
	if ($newdata) {
		$$rdata = $newdata;
		return 1;
	}
	else {
		return undef;
	}

}

#
# This takes client object, and a reference to a scalar
# And if it can, encrypts scalar, modifying the original, via the specified module in the client object
# Returns true if successful, false if not
#
sub _encrypt {
	my $client            = shift;
	my $rdata             = shift;
	my $modulekey         = $client->{_encrypt} || return undef;
	my $module            = $_ENCRYPT_AVAILABLE{$modulekey}{name};
	my $cbc               = $_ENCRYPT_AVAILABLE{$modulekey}{cbc};
	my $mergewithpassword = $_ENCRYPT_AVAILABLE{$modulekey}{mergewithpassword};
	my $newdata;
	my $temp;
	my $publickey = $client->{_remotepublickey} || return undef;
	my $cleanpassword;

	if (defined $client->{_password}) {
		$cleanpassword = $client->{_password};
		$cleanpassword =~ s/[^a-z0-9]//gi;
	}
	else {
		$cleanpassword = undef;
	}

	#
	# If there is a password for the connection, and we're using Symmetric encryption, we include the password
	# in the encryption key used
	#
	if ($mergewithpassword && defined $cleanpassword && length($cleanpassword) && $client->{_authenticated} && !$client->{_negotiating} && $client->{_version} >= 0.15) {
		if (length($cleanpassword) <= length($publickey)) {
			substr($publickey, 0, length($cleanpassword)) = $cleanpassword;
		}
		elsif (length($cleanpassword) > length($publickey)) {
			$publickey = substr($cleanpassword, 0, length($publickey));
		}
		else {
			$@ = "Failed to merge password with symmetric encryption key";
			return undef;
		}
	}
	if ($publickey =~ /^(\%[0-9A-F]{2})+$/) {

		#
		# In the case of binary keys (such as RSA's) they're ascii-armored, we need to decrypt them
		#
		$publickey = thaw(_asc2bin($publickey)) || return undef;
		$client->{_remotepublickey} = $publickey;
	}

	#
	# Encrypt the data into $newdata if possible
	#
	if ($module eq 'Crypt::RSA') {
		eval {
			$temp = Crypt::RSA->new() || die "Failed to create new Crypt::RSA object for encryption: $! $@\n";
			$newdata = $temp->encrypt(
				Message => $$rdata,
				Key     => $publickey,
				Armour  => 0,
			  )
			  or die "Failed to encrypt data with Crypt::RSA: " . $temp->errstr() . "\n";
		};
	}
	elsif ($module eq 'Crypt::CipherSaber') {
		$temp    = Crypt::CipherSaber->new($publickey);
		$newdata = $temp->encrypt($$rdata);
	}
	elsif ($cbc) {
		$temp = Crypt::CBC->new($publickey, $module);
		$newdata = $temp->encrypt($$rdata);
	}
	else {
		$@ = "Unknown encryption module [$module] modulekey [$modulekey]";
	}

	#
	# Finally, override reference if encryption succeeded
	#
	if ($newdata) {
		$$rdata = $newdata;
		return 1;
	}
	else {
		return undef;
	}

}

#
# Does the opposite of _encrypt();
#
sub _decrypt {
	my $client            = shift;
	my $rdata             = shift;
	my $modulekey         = $client->{_encrypt} || return undef;
	my $module            = $_ENCRYPT_AVAILABLE{$modulekey}{name};
	my $cbc               = $_ENCRYPT_AVAILABLE{$modulekey}{cbc};
	my $mergewithpassword = $_ENCRYPT_AVAILABLE{$modulekey}{mergewithpassword};
	my $newdata;
	my $temp;
	my $privatekey = $client->{_localprivatekey} || return undef;
	my $cleanpassword;

	if (defined $client->{_password}) {
		$cleanpassword = $client->{_password};
		$cleanpassword =~ s/[^a-z0-9]//gi;
	}
	else {
		$cleanpassword = undef;
	}

	#
	# If there is a password for the connection, and we're using Symmetric encryption, we include the password
	# in the decryption key used
	#
	if ($mergewithpassword && defined $cleanpassword && length($cleanpassword) && $client->{_authenticated} && !$client->{_negotiating} && $client->{_version} >= 0.15) {
		if (length($cleanpassword) <= length($privatekey)) {
			substr($privatekey, 0, length($cleanpassword)) = $cleanpassword;
		}
		elsif (length($cleanpassword) > length($privatekey)) {
			$privatekey = substr($cleanpassword, 0, length($privatekey));
		}
		else {
			$@ = "Failed to merge password with symmetric encryption key";
			return undef;
		}
	}
	if ($privatekey =~ /^(\%[0-9A-F]{2})+$/) {

		#
		# In the case of binary keys (such as RSA's) they're ascii-armored, we need to decrypt them
		#
		$privatekey = _asc2bin($privatekey);
	}

	#
	# Decrypt the data
	#
	if ($module eq 'Crypt::RSA') {
		eval {
			if (!ref($privatekey)) {
				if ($privatekey =~ /bless/) {

