U++ framework
Do not panic. Ask here before giving up.

Home » Developing U++ » UppHub » Encrypted storage with streaming (OpenSSL, AES)
Re: Encrypted storage with streaming (OpenSSL, AES) [message #25770 is a reply to message #25767] Thu, 11 March 2010 09:12 Go to previous messageGo to previous message
koldo is currently offline  koldo
Messages: 3464
Registered: August 2008
Senior Veteran
kohait00 wrote on Wed, 10 March 2010 22:36

http://www.winzip.com/aes_info.htm
should explain that its not trivial Smile

Hello Kohait00

Thank you for the reference. I will use it.

Coming to the issue, look at this:

- If it is open source, I cannot put the key in the code

- If the program creates a key for the user, and he/she is not let to change it, a 32 bytes password seems too hard to use

- If we use a user defined key, we could include in AESStream:

---1. A SHA 256 possibility to convert user password in a 32 bytes key
---2. The means to avoid a brute force attack.
For example, if AES 256 with a weak user key can resist within and acceptable probability, for example, 1000000 random keys, AESStream could let the main program to enter, for example, 1000 keys per day and after that, AESStream would refuse any additional key.


Best regards
IƱaki
 
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Previous Topic: Protect packages - split code encryption,client and server
Next Topic: Added single and double linked lists
Goto Forum:
  


Current Time: Thu Oct 08 11:12:23 GMT+2 2026

Total time taken to generate the page: 0.07633 seconds