basic string encryption

Collapse
This topic is closed.
X
X
Collapse
 
  • Page of 1
  • Time
  • Show
Clear All
new posts
Previous template Next
  • j1mb0jay
    #1

    basic string encryption

    I have created some simple string encryption in C# to be able to store
    passwords in a database without them being stored in plain text.

    I have attached a encrypted passage from a book I like. Please let me
    know if it is really simple to crack.

    Regards j1mb0jay
    Tags: None
    • j1mb0jay
      #2
      Re: basic string encryption

      j1mb0jay wrote:
      I have created some simple string encryption in C# to be able to store
      passwords in a database without them being stored in plain text.
      >
      I have attached a encrypted passage from a book I like. Please let me
      know if it is really simple to crack.
      >
      Regards j1mb0jay
      Here is the encryption ......

      OzJIxucXWDbrfLH Azp+ds4yEqzoCt3 fe3A1ZFIdBHR2hi l7FGrrNb1aVc/I7lj6fGK7ahlzpQ FY4E8WEQ8YnbbEp 5EHYu5vMtqIwSWv kiYXIDX2Yb8V/IEPUBztzrG1QGdR 1Ifo8Dd2Vf7szRB KKipSlWGJwxswxR NVXKCIwiexC2Efb F8sZQLt4oNGvYMB KFJxvBZU1WG/0JnTIYZXXCUuMiQ J4U2NkMMCMApmWw iD8r9Rs7NA/lfm++uHG0NF4uJN 7ZLOcSy6goX8Iv8 LyIHjuQNeqfxR/flZlnp9z0UgBl3s PpvPcxuC2pyzHXa 0Dd6UTCwUPy/G/ESLs7wgW8zgTxYR DxidtzVifz5Qcxw Mb+ZeFrFGXHMh6W JJicg7LA2fKf7ON C+aj/C2Na6Rzbl95IO08 trS+RZZYyJSCLb3 XWGqGyqZfAv8EWy LRHigdy3L6d72ZJ XpeyzIY/OXZJZRjhr1aM+sk +iXXlRAx53oC40H JCjZhqblaNX5ZOR l6Lb2c7lZwql8sq 7LUpajUTsBtFPfJ s0Ma+kAq6QQMSXM sWfDJwZkEEwGXew +m89zGAhRiKMXyN dcRqWMhNXYdK5WW 8QXZj9a6YK1ff8x 1U1/XJoh77ocFTo0/f/vR/r8iyA19mG/FfyBJb1/F5bwUYlyerpA2oZ tlel+v9QBG5fe7t P0KdMhPCmN0858N h5C9+kAq6QQMSXO MhKs6Ard33rmGYM eqo+oa07b8Ogtv+ nbcyujWGN8DjRGH iJdqhnzn2pH3sEK wm2M4E8WEQ8Ynbf Zh4gMK3T6cczvVo bcAaLt52DheOlXA oRhskC9Q4uHi2Fv DSowZSbaQcOw9ns CqrnKJRlQYiW6NU VDsJ0GVR0zQjpKU UmYjVzx/gVbpMzXivpreAzB fxk3vgcVJwQSBKJ WW8QXZj9a6PWYNu MbEi1YC40HJCjZh qVb3KoNMq+oocJ7 CqYJbVU7vfF7MCH 4voJWW8QXZj