					# We need to deserialize the private key with Crypt::RSA::Key::Private's undocumented deserialize function
					$temp = Crypt::RSA::Key::Private->new() or die "Failed to initialize empty Crypt::RSA::Key::Private object\n";
					$privatekey = $temp->deserialize(String => [$privatekey]) or die "Failed to deserialize Crypt::RSA private key\n";
				}
				else {
					die "The Crypt::RSA private key is absolutely unusable\n";
				}
			}
			$temp = Crypt::RSA->new() || die "Failed to create new Crypt::RSA object for decryption: $! $@\n";
			$newdata = $temp->decrypt(
				Cyphertext => $$rdata,
				Key        => $privatekey,
				Armour     => 0,
			  )
			  or die "Failed to decrypt data with Crypt::RSA : " . $temp->errstr() . "\n";
		};
	}
	elsif ($module eq 'Crypt::CipherSaber') {
		$temp    = Crypt::CipherSaber->new($privatekey);
		$newdata = $temp->decrypt($$rdata);
	}
	elsif ($cbc) {
		$temp = Crypt::CBC->new($privatekey, $module);
		$newdata = $temp->decrypt($$rdata);
	}
	else {
		$@ = "Unknown encryption module [$module] modulekey [$modulekey]";
	}

	#
	# Finally, override reference if decryption succeeded
	#
	if ($newdata) {
		$$rdata = $newdata;
		return 1;
	}
	else {
		return undef;
	}

}

#
# This sub returns a random string
# Expects an integer (length)
# Accepts optional boolean that defines whether string should be made up of letters only or not
#
sub _genrandstring {
	my $l           = shift;
	my $lettersonly = shift;
	my ($minord, $maxord);
	my $key;
	my $avoid;
	my $module;
	my $version;

	if ($lettersonly) {
		$minord = 97;
		$maxord = 122;
	}
	else {
		$minord = 33;
		$maxord = 126;
	}

	#
	# First, we try one of the fancy randomness modules possibly in %_MISC_AVAILABLE
	#
	foreach (@{ $_MISC_AVAILABLE{_order} }) {
		$module  = $_MISC_AVAILABLE{$_}{name};
		$version = $_MISC_AVAILABLE{$_}{version};

		#
		# Note that Crypt::Random has the makerandom_octet function ONLY in 0.34 and higher
		#
		if ($module eq "Crypt::Random" && $version >= 0.34) {
			for (0 .. $minord - 1, $maxord + 1 .. 255) {
				$avoid .= chr($_);
			}
			$key = Crypt::Random::makerandom_octet(
				Length => $l,
				Skip   => $avoid,
			);
			return $key;
		}
	}

	#
	# If we've reached here, then no modules were found. We'll use perl's builtin rand() to generate
	# the string
	#
	for (1 .. $l) {
		$key .= chr(int(rand($maxord - $minord)) + $minord);
	}
	return $key;
}

#
# Once a new client is connected it calls this to negotiate basics with the server
# This must return true once all negotiations succeed or false if not
#
sub _client_negotiate {
	my $client = shift;
	my $reply;
	my $timeout = 90;
	my @P;
	my $command;
	my $data;
	my $temp;
	my $temp2;
	my ($temppublic, $tempprivate, $tempscalar);
	my $version;
	my $evl;
	my $starttime = time;

	while ((time - $starttime) < $timeout) {
		$reply = $client->receive($timeout, 1);
		if (!defined $reply) {
			last;
		}
		@P       = split(/\x00/, $reply);
		$command = shift(@P);
		$evl     = undef;
		$data    = undef;
		if (!$command) {
			$@ = "Error negotiating with server. No command received.";
			return undef;
		}
		if ($command eq "PF") {

			#
			# Password Failure
			#
			$client->{_authenticated} = 0;
			$@ = "Server rejected supplied password";
			return undef;
		}
		elsif ($command eq "COS") {

			#
			# Compatability Scalar
			#
			$client->{_compatabilityscalar}    = _asc2bin($P[0]);
			$client->{_compatabilityreference} = _gencompatabilityreference($client->{_compatabilityscalar});
			$data                              = "COS\x00" . $P[0];
		}
		elsif ($command eq "COF") {

			#
			# Compatability failure
			#
			$@ = "Compatability failure: The client and server could not negotiate compatability regarding: $P[0]";
			return undef;
		}
		elsif ($command eq "CVF" && !$client->{_donotcheckversion}) {

			#
			# Compression Version Failure
			#
			$temp    = $_COMPRESS_AVAILABLE{ $client->{_compress} }{name};
			$version = $_COMPRESS_AVAILABLE{ $client->{_compress} }{version};
			$@       = "Compression version mismatch for $temp : Local version $version remote version $P[0] : Upgrade both to same version or read the documentation of this module for how to forcefully ignore this problem";
			return undef;
		}
		elsif ($command eq "EVF" && !$client->{_donotcheckversion}) {

			#
			# Encryption Version Failure
			#
			$temp    = $_ENCRYPT_AVAILABLE{ $client->{_encrypt} }{name};
			$version = $_ENCRYPT_AVAILABLE{ $client->{_encrypt} }{version};
			$@       = "Encryption version mismatch for $temp : Local version $version remote version $P[0] : Upgrade both to same version or read the documentation of this module for how to forcefully ignore this problem";
			return undef;
		}
		elsif ($command eq "EN") {

			#
			# End of negotiation
			#
			$data = "EN";
			$evl  = 'return("RETURN1");';
		}
		elsif ($command eq "VE") {

			#
			# Version of module
			#
			$client->{_version} = $P[0];
			$data = "VE\x00$VERSION";
		}
		elsif ($command eq "SVE") {

