Tech Support > Computers & Technology > Computer Security > Re: Encryption software integrity test
Re: Encryption software integrity test
Posted by Stephen Howard on June 21st, 2005


On Mon, 20 Jun 2005 08:48:23 -0700, Yoy G0 <yoyg0@hod.aarg.net> wrote:


MD5 Checksum 1.04

This is a small Win32 application which is able to calculate the MD5
digest (some kind of a secure checksum) of the content of any file.

You can use this tool to ensure that the content of a file wasn't
altered in any way. If e.g. someone tries to insert malicious code
into an executable file its MD5 checksum will change and you note that
something is wrong. Now with a complete HTML help system. Sourcecode
included.

http://maakus.dyndns.org/software.html

Regards,



--
Stephen Howard - Woodwind repairs & period restorations
www.shwoodwind.co.uk
Emails to: showard{whoisat}shwoodwind{dot}co{dot}uk

Posted by Steve Welsh on June 21st, 2005


MD5 comes as standard with any openssl implementation - Linux, Cygwin,
etc...

MUCH easier than repairing a jumped on bassoon, Stephen

(for the non-musicians, the joke is "What's the difference between a
bassoon and a trampoline? ..... Nobody takes their shoes off to jump on
a bassoon")

Sorry - I'll get me coat.....

Stephen Howard wrote:

Posted by Unruh on June 22nd, 2005


YOu cannot. You can check that your particular implimentation is the same
as it was (md5, tripwire, sha256,....) but to test that an encryption
product really is secure can only be done by reading the source code,
compiling against test vectors (randomly generated) and replacing the
encryption code and key generation code with known good stuff. The whole
purpose of even weak crypto is that the output is a random stream.
People have shown for example that with RSA one can encode the key pair
into the output in such a way that it is undiscoverable by anyone except
someone who knows how it was done. The only way you could discover it is by
looking at the source code, and recompiling the source code yourself on a
safe compiler.


Posted by Stephen Howard on June 22nd, 2005


On Wed, 22 Jun 2005 00:46:17 +0100, Steve Welsh <sjw@stevew.net>
wrote:

Oooh, don't get me started....




--
Stephen Howard - Woodwind repairs & period restorations
www.shwoodwind.co.uk
Emails to: showard{whoisat}shwoodwind{dot}co{dot}uk


Similar Posts