      9a6yHpYkmJyDsv4 mE5+esy3JSPTb95 lX5EYqzc+NXYz/UJEQuWHQetwu4yo 6RxuOc6Tr790cDL maPVS2NLgo7uOzd ZD87F6fdCZAhRiK MXyNdcdJmi9oy8F p5Hb+8u8uvV2l41 VGTEXYEto4Jv6KN +F3ebLoFjEw3mA4 LanLMddrQOD4m+S K0IWCObLoFjEw3m ABFDOfWIedv/0GabpExgHbuV/UMqJ/BzLOBPFhEPGJ20W UEjSn9BZ/pSNXxpWRvST9CZ0 yGGV1wn4mE5+esy 3JWnZsaMhzHZO2m/Nj3/KBh4EUM59Yh52/zCaH4fY+mOYQ9QH O3OsbVC6MN+rUT4 GTJOIPSe5i9qTv0 VqUjeWgu8k/1SGGIwjJIn2POBt 9oMXnrUkshcYcxn U/SgZpNFksTC1WTRe O9pW+KQL8jBqxMV Ng+V/sTEtJi29nO5WcKp fEMSvq1z6KWNM1i/kh6bK59zK6NYY3w ONrCgrKo6dnjtQJ YxEpx1pTF95IO08 trS+A+aI2JCNi+H QjpKUUmYjV09PNb cnm2eUdsjRgX+3c zwM1zt4c4JpOBYw yhPncgQGvqRiyTn DiRA1wYnnNFm4+j Y2DNzw+XQCvW/AKr5ZF3q4xmqYYj jsJ8Ypx5zGor5on 4V3jFlmnCN0582Y m+/PRuC2pyzHXa0D1X 6dHnuLTcENBMFEP bVTzjY2DNzw+XQC gkQmq6Q8g5Nlx7c oCsgge2TtZfWgl5 0o9Bmm6RMYB27XP h+zDVsSTNzK6NYY 3wON5ruCO2GSj5T PHR7Gx73FEnKjwr LJjqCmOh3ME7qvv UFZrZbXDwBB++fN ubRiCtsZLhpgN8H KB9CjLq5YniyHKm GBEDMm130VkuRmC MQwxHbwFBN8kHGn zHKjwrLJjqCmel+ v9QBG5feZxQJJNz MVbN6ghFJt5GKTs F4jAqK6EyZlc2eX/p8V++54MaWhQ0uY R4j00x8gAnS5WjV +WTkZetF7CQ
      r
      yJA/fNIt+PX0XkDHUwa YHgCYMfpOktOZ+C r/BhX9eivAsGKuVlv EF2Y/WunbkvyHa0sKsUC WMRKcdaUyPlGg2t xfXifpAKukEDElz RDEHPOp8esdfeSD tPLa0vpAfkHxux4 rz8eCFXh3G/tyMqOkcbjnOk8h6 WJJicg7LS4yJAnh TY2SNSGU/vzMxsc5y13jbH3k NSrCilAD7biR2yN GBf7dzPIxkrkr1a 6HAj5RoNrcX14n6 QCrpBAxJc6J3LtJ HtoXDhN1YzzYeCv KEMnvj82WkYlZRA 5pvNemE5X9Qyon8 HMtRUOwnQZVHTBD Er6tc+ilj0MGBVC hhfhHnzbm0YgrbG Z0kypvljs5/ENnE3QkiyapNmUf Hh49Q4CcCKmZvq6 mhAdLqS7Fty2Tce DM7filA/n2wM+I+yPM0GRYC BoGBHhdcnq6QNqG bZXpfr/UARuX3L0WhO1WLk OTbQauxutO3VwIg vNIdIeDdmFzSHEg uQX26MN+rUT4GTK/yOHxrrqtQgooH8f aD9VD6QCrpBAxJc xfLh/aqLrwb19G/wEC5QAxmZUV9HD1 d5xjQfe2X4pYcGG yQL1Di4eK+mt4DM F/GTfikC/IwasTFXJ6ukDahm 2U74QjhuwA0IgLj QckKNmGpu/4ZW/2frGfcyujWGN8Dj ea7gjthko+Ueu08 D+me9ZnFXeW6CBq GOsnip9lOWXBhOm 7kSWLb7GzEVPryP rqJTtzK6NYY3wON 5hvkRgYRqtFeyzI Y/OXZJV95IO08trS+ yeKn2U5ZcGElsN8 H/VZExjgTxYRDxidt Ku1O0mdzoLkg4iY OUHnbblyerpA2oZ tlO+EI4bsANCL78 4P4Wpl7hE4+o4vD CVRbOBPFhEPGJ20 2VwhTPA9oPpSb+u WvXAwhgMu/Z4KSLzgPV/eQPopuXvFIysSBN dpt5825tGIK2xnf qnXnvf1I5mxg7Ve T7Ja1X3kg7Ty2tL 6NKCByKGutu57I
      P