			#
			# Version of the Storable module
			#
			$client->{_storableversion} = $P[0];
			if ($P[1]) {

				#
				# New compatability method
				#
				eval { $temp = thaw(_asc2bin($P[1])); };
				if (!$temp || $@) {
					$@ = "Error thawing compatability reference: $! $@ -- This may be because you're using binary-image-incompatible versions of the Storable module.  Please update the Storable module on both ends othe the connection to the same latest stable version.";
					return undef;
				}
				if (!_comparereferences($temp, $client->{_compatabilityreference})) {
					$@ = "Incompatible version mismatch for the Storable module: Local version " . $Storable::VERSION . " remote version $P[0] : Upgrade both to compatible (preferrably same) versions : $@";
					return undef;
				}
			}
			$data = "SVE\x00" . $Storable::VERSION;
			if ($client->{_compatabilityreference}) {
				$data .= "\x00" . _bin2asc(nfreeze($client->{_compatabilityreference}));
			}
		}
		elsif ($command eq "SVF" && !$client->{_donotcheckversion}) {

			#
			# Storable Module Version Failure
			#
			$version = $Storable::VERSION;
			$@       = "Version mismatch for the Storable module : Local version $version remote version $P[0] : Upgrade both to same version or read the documentation of this module for how to forcefully ignore this problem";
			return undef;
		}
		elsif ($command eq "CS") {

			#
			# Crypt Salt
			#
			# We assume that we've authenticated successfully
			$client->{_authenticated} = 1;
			$temp = _munge($client, crypt($client->{_password}, $P[0]));
			$data = "CP\x00$temp";
		}
		elsif ($command eq "EK") {

			#
			# Encryption key
			#
			$client->{_remotepublickey} = _munge($client, $P[0]);
			$data = "EK\x00";
			$data .= _munge($client, $client->{_localpublickey});
		}
		elsif ($command eq "EM") {

			#
			# Encryption module
			#
			if ($client->{_donotencryptwith}{ $P[0] }) {
				$data = "NO\x00I do not encrypt with this module";
			}
			elsif (!$client->{_donotencrypt}) {

				#
				# Let's see if we can handle decrypting this module
				#
				$tempprivate = _asc2bin($P[2]);
				$tempscalar  = _asc2bin($P[3]);

				#
				# Sometimes the tempprivate is frozen. If we can thaw it, let's do it:
				#
				eval { $temp = thaw $tempprivate };
				if (!$@) {
					$tempprivate = $temp;
				}
				$client->{_encrypt}         = $P[0];
				$client->{_localprivatekey} = $tempprivate;
				if (_decrypt($client, \$tempscalar) && $tempscalar eq $client->{_compatabilityscalar}) {

					#
					# This is a viable module that we can decrypt.
					#
					($temppublic, $tempprivate) = _genkey($P[0], 1);
					if ($temppublic && $tempprivate) {

						#
						# I created a keypair with that module type successfully
						#
						$client->{_remotepublickey} = $temppublic;
						if (_encrypt($client, \$tempscalar)) {
							$data = "EM\x00$P[0]\x00" . $_ENCRYPT_AVAILABLE{ $P[0] }{version} . "\x00" . _bin2asc(ref($tempprivate) ? nfreeze $tempprivate : $tempprivate) . "\x00" . _bin2asc($tempscalar);
						}
						delete $client->{_remotepublickey};
					}
					else {

						#
						# Failed to create a keypair - no way I could encrypt with that
						#
						$data = "NO\x00$@";
					}
				}
				else {

					#
					# Failed to decrypt message from server
					#
					$data = "NO\x00$@";
				}
				delete $client->{_encrypt};
				delete $client->{_localprivatekey};
			}
			else {

				#
				# I was told not to encrypt
				#
				$data = "NO\x00I do not encrypt";

			}
		}
		elsif ($command eq "EU") {

			#
			# Encryption Use
			#
			if ($client->{_donotencryptwith}{ $P[0] }) {
				$data = "NO\x00I do not encrypt with this module";
			}
			elsif (!$client->{_donotencrypt}) {
				$temp2 = $P[0];
				$data  = "EU\x00$temp2";
				$evl   = '$client->{_encrypt} = $temp2;';
				$evl .= '($client->{_localpublickey},$client->{_localprivatekey}) =';
				$evl .= ' _genkey($client->{_encrypt}) or ';
				$evl .= ' return("RETURN0"); ';
			}
			else {
				$data = "NO\x00I do not encrypt";
			}
		}
		elsif ($command eq "EA") {

			#
			# Encryption available
			#
			$temp2   = "";
			$version = "";
			if (!$client->{_donotencrypt}) {
				foreach (@P) {
					if ($_ENCRYPT_AVAILABLE{$_}) {
						$temp2   = $_;
						$version = $_ENCRYPT_AVAILABLE{$_}{version};
						last;
					}
				}
				$temp2   ||= "";
				$version ||= "";
			}
			$data = "EU\x00$temp2\x00$version";
			if ($temp2) {
				$evl = '$client->{_encrypt} = $temp2;';
				$evl .= '($client->{_localpublickey},$client->{_localprivatekey}) =';
				$evl .= ' _genkey($client->{_encrypt}) or ';
				$evl .= ' return("RETURN0"); ';
			}
		}
		elsif ($command eq "CM") {

			#
			# Compression module
			#
			if ($client->{_donotcompresswith}{ $P[0] }) {
				$data = "NO\x00I do not compress with this module";
			}
			elsif (!$client->{_donotcompress}) {

				#
				# Let's see if we can decompress this
				#
				$tempscalar = _asc2bin($P[2]);
				$client->{_compress} = $P[0];
				if (_decompress($client, \$tempscalar) && $tempscalar eq $client->{_compatabilityscalar}) {

