Article View: comp.lang.pascal.delphi.misc
Article #412Re: TechTips: dealing with =really sensitive= data ...
From: J French
Date: Fri, 17 Nov 2000 00:00
Date: Fri, 17 Nov 2000 00:00
61 lines
3125 bytes
3125 bytes
Since most passwords are taped under the users desk drawer, ultimately
encryption is pretty pointless.
However I must confess that when transmitting data, I am inclined to
opt for 'roll your own' as one can come up with such a whacky method
that not even the NSA could decrypt it.
Example :-
Key :- Gone With The Wind
Method :-
Word :- PageNo, LineNo, WordNo, 1
Letter :- PageNo, LineNo, WordNo, 0
Start Page :- Random
Duplication :- Minimized by forward use only
Scramble :-
Zip with password
Post Scramble :-
Reverse and Interleave
Effectively this is a one time pad, and is pretty much unbreakable.
For simplicity one could use *the same EXE* as the 'many time pad'
On Fri, 17 Nov 2000 03:58:28 +0100, "Bj�rge S�ther"
<REMOVE_bsaether@THIS_online.no> wrote:
>"Sundial Services" <info@sundialservices.com> skrev i melding
>news:3A149202.77DA@sundialservices.com...
>> You need to encrypt the data. This means scrambling the data in such
>a
>> way that it can only be recovered if you know the 'one and only one'
>key
>> that will decrypt it. Without that key, the information is worthless.
>
>This is one of the most paradox-al facts about computers and security:
>- Whenever I get back to a customer a few years later, the very same old
>password is still valid. They may have installed firewalls or whatever,
>but don't care about whether I get drunk and tell anyone the admin
>password so that a crook has got all he needs...
>
>128 bit encryption, my a....;-)
>
>Part from that (which isn't your fault, anyway), a well written,
>informative tech-tip !
>
>A (little) tech tip on the very same topic: Whenever a key is to be
>checked, add (if possible) a noticeable delay, or use an algoritm that
>involves a *lot* of processing. if checking 1 key value takes 1 second,
>a hacker will only be able to test for 3600 keys / hour....
>I once created a password cracker for Paradox. Checking one password at
>a time was hopelessly slow. I seem to remember being able to check 200
>passwords in one pass, this speeded up a *lot*. Anyway, it was too slow
>to crack more than 5-char pwds...;-)
>--
>Bjoerge Saether
>Consultant / Developer
>Asker, Norway
>bsaether.removethis@online.no (remove the obvious)
>
>
>
Technical Details
Message-ID:
<3a1511c3.3547255@news.u-net.com>Path:
arc1-ca.pugleaf.net!unknown!not-for-mailReferences:
<3A149202.77DA@sundialservices.com> <k51R5.7477$cr6.183562@news1.oke.nextra.no>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII X-Google-Thread: 10baee,d1f71d1754e004d6 X-Google-Attributes: gid10baee,public X-Google-Thread: f8256,d1f71d1754e004d6 X-Google-Attributes: gidf8256,public From: jerry@iss.u-net.com (J French) Subject: Re: TechTips: dealing with =really sensitive= data ... Date: 2000/11/17 Message-ID: <3a1511c3.3547255@news.u-net.com> X-Deja-AN: 694695399 References: <3A149202.77DA@sundialservices.com> <k51R5.7477$cr6.183562@news1.oke.nextra.no> X-Complaints-To: news@u-net.net X-Trace: newsr1.u-net.net 974459720 195.102.200.172 (Fri, 17 Nov 2000 11:15:20 GMT) Reply-To: jerry@iss.u-net.com NNTP-Posting-Date: Fri, 17 Nov 2000 11:15:20 GMT Newsgroups: comp.lang.pascal.delphi.misc,borland.public.delphi.thirdparty-tools