Your Order for encrypt: getBytes, encrypt, encode, toString Your Order for decrypt(Wrong*): getBytes, decrypt, decode, toString Two problems: As someone already mentioned you should reverse the order of operations for decryption. You are not doing that. encrypt gives you 16 bytes, encode 24 bytes, but toString gives 106 bytes. Something to do with invalid chars … Read more
You could use OpenSSL::Cipher # for more info, see http://ruby-doc.org/stdlib-1.9.3/libdoc/openssl/rdoc/OpenSSL/Cipher.html require ‘openssl’ require ‘digest/sha1’ # create the cipher for encrypting cipher = OpenSSL::Cipher::Cipher.new(“aes-256-cbc”) cipher.encrypt # you will need to store these for later, in order to decrypt your data key = Digest::SHA1.hexdigest(“yourpass”) iv = cipher.random_iv # load them into the cipher cipher.key = key cipher.iv … Read more
The block size is a property of the used cipher algorithm. For AES it is always 16 bytes. So strictly speaking, PKCS5Padding cannot be used with AES since it is defined only for a block size of 8 bytes. I assume, AES/CBC/PKCS5Padding is interpreted as AES/CBC/PKCS7Padding internally. The only difference between these padding schemes is … Read more
As it turns out, it’s not strict crypto export laws, but simply that no one got around to it yet. In fact, it’s been planned for a long time to not have to jump through these hoops. In Java 9, the ceremony will be condensed down to a one-liner: Security.setProperty(“crypto.policy”, “unlimited”);
If you’re using Win32, why don’t you simply use the built-in win32 crypto-API? Here’s a little example how it works in practice: http://www.codeproject.com/KB/security/EncryptionCryptoAPI.aspx
I’m quoting from an article about the DPAPI which is used to derive the key. This should answer most questions that you have about SecureString. And yes, SecureString has drawbacks and is not completely secure, there are ways to access to data, for example, injecting Hawkeye into the process is mentioned on MSDN as a … Read more
Fiddler performs a MITM technique. To make it work, you need to trust its Certificate: http://www.fiddler2.com/fiddler/help/httpsdecryption.asp If you don’t, it won’t decrypt anything… how can Fiddler2 debug HTTPS traffic? A: Fiddler2 relies on a “man-in-the-middle” approach to HTTPS interception. To your web browser, Fiddler2 claims to be the secure web server, and to the web … Read more
Hashing is a technique of creating semi-unique keys based on larger pieces of data. In a given hash you will eventually have “collisions” (e.g. two different pieces of data calculating to the same hash value) and when you do, you typically create a larger hash key size. obfuscation generally involves trying to remove helpful clues … Read more
aspnet_regiis must be able to bind the assembly. The normal .net binding rules apply. I get around this by creating directory called aspnet_regiis_bin in the same directory as aspnet_regiis.exe and an aspnet_regiis.exe.config file with aspnet_regiis_bin as a private path like this: <configuration> <runtime> <assemblyBinding xmlns=”urn:schemas-microsoft-com:asm.v1″> <probing privatePath=”aspnet_regiis_bin”/> </assemblyBinding> </runtime> </configuration> I then copy the assemblies … Read more
You can’t prevent the user from modifying the file. It’s their computer, so they can do whatever they want (that’s why the whole DRM issue is… difficult). Since you said you’re using the file to save an high-score, you have a couple of alternatives. Do note that as previously said no method will stop a … Read more