					#
					# This is a viable module that we can decompress.
					#
					if (_compress($client, \$tempscalar)) {
						$data = "CM\x00$P[0]\x00" . $_COMPRESS_AVAILABLE{ $P[0] }{version} . "\x00" . _bin2asc($tempscalar);
					}
				}
				else {

					#
					# Failed to decompress message from server
					#
					$data = "NO\x00$@";
				}
				delete $client->{_compress};
			}
			else {

				#
				# I was told not to compress
				#
				$data = "NO\x00I do not compress";
			}
		}
		elsif ($command eq "CU") {

			#
			# Compression Use
			#
			if ($client->{_donotcompresswith}{ $P[0] }) {
				$data = "NO\x00I do not compress with this module";
			}
			elsif (!$client->{_donotcompress}) {
				$temp2 = $P[0];
				$data  = "CU\x00$temp2";
				$evl   = '$client->{_compress} = $temp2;';
			}
			else {
				$data = "NO\x00I do not compress";
			}
		}
		elsif ($command eq "CA") {

			#
			# Compression available
			#
			$temp2   = "";
			$version = "";
			if (!$client->{_donotcompress}) {
				foreach (@P) {
					if ($_COMPRESS_AVAILABLE{$_}) {
						$temp2   = $_;
						$version = $_COMPRESS_AVAILABLE{$_}{version};
						last;
					}
				}
				$temp2   ||= "";
				$version ||= "";
			}
			$data = "CU\x00$temp2\x00$version";
			if ($temp2) {
				$evl = '$client->{_compress} = $temp2;';
			}
		}
		else {

			#
			# No Operation (do nothing)
			#
			$data = "NO\x00I don't understand you";
		}
		if (defined $data && !_send($client, $data, 0)) {
			$@ = "Error negotiating with server: Could not send : $@";
			return undef;
		}

		#
		# NOW WE SEE IF WE NEED TO EVL ANYTHING
		# IF THE RESULT OF THE EVAL IS "RETURNx" WHERE X IS A NUMBER, WE RETURN
		# OTHERWISE WE KEEP GOING
		#
		if (defined $evl) {
			$evl = eval($evl);
			if ($evl =~ /^RETURN(.+)$/) {
				return (($1) ? $1 : undef);
			}
		}
	}
	$@ = "Client timed out while negotiating with server [" . (time - $starttime) . "/$timeout] : $@";
	return undef;
}

#
# Once the server accepts a new connection, it calls this to negotiate basics with the client
# Unlike _client_negotiate() which does not return until negotiation is over, this sub
# sends 1 command or parses one reply at a time then returns immediately
# Although this is much more complicated, it needs to be done so
# the server does not block when a client is negotiating with it
#
# Expects a client object
#
sub _serverclient_negotiate {
	my $client = shift;
	my ($tempprivate, $tempscalar);
	my $reply;
	my $temp;
	my @P;
	my $command;
	my $version;

	if (!$client->{_negotiating}) {
		return 1;
	}

	$reply = $client->data();

	# Let's avoid some strict claimings
	if (!defined $reply) { $reply = "" }
	if (!defined $client->{_negotiating_lastevent}) { $client->{_negotiating_lastevent} = "" }

	if (length($reply)) {

		#
		# We're parsing a reply the other end sent us
		#
		@P = split(/\x00/, $reply);
		$command = shift(@P);
		if (!$command) {
			$@ = "Error negotiating. No command received from client : $@";
			return undef;
		}
		$client->{_negotiating_lastevent} = "received";
		if ($command eq "EU") {

			#
			# Encryption Use
			#
			$client->{_encrypt} = $P[0];
			if ($client->{_encrypt}) {
				$version = $_ENCRYPT_AVAILABLE{ $P[0] }{version};
				if ($version ne $P[1] && !$client->{_negotiatedencryptcompatability}) {
					unshift(@{ $client->{_negotiating_commands} }, "EVF\x00$version");
				}
				($client->{_localpublickey}, $client->{_localprivatekey}) = _genkey($client->{_encrypt}) or return undef;
			}
			$temp = "EK\x00";
			$temp .= _munge($client, $client->{_localpublickey});
			unshift(@{ $client->{_negotiating_commands} }, $temp);
		}
		elsif ($command eq "EM") {

			#
			# Encryption module
			#
			if ($client->{_donotencryptwith}{ $P[0] }) {

				#
				# I was told not to encrypt with this module
				#
			}
			elsif (!$client->{_donotencrypt}) {

				#
				# Let's see if we can decrypt this module
				#
				$tempprivate = _asc2bin($P[2]);
				$tempscalar  = _asc2bin($P[3]);

				#
				# Sometimes the tempprivate is frozen. If we can thaw it, let's do it:
				#
				eval { $temp = thaw $tempprivate };
				if (!$@) {
					$tempprivate = $temp;
				}
				$client->{_encrypt}         = $P[0];
				$client->{_localprivatekey} = $tempprivate;
				if (_decrypt($client, \$tempscalar) && $tempscalar eq $client->{_compatabilityscalar}) {

					#
					# This is a viable module that I (the server) can decrypt
					# Since this is the second-reply to my EM, I know that the client can also decrypt using this module
					# So we use it !
					#
					unshift(@{ $client->{_negotiating_commands} }, "EU\x00$P[0]");

