Worst encryption software ever



Hi,

sorry, I just have to post this after what I've just seen.
I'm a subscriber of a PC magazine. Its current issue included the full
version of a file encryption software as a special goodie. Normally one
would have to pay 14.99 Euro for that software. Well, the description
said that the software featured several encryption algorithms so I had a
look at it.

It turns out that one of the algorithms is the classic Caesar algorithm,
where the same value is added to every byte of the file. Then there are
two algorithms that are said to be more advanced. Well, one of them XORs
the bytes of a password (which by the way can only consist of letters
and number, no spaces or special characters) with the file, starting
over at the beginning of the password when all of its characters were used.

Finally there is an algorithm which the author has specially developed
for the software, at least he says so. He also says that for security
reasons no details are given about this algorithm. Oh, security by
obscurity. After some minutes of analyzing the output, it turned out
that this the same XOR algorithm only that every byte is additionally
XORed with 0xff.

Obviously the author has not heared of statistical analysis or a
known-plaintext-attack, when he advertises the software as ideal
solution to "secure your privacy". I mean, when I was little I also
devised such schemes for fun but I didn't go and sold them.

What angers me, is that he got several awards for his software, he makes
money with it, he lets other people believe their data is secure instead
of advising them to use state-of-the-art crypto and that even a computer
magazine now recommends this software which ridicules the term cryptography.

Christian
.



Relevant Pages

  • Re: Worst encryption software ever
    ... It turns out that one of the algorithms is the classic Caesar algorithm, ... He also says that for security ... solution to "secure your privacy". ... of advising them to use state-of-the-art crypto and that even a computer ...
    (sci.crypt)
  • Re: !! Help !! Finding an open range within a range of numbers
    ... >There was a full investigation into the best algorithm for file placing ... >in Byte magazine some significant time ago. ... >simulation of typical file sizes, ...
    (comp.lang.pascal.delphi.misc)
  • Re: !! Help !! Finding an open range within a range of numbers
    ... There was a full investigation into the best algorithm for file placing ... in Byte magazine some significant time ago. ... simulation of typical file sizes, ...
    (comp.lang.pascal.delphi.misc)
  • Re: Permutations and calculated strength in bits
    ... The FNS provides a one-to-one mapping between all ... can be properly interfaced the algorithm. ... What is important about keys is that they are secure. ... The mere fact that you think this is a competition perfectly ...
    (sci.crypt)
  • Re: Infinite One-Time Pad, is this product BS?
    ... attacker is pretty much pointless, as the attacker can reproduce it. ... So, all the file transformations and key transformations, etc., are ... If you make the algorithm extremely ... inconvenient for users in order to be secure, no one will use the secure ...
    (sci.crypt)