🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: comp.lang.pascal.delphi.misc
Article #412

Re: TechTips: dealing with =really sensitive= data ...

#412
From: J French
Date: Fri, 17 Nov 2000 00:00
61 lines
3125 bytes
Since most passwords are taped under the users desk drawer, ultimately
encryption is pretty pointless.

However I must confess that when transmitting data, I am inclined to
opt for 'roll your own' as one can come up with such a whacky method
that not even the NSA could decrypt it.

Example :-
    Key :-  Gone With The Wind  
    Method :- 
         Word :-   PageNo, LineNo, WordNo, 1
         Letter :-  PageNo, LineNo, WordNo, 0
         Start Page  :-  Random
         Duplication :-  Minimized by forward use only
   Scramble :-
         Zip with password
   Post Scramble :- 
          Reverse and Interleave

Effectively this is a one time pad, and is pretty much unbreakable.

For simplicity one could use *the same EXE* as the 'many time pad'   

On Fri, 17 Nov 2000 03:58:28 +0100, "Bj�rge S�ther"
<REMOVE_bsaether@THIS_online.no> wrote:

>"Sundial Services" <info@sundialservices.com> skrev i melding
>news:3A149202.77DA@sundialservices.com...
>> You need to encrypt the data.  This means scrambling the data in such
>a
>> way that it can only be recovered if you know the 'one and only one'
>key
>> that will decrypt it.  Without that key, the information is worthless.
>
>This is one of the most paradox-al facts about computers and security:
>- Whenever I get back to a customer a few years later, the very same old
>password is still valid. They may have installed firewalls or whatever,
>but don't care about whether I get drunk and tell anyone the admin
>password so that a crook has got all he needs...
>
>128 bit encryption, my a....;-)
>
>Part from that (which isn't your fault, anyway), a well written,
>informative tech-tip !
>
>A (little) tech tip on the very same topic: Whenever a key is to be
>checked, add (if possible) a noticeable delay, or use an algoritm that
>involves a *lot* of processing. if checking 1 key value takes 1 second,
>a hacker will only be able to test for 3600 keys / hour....
>I once created a password cracker for Paradox. Checking one password at
>a time was hopelessly slow. I seem to remember being able to check 200
>passwords in one pass, this speeded up a *lot*. Anyway, it was too slow
>to crack more than 5-char pwds...;-)
>--
>Bjoerge Saether
>Consultant / Developer
>Asker, Norway
>bsaether.removethis@online.no (remove the obvious)
>
>
>
Technical Details
Message-ID: <3a1511c3.3547255@news.u-net.com>
Path: arc1-ca.pugleaf.net!unknown!not-for-mail
References: <3A149202.77DA@sundialservices.com> <k51R5.7477$cr6.183562@news1.oke.nextra.no>

Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII
X-Google-Thread: 10baee,d1f71d1754e004d6
X-Google-Attributes: gid10baee,public
X-Google-Thread: f8256,d1f71d1754e004d6
X-Google-Attributes: gidf8256,public
From: jerry@iss.u-net.com (J French)
Subject: Re: TechTips:  dealing with =really sensitive= data ...
Date: 2000/11/17
Message-ID: <3a1511c3.3547255@news.u-net.com>
X-Deja-AN: 694695399
References: <3A149202.77DA@sundialservices.com> <k51R5.7477$cr6.183562@news1.oke.nextra.no>
X-Complaints-To: news@u-net.net
X-Trace: newsr1.u-net.net 974459720 195.102.200.172 (Fri, 17 Nov 2000 11:15:20 GMT)
Reply-To: jerry@iss.u-net.com
NNTP-Posting-Date: Fri, 17 Nov 2000 11:15:20 GMT
Newsgroups: comp.lang.pascal.delphi.misc,borland.public.delphi.thirdparty-tools