					#
					# Yank out any future EMs we were going to send the client since they're weaker
					#
					$client->{_negotiating_commands} = [ grep { $_ !~ /^EM\x00/ } @{ $client->{_negotiating_commands} } ];
				}
				delete $client->{_localprivatekey};
				delete $client->{_encrypt};

				#
				# Don't try EAs after this - we know the client supports EMs
				#
				$client->{_negotiatedencryptcompatability} = 1;
			}
			else {

				#
				# I was told not to encrypt
				#
			}
		}
		elsif ($command eq "CP") {

			#
			# Crypt Password
			#
			if (_munge($client, $P[0]) eq crypt($client->{_password}, $client->{_cryptsalt})) {
				$client->{_authenticated} = 1;
			}
			else {
				$client->{_authenticated} = 0;
				unshift(@{ $client->{_negotiating_commands} }, "PF");
			}
		}
		elsif ($command eq "COS") {

			#
			# Compatability scalar
			#
			if ($client->{_compatabilityscalar} ne _asc2bin($P[0])) {
				unshift(@{ $client->{_negotiating_commands} }, "COF\x00Initial scalar exchange");
			}
		}
		elsif ($command eq "VE") {

			#
			# Version
			#
			$client->{_version} = $P[0];
		}
		elsif ($command eq "SVE") {

			#
			# Version of Storable
			#
			$client->{_storableversion} = $P[0];
			if ($P[1]) {

				#
				# New method
				#
				$temp = thaw(_asc2bin($P[1]));
				if (!$temp) {
					unshift(@{ $client->{_negotiating_commands} }, "COF\x00Thawing compatability reference with the Storable module");
				}
				if (!_comparereferences($temp, $client->{_compatabilityreference})) {
					unshift(@{ $client->{_negotiating_commands} }, "COF\x00Comparing compatability reference with the Storable module");
				}
			}
			elsif ($P[0] ne $Storable::VERSION) {

				#
				# Old method
				#
				unshift(@{ $client->{_negotiating_commands} }, "SVF\x00" . $Storable::VERSION);
			}
		}
		elsif ($command eq "CM") {

			#
			# Compression module
			#
			if ($client->{_donotcompresswith}{ $P[0] }) {

				# I was told not to compress with this module
			}
			elsif (!$client->{_donotcompress}) {

				#
				# Let's see if we can decompress this module
				#
				$tempscalar = _asc2bin($P[2]);
				$client->{_compress} = $P[0];
				if (_decompress($client, \$tempscalar) && $tempscalar eq $client->{_compatabilityscalar}) {

					#
					# This is a viable module that I (the server) can decompress
					# Since this is the second-reply to my CM, I know that the client can also decrypt using this module
					# So we use it !
					#
					unshift(@{ $client->{_negotiating_commands} }, "CU\x00$P[0]");

					#
					# Yank out any future CMs we were going to send the client since they're weaker
					#
					$client->{_negotiating_commands} = [ grep { $_ !~ /^CM\x00/ } @{ $client->{_negotiating_commands} } ];
				}
				delete $client->{_compress};

				#
				# Don't try CAs after this - we know the client supports CMs
				#
				$client->{_negotiatedcompresscompatability} = 1;
			}
			else {

				#
				# I was told not to compress
				#
			}
		}
		elsif ($command eq "CU") {

			#
			# Compression Use
			#
			$client->{_compress} = $P[0];
			if ($client->{_compress}) {
				$version = $_COMPRESS_AVAILABLE{ $P[0] }{version};
				if ($version ne $P[1] && !$client->{_negotiatedcompresscompatability}) {
					unshift(@{ $client->{_negotiating_commands} }, "CVF\x00$version");
				}
			}
		}
		elsif ($command eq "EK") {

			#
			# Encryption Key
			#
			$client->{_remotepublickey} = _munge($client, $P[0]);
		}
		elsif ($command eq "EN") {

			#
			# End (of negotiation)
			#
			if ((defined $client->{_password} && length($client->{_password})) && !$client->{_authenticated}) {
				return undef;
			}
			else {
				$client->{_negotiating} = 0;
				delete $client->{_negotiating_lastevent};
				delete $client->{_negotiating_commands};
				return 1;
			}
		}
		else {

			# received unknown reply. so what..
		}
	}
	elsif ($client->{_negotiating_lastevent} ne "sent") {

		# We're sending a command to the other end, now we have to figure out which one
		_serverclient_negotiate_sendnext($client);
	}
	return undef;
}

#
# This is called by _serverclient_negotiate(). It's job is to figure out what's the next command to send
# to the other end and send it.
#
# Expects a client object
#
sub _serverclient_negotiate_sendnext {
	my $client = shift;
	my $data;
	my $class = $client;
	my ($temppublic, $tempprivate, $tempscalar);
	my $key;
	my @available;
	$class =~ s/=.*//g;

	if (!defined $client->{_negotiating_commands}) {

		#
		# Let's initialize the sequence of commands we send
		#
		$data = "\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n";
		$data .= "-----BEGIN CLEARTEXT WELCOME MESSAGE-----\r\n";
		$data .= "::\r\n";
		$data .= "::  HELLO  ::  $class VERSION $VERSION  ::  SERVER READY  ::\r\n";
		$data .= "::\r\n";
		if ($client->{_welcome}) {
			$data .= "::  $client->{_welcome}\r\n";
			$data .= "::\r\n";
		}
		$data .= "-----END CLEARTEXT WELCOME MESSAGE-----\r\n";
		push(@{ $client->{_negotiating_commands} }, $data);
		$data = "VE\x00$VERSION";
		push(@{ $client->{_negotiating_commands} }, $data);
		$data = "COS\x00" . _bin2asc($client->{_compatabilityscalar});
		push(@{ $client->{_negotiating_commands} }, $data);
		$data = "SVE\x00" . $Storable::VERSION . "\x00" . _bin2asc(nfreeze($client->{_compatabilityreference}));
		push(@{ $client->{_negotiating_commands} }, $data);

		if (!$client->{_donotencrypt}) {

			@available = ();

