Re: Issue using encryption in Debug/Release mode ??

From: John Hadstate (jh113355_at_hotmail.com)
Date: 10/01/03 

Date: 1 Oct 2003 06:54:33 -0700

katiki@kodak.com wrote in message news:<ble16v$8fv$1@news.kodak.com>...
> Hi all !
>
> I would like to ask you something regarding AES encryption, and more
> generally
> about using algorithms into commercial products.
>
> Actually, my library using AES (named KEM.dll) works fine on our machines.
>
> But, on our dev machines, KEM.dll is in Debug mode...that's normal.
> Therefore, we have encrypted files with the DEBUG version of KEM.dll
>
> Therefore, when testing those encrypted files on our release machine
> (using the release version of KEM.dll )
> I didn't retrieve the original plaintext file.
>
> Is this is a known issue ?
> Have you already heard about this kind of issue ?

Yes. This is a known issue. It's called a "bug in your software".
The most likely things to look for are uninitialized variables (in
particular, variables that are initialized in one path of an if{}
statement but not in the else{} path), and array indices that are
exceeding the limits of the array declaration.

You didn't say what variation of the Microsoft development tools you
were using, but if it's Visual Studio 6, try to get a copy of the
Visual C++ edition of NuMega's Bounds Checker. I've found it helpful
for diagnosing a variety of similar problems. (I'm not sure whether
NuMega has a Bounds Checker for VS.net, or whether the same one will
work for both VS6 and VS.net.)

Relevant Pages

  • Issue using encryption in Debug/Release mode ??
    ... I would like to ask you something regarding AES encryption, ... my library using AES works fine on our machines. ... we have encrypted files with the DEBUG version of KEM.dll ...
    (sci.crypt)
  • Re: Not enough salt for high speed server connection
    ... > they are free to be of any design the management approves. ... > information is considered quite sensitive so strength of encryption is ... How is this salt used? ... > As you would expect the machines with higher clock speeds were able to ...
    (sci.crypt)
  • Re: Active Directory Questions
    ... That is the Windows Time Service. ... the rest of the machines aren't hard coded to sync with anything and then they ... Windows encryption stuff but does plug into Outlook. ...
    (microsoft.public.platformsdk.security)
  • Re: Windows Encryption - All too easy workaround?
    ... generated file encryption key and then transparently encrypts the data, ... using this FEK, as it is being written to disk. ... Other users who attempt to use your encrypted files receive an "access denied" message. ... Windows XP - Shell/User ...
    (microsoft.public.windowsxp.security_admin)
  • Re: EFS Encryption
    ... If you failed to make copies of your certificate (and no recovery agent certificates exist), ... Remove File Encryption in Windows XP ... Without a backup of the original Encryption Certificate Key, encrypted files ...
    (microsoft.public.windowsxp.security_admin)
Loading