Re: My my, how time flies ...... it's been about "1 hour" -- anyone cracked CryptoSMS yet?

From: \ (jonez_at_norcom.ca)
Date: 08/31/05 

Date: Wed, 31 Aug 2005 12:02:06 -0600

Mark Nudelman wrote:
> On 8/27/2005 9:07 PM, Crypto@S.M.S wrote:
> > CryptoSMS runs these test vectors (and many, many more) every time
> > it initialises itself. If it fails its own self-test, it will
> > immediately announce that fact, because the user needs to know
> > their executable is corrupted. These test vectors are used
> > primarily to confirm a correctly running executable, not to satisfy
> > critics. CryptoSMS users need to be confident that the instance
> > they are running at that moment passes all known tests.
>
> Surely you don't consider this to be an adequate test to determine
> whether the executable has been deliberately modified?

Why?

> If someone
> decides to patch an executable to modify its crytographic
> functionality, they can just as easily patch out the self-tests, or
> modify the code to report success without actually running the tests.

Why?

>
> --Mark

Relevant Pages
Quantcast