			#
			# New method
			#
			foreach $key (@{ $_ENCRYPT_AVAILABLE{_order} }) {
				if ($client->{_donotencryptwith}{$key}) {

					# I was told not to encrypt with this module
					next;
				}
				($temppublic, $tempprivate) = _genkey($key, 1) or next;
				$client->{_remotepublickey} = $temppublic;
				$client->{_encrypt}         = $key;
				$tempscalar                 = $client->{_compatabilityscalar};
				if (_encrypt($client, \$tempscalar)) {
					push(@available, $key);
					$data = "EM\x00$key\x00" . $_ENCRYPT_AVAILABLE{$key}{version} . "\x00" . _bin2asc(ref($tempprivate) ? nfreeze $tempprivate : $tempprivate) . "\x00" . _bin2asc($tempscalar);
					push(@{ $client->{_negotiating_commands} }, $data);
				}
				delete $client->{_remotepublickey};
				delete $client->{_encrypt};
			}

			#
			# Old method
			#
			$data = "EA" . join("", map { "\x00$_" } @available);
			push(@{ $client->{_negotiating_commands} }, $data);
		}
		if (!$client->{_donotcompress}) {

			@available = ();

			#
			# New method
			#
			foreach $key (@{ $_COMPRESS_AVAILABLE{_order} }) {
				if ($client->{_donotcompresswith}{$key}) {

					# I was told not to compress with this module
					next;
				}
				$client->{_compress} = $key;
				$tempscalar = $client->{_compatabilityscalar};
				if (_compress($client, \$tempscalar)) {
					push(@available, $key);
					$data = "CM\x00$_\x00" . $_COMPRESS_AVAILABLE{$_}{version} . "\x00" . _bin2asc($tempscalar);
					push(@{ $client->{_negotiating_commands} }, $data);
				}
				delete $client->{_compress};
			}

			#
			# Old method
			#
			$data = "CA" . join("", map { "\x00$_" } @available);
			push(@{ $client->{_negotiating_commands} }, $data);
		}
		if (defined $client->{_password}) {
			if (!exists $client->{_cryptsalt}) {
				$client->{_cryptsalt} = _genrandstring(2, 1);
			}
			$data = "CS\x00" . $client->{_cryptsalt};
			push(@{ $client->{_negotiating_commands} }, $data);
		}
		push(@{ $client->{_negotiating_commands} }, "EN");
	}

	$data = shift @{ $client->{_negotiating_commands} };
	if (($data =~ /^EA\x00/ && $client->{_negotiatedencryptcompatability}) || ($data =~ /^CA\x00/ && $client->{_negotiatedcompresscompatability})) {

		#
		# We've already negotiated through compatability. No need to re-negotiate based on versions
		#
		$data = "NO\x00Already negotiated through compatability";
	}
	if (!defined $data) {
		return undef;
	}
	if (!_send($client, $data, 0)) {
		$@ = "Error negotiating with client. Could not send : $@";
		return undef;
	}
	$client->{_negotiating_lastevent} = "sent";
	return 1;
}

#
# This is called whenever a client (true client or serverclient) receives data without the realdata bit set
# Takes client as first argument
# Takes optional data as second argument, otherwise calls data() method to get it
# It would parse the data and probably set variables inside the client object
#
sub _parseinternaldata {
	my $client = shift;
	my $data   = shift;
	if ($client->{_mode} eq "serverclient" && $client->{_negotiating}) {

		# The serverclient is still negotiating
		if (_serverclient_negotiate($client)) {

			# Negotiation's complete and successful
			_callback($client, "connect");
		}
	}
	else {

		#
		# It's normal internal data
		#
		if (!defined $data) {

			#
			# Data was not supplied - get it from bucket
			#
			$data = $client->data();
		}

		# Now do something with it
	}
}

#
# This takes an integer, packs it as tightly as possible as a binary representation
# and returns the binary value
#
sub _packint {
	my $int = shift;
	my $bin;
	$bin = pack("N", $int);
	$bin =~ s/^\0+//;
	return $bin;
}

#
# This does the opposite of _packint. It takes a packed binary produced by _packint and
# returns the integer
#
sub _unpackint {
	my $bin = shift;
	my $int;
	$int = "\0" x (4 - length($bin)) . $bin;
	$int = unpack("N", $int);
	return $int;
}

