forum.vdsworld.com

FreezingFire · **Admin Team** Joined: 23 Jun 2002 Posts: 3508

Here are a few questions:

I know that the encryption supposedly hasn't been cracked yet, but
how secure would a registration system relying only on this encryption be?
What is the limit for the encryption key size? After a certain limit it
doesn't seem to work anymore.

Thanks...

PGWARE · **Web Host** Joined: 29 Dec 2001 Posts: 1567

a new blowfish dll was uploaded yesterday with fixes and is now fully compatible with other platforms/developmenet environments which use standard blowfish.

Blowfish encrypts at I think 64 bits, and has a maximum key length of 56 characters. I don't think blowfish has ever been broken.

If you do use blowfish as a registration method it is somewhat safe but here are the problems. You will need to decode any registration serial which was encrypted. The problem here is that you must put your encryption key within your exe code, this can be found by a cracker and he/she can make a keygenerator with it. A dummy blowfish.dll could be put into your exe's directory simulating the blowfish.dll and passing back information to your program to trick it into thinking it's the real dll file.

FreezingFire · **Admin Team** Joined: 23 Jun 2002 Posts: 3508

Thanks, PGWARE. Very Happy

I just downloaded the blowfish02.dll from the VDSWORLD site a few
minutes ago and it looks good. Wink

As you mentioned about having to put the key in the code, I too have
thought about that. But even if using plain VDS encryption, a cracker,
if they decompile the exeutable etc. will still be able to make a keygenerator
for it by looking at the code. Sad

Correct me if I'm wrong, but don't you use your own encryption method
in Alloy? Have you had any problems with that?

Rubes_sw · Posted: Sat Feb 22, 2003 6:50 pm Post subject:

How about using MD5 checksum as your key:

eg. In your program tell it to get the md5 checksum of any file and use it as the key for blowfish. That way the key is not hardcoded into your program !

Nathan

PGWARE · **Web Host** Joined: 29 Dec 2001 Posts: 1567

Alloy uses several encryption routines, twofish, blowfish and several other layered one ontop of the other.

PGWARE · **Web Host** Joined: 29 Dec 2001 Posts: 1567

The idea of md5 checksum is good but trust me a cracker with any knowledge of using a debgugger will figure that out within seconds.

Rubes_sw · Posted: Sat Feb 22, 2003 8:45 pm Post subject:

PGWARE, i have noticed you have changed your signature to:

INTEGRATE the vdsrun30/40/50.dll inside of your exe - ALLOY

from:

INTEGRATE the vdsrun30/40.dll inside of your exe - ALLOY

Do you want to spill anything? Very Happy

Have you tested VDS 5?

Nathan

PGWARE · **Web Host** Joined: 29 Dec 2001 Posts: 1567

Yeah a few months back:) But I can't give any more details other then that, sorry Sad