#
# This creates a new client object and outgoing connection and returns it as an object
# , or returns undef if unsuccessful
# If special parameter _sock is supplied, it will be taken as an existing connection
# and no outgoing connection will be made
#
sub _new_client {
	my $class = shift;
	my %para  = @_;
	my $sock;
	my $self = {};
	my $temp;
	my $remoteip;
	my $remoteport;
	my $key;
	my $timeout = $para{timeout} || 30;
	$class =~ s/=.*//g;

	if (!$para{_sock}) {
		if (!$para{host}) {
			$@ = "Invalid host";
			return undef;
		}
		elsif (!$para{port}) {
			$@ = "Invalid port";
			return undef;
		}
		$sock = new IO::Socket::INET(
			PeerAddr => $para{host},
			PeerPort => $para{port},
			Proto    => 'tcp',
			Timeout  => $timeout,
		);
		$self->{_mode}        = "client";
		$self->{_negotiating} = time;
	}
	else {
		$sock                   = $para{_sock};
		$self->{_mode}          = "serverclient";
		$self->{_negotiating}   = time;
		$self->{_authenticated} = 0;
	}
	if (!$sock) {
		$@ = "Could not connect to $para{host}:$para{port}: $!";
		return undef;
	}
	$sock->autoflush(1);
	if ($para{_remoteport} && $para{_remoteip}) {
		$self->{_remoteport} = $para{_remoteport};
		$self->{_remoteip}   = $para{_remoteip};
	}
	else {
		if (!($temp = getpeername($sock))) {
			$@ = "Error getting peername";
			return undef;
		}
		if (!(($remoteport, $remoteip) = sockaddr_in($temp))) {
			$@ = "Error getting socket address";
			return undef;
		}
		if (!($self->{_remoteip} = inet_ntoa($remoteip))) {
			$@ = "Error determing remote IP";
			return undef;
		}
		$self->{_remoteport} = $remoteport;
	}
	$self->{_sock}              = $sock;
	$self->{_password}          = $para{password};
	$self->{_donotcompress}     = ($para{donotcompress}) ? 1 : 0;
	$self->{_donotencrypt}      = ($para{donotencrypt}) ? 1 : 0;
	$self->{_donotcheckversion} = ($para{donotcheckversion}) ? 1 : 0;
	$self->{_localpublickey}    = "";
	$self->{_databucket}        = [];

	#
	# Populate donotcompresswith with the keys of the supplied module names
	#
	$self->{_donotcompresswith} = {};
	if (ref($para{donotcompresswith}) ne "ARRAY") {
		$para{donotcompresswith} = [ $para{donotcompresswith} ];
	}
	foreach $key (keys %_COMPRESS_AVAILABLE) {
		if ($key ne "_order" && grep { $_COMPRESS_AVAILABLE{$key}{name} eq $_ } @{ $para{donotcompresswith} }) {
			$self->{_donotcompresswith}{$key} = 1;
		}
	}

	#
	# Populate donotencryptwith with the keys of the supplied module names
	#
	$self->{_donotencryptwith} = {};
	if (ref($para{donotencryptwith}) ne "ARRAY") {
		$para{donotencryptwith} = [ $para{donotencryptwith} ];
	}
	foreach $key (keys %_ENCRYPT_AVAILABLE) {
		if ($key ne "_order" && grep { $_ENCRYPT_AVAILABLE{$key}{name} eq $_ } @{ $para{donotencryptwith} }) {
			$self->{_donotencryptwith}{$key} = 1;
		}
	}

	bless($self, $class);

	if ($self->{_mode} eq "client") {
		if (!_client_negotiate($self)) {

			# Bad server
			$self->close();
			$@ = "Error negotiating with server: $@";
			return undef;
		}
		else {
			$self->{_negotiating} = 0;
		}
	}
	return $self;
}

#
# This creates a new listening server object and returns it, or returns undef if unsuccessful
#
# Expects a class
#
sub _new_server {
	my $class = shift;
	my %para  = @_;
	my $sock;
	my $key;
	my $self = {};
	if (!$para{port}) {
		$@ = "Invalid port";
		return undef;
	}
	$sock = new IO::Socket::INET(
		LocalPort => $para{port},
		Proto     => 'tcp',
		Listen    => SOMAXCONN,
		Reuse     => 1,
	);
	if (!$sock) {
		$@ = "Could not create listening socket on port $para{port}: $!";
		return undef;
	}
	$sock->autoflush(1);
	$self->{_sock}     = $sock;
	$self->{_selector} = new IO::Select;
	$self->{_selector}->add($sock);
	$self->{_mode}          = "server";
	$self->{_welcome}       = $para{welcome};
	$self->{_password}      = $para{password};
	$self->{_donotcompress} = ($para{donotcompress}) ? 1 : 0;
	$self->{_donotencrypt}  = ($para{donotencrypt}) ? 1 : 0;
	$self->{_clients}       = {};
	$self->{_clientip}      = {};

	#
	# Populate donotcompresswith with the keys of the supplied module names
	#
	$self->{_donotcompresswith} = {};
	if (ref($para{donotcompresswith}) ne "ARRAY") {
		$para{donotcompresswith} = [ $para{donotcompresswith} ];
	}
	foreach $key (keys %_COMPRESS_AVAILABLE) {
		if ($key ne "_order" && grep { $_COMPRESS_AVAILABLE{$key}{name} eq $_ } @{ $para{donotcompresswith} }) {
			$self->{_donotcompresswith}{$key} = 1;
		}
	}

	#
	# Populate donotencryptwith with the keys of the supplied module names
	#
	$self->{_donotencryptwith} = {};
	if (ref($para{donotencryptwith}) ne "ARRAY") {
		$para{donotencryptwith} = [ $para{donotencryptwith} ];
	}
	foreach $key (keys %_ENCRYPT_AVAILABLE) {
		if ($key ne "_order" && grep { $_ENCRYPT_AVAILABLE{$key}{name} eq $_ } @{ $para{donotencryptwith} }) {
			$self->{_donotencryptwith}{$key} = 1;
		}
	}

	#
	# To avoid key-gen delays while running, let's create global RSA keypairs right now
	#
	if (!$self->{_donotencrypt} && !$self->{_donotencryptwith}{'B'}) {
		if (!_generateglobalkeypair('Crypt::RSA')) {
			$@ = "Could not generate global Crypt::RSA keypairs. $@";
			return undef;
		}
	}

	bless($self, $class);
	return $self;
}

#
# This takes a client object and tries to extract as many data buckets as possible out of it's data buffer
# If no buckets were extracted, returns false
# Otherwise returns true
#
sub _extractdata {
	my $client = shift;
	my ($alwayson, $complexstructure, $realdata, $reserved, $encrypted, $compressed, $lenlen);
	my $lendata;
	my $len;
	my $data;
	my $key = (defined $client->{_databuffer}) ? substr($client->{_databuffer}, 0, 2) : '';
	if (length($key) != 2) {
		return undef;
	}
	$alwayson         = vec($key, 0, 1);
	$complexstructure = vec($key, 1, 1);
	$realdata         = vec($key, 2, 1);
	$encrypted        = vec($key, 3, 1);
	$compressed       = vec($key, 4, 1);
	$reserved         = vec($key, 5, 1);
	$reserved         = vec($key, 6, 1);
	$reserved         = vec($key, 7, 1);
	$lenlen           = vec($key, 1, 8);

	if (!$alwayson) {
		return undef;
	}
	$len = substr($client->{_databuffer}, 2, $lenlen);
	$lendata = _unpackint($len);
	if (length($client->{_databuffer}) < (2 + $lenlen + $lendata)) {
		return undef;
	}
	$data = substr($client->{_databuffer}, 2 + $lenlen, $lendata);
	if (length($data) != $lendata) {
		return undef;
	}
	substr($client->{_databuffer}, 0, 2 + $lenlen + $lendata) = '';
	if ($encrypted) {
		_decrypt($client, \$data) || return undef;
	}
	if ($compressed) {
		_decompress($client, \$data) || return undef;
	}
	if ($complexstructure) {
		$data = thaw($data);
		if (!$data) {
			$@ = "Error decompressing complex structure: $!";
			return undef;
		}
	}

	#
	# We extracted it fine from the buffer, we add it in the data buckets
	#
	push(
		@{ $client->{_databucket} },
		{
			data     => $data,
			realdata => $realdata,
		}
	);

	#
	# Let's push our luck and see if we can extract more :)
	#
	_extractdata($client);

	#
	# All is good, we know we extracted at least 1 bucket
	#
	return (1);
}

#
# This takes a client object and data, serializes the data if necesary, constructs a proprietary protocol packet
# containing the user's data in it, implements crypto and compression as needed, and sends the packet to the supplied socket
# Returns 1 for success, undef on failure
#
sub _send {
	local $SIG{'PIPE'} = 'IGNORE';
	my $client   = shift;
	my $data     = shift;
	my $realdata = shift;
	my $sock     = $client->{_sock};
	my $encrypted;
	my $compressed;
	my $lendata;
	my $lenlen;
	my $len;
	my $key;
	my $finaldata;
	my $packet;
	my $temp;
	my $bytes_written;
	my $complexstructure = ref($data);

	if (!$sock) {
		$@ = "Error sending data: Socket handle not supplied";
		return undef;
	}
	elsif (!defined $data) {
		$@ = "Error sending data: Data not supplied";
		return undef;
	}
	if ($complexstructure) {
		$data = nfreeze $data;
	}
	$compressed = ($client->{_donotcompress}) ? 0 : _compress($client, \$data);
	$encrypted  = ($client->{_donotencrypt})  ? 0 : _encrypt($client,  \$data);
	$lendata    = length($data);
	$len        = _packint($lendata);
	$lenlen     = length($len);

	# Reset the key byte into 0-filled bits
	$key = chr(0) x 2;
	vec($key, 0, 16) = 0;

	# 1 BIT: ALWAYSON :
	vec($key, 0, 1) = 1;

	# 1 BIT: COMPLEXSTRUCTURE :
	vec($key, 1, 1) = ($complexstructure) ? 1 : 0;

	# 1 BIT: REAL DATA:
	vec($key, 2, 1) = (defined $realdata && !$realdata) ? 0 : 1;

	# 1 BIT: ENCRYPTED :
	vec($key, 3, 1) = ($encrypted) ? 1 : 0;

	# 1 BIT: COMPRESSED :
	vec($key, 4, 1) = ($compressed) ? 1 : 0;

	# 1 BIT: RESERVED :
	vec($key, 5, 1) = 0;

	# 1 BIT: RESERVED :
	vec($key, 6, 1) = 0;

	# 1 BIT: RESERVED :
	vec($key, 7, 1) = 0;

	# 8 BITS: LENGTH OF "DATA LENGTH STRING"
	vec($key, 1, 8) = $lenlen;

	# Construct the final data and send it:
	$finaldata = $key . $len . $data;
	$len       = length($finaldata);
	$temp      = 0;
	while (length($finaldata)) {
		$packet = substr($finaldata, 0, $PACKETSIZE);
		substr($finaldata, 0, $PACKETSIZE) = '';
		$bytes_written = syswrite($sock, $packet, length($packet));
		if (!defined $bytes_written) {
			$@ = "Error writing to socket while sending data: $!";
			return undef;
		}
		$temp += $bytes_written;
	}
	if ($temp != $len) {
		$@ = "Error sending data: $!";
		return undef;
	}
	else {
		return 1;
	}
}

#
# Leave me alone:
#
1;