      diOsWF4XygFv6+G Pb1wnsKpgltVTne lEwsFD8vxX3kg7T y2tL5X8bXnEN6iC TT7W5Pug6tVczvV obcAaLs/rpEb1JdRg57IPdi OsWF4fJEvIH1AQI j0JnTIYZXXCdhiu 0UeVFClRL2KCFAy RxFfeSDtPLa0vrB eIwKiuhMmeamhEg 41LKn6QCrpBAxJc 1wZi8HOCuBEVkui ItgDkqAin/ky2OADfbE8pa46P 2hzveEznRzKDmdC 2EfbF8sZQF3vauz FBWQLMMCMApmWwi A9g1Xd6QNutnoV0 KGl0V2vjs/nD8hy0er0JnTIYZ XXCYWaIAh5i0AjX 3kg7Ty2tL6QH5B8 bseK8wLjQckKNmG puIyNmo4+mxM2Ng zc8Pl0AroBGf07C 1ikqKq564lD/FWNSGU/vzMxsawJQ7J2f1K aVkuiItgDkqDcNL bnTQprJ6+/dHAy5mj1lDVBzEp xwns4E8WEQ8YnbZ hdiKRTsJhJjUhlP 78zMbHzTK8u7pEq yb8cElBZC5eSzaz dd7q7aof0JnTIYZ XXCZhdiKRTsJhJX 3kg7Ty2tL49FzBV ZmiBtfjUiN7DOTu +jUhlP78zMbGsCU Oydn9SmkRC5YdB6 3C7jT9/+9H+vyKLdXTnwKj vGATWhR24FKWlFh 0ekc72jpiYpeBlv o5S/RhskC9Q4uHi+kAq 6QQMSXPrwCyeCcP KtlsmBdFrqSur2F vDSowZSbaQcOw9n sCqrs8dHsbHvcUS czvVobcAaLsyG2B 81ObxSPjUiN7DOT u+gMu/Z4KSLziTpLTmfgq/wfiYTn56zLcltkg juMrInJwwtVk0Xj vaVkuG/AYwOA+pjKjpHG45 zpMAr8NSX8pZ1Kk uCATaw4oQ5d1w40 2OY0v8tb0SFR2iz R0zQSvSA2LDXCrI A73IyAjeoIRSbeR ikycCKmZvq6mh/gVB4UNrak5qHFrl wstx8TIbYHzU5vF IUiAEw74/hlZC2EfbF8sZQM
      B
      PIvb3SFrDSsxBWA 154b8CQHxuQ9EU9 AzXO3hzgmk4PnKs hPgergN52DheOlX AocBtFPfJs0Maia DmKY2TuBOmXV0RO sa9dvHghV4dxv7c aoPyCXkPygVCimn VGSy1SWXHtygKyC B7WfOuWMME5MFDz paqGCKvNtDr3M+V p9v7J/9CMBi8HC7nzbm0Y grbGdhiu0UeVFCl tkgjuMrInJw9g1X d6QNutvikC/IwasTF6+28YJFO+ XUQ2cX8rZNIfN9P d/HB5hbRZO1l9aCXn SgTSul8Xxu6RzCs Bwip1xlA5825tGI K2xlMW0f2Q0Yc7B v5l4WsUZccyHpYk mJyDsu2oUIWODav fubLoFjEw3mAl41 VGTEXYEvVfp0ee4 tNwbZII7jKyJyc/K/UbOzQP5X5vvrhxt DReLiTe2SznEsun 9A31VTQeQ/IeliSYnIOy0F+LH V0djGgWtjvyEdwz 1XRsthZUV01xWaZ 3YCI2a1dxinHnMa ivmjrwCyeCcPKtt dYaobKpl8C0XsJC vIkD99e55jMND/927ow36tRPgZM1l N1we/o2WcpNU+YjmU8uY yo6RxuOc6TkjgYL YzYcM2eyD3YjrFh eMZOiyemf8I1Oh3 ME7qvvUETtVduPX JCZ41IZT+/MzGxkuRmCMQwxHb ywDeqfnzgZQGXew +m89zGeO5A16p/FH+u+B264FDV13M 71aG3AGi74QZYVj iDL+FkZf5jX/4DXQCOy+yhxZoZI 9Nv3mVfkRgs57aI nRf4ILKxpVwLfBq Xu1opCu9XQDXcyu jWGN8DjUPGTNxHl 1K3OrjkTPQDBtQ4 E8WEQ8YnbfbJdiS y+bPwmy060I7TI+ bIeliSYnIOywiFP qDGE1C6I75tBqJ4 ku7ueDGloUNLmEe I9NMfIAJ00a/9Q0D7rexC2EfbF8 sZQNM28OHxbJRXu 8Q9UE8zJ3HNlFtf OvcEWYNeWixTSx7 OZce3KArIIHs4E8 WEQ8Yn
      b
      TZqc1g9ij1CvRBd UTKCNF4CFGIoxfI 110eI9NMfIAJ0Wy YF0WupK6vYW8NKj BlJtpBw7D2ewKqu zx0exse9xRKra2n yMMUesmGrQbPhmb iZveEznRzKDmc4E 8WEQ8YnbQNnyn+z jQvmaW1Qgugkyr+ JoOYpjZO4E6XXs7 wKcVa5vxwSUFkLl 5LNrN13urtqh6GK XsUaus1vncxa4vl XqxmGpWUnWA/MLpgpK7TcPdm9r/I4fGuuq1Bkj+7r0 WYQsmlkLAVofbLu 4LanLMddrQOidy7 SR7aFw09PNbcnm2 eUxV3luggahjrSW fntw80fhmaZ3YCI 2a1dAhRiKMXyNdc gzxw0/Mo3THM71aG3AGi7 RZCnEXV3ZlpqQXk hQqQajmGBEDMm13 0VJfg9FBWubQH5P F+Vj27xKbiTe2Sz nEsul41VGTEXYEt d72rsxQVkC2N085 8Nh5C9CgD/JnsNOk0TSul8Xxu 6RwR91wFwjwSB2F vDSowZSbaQcOw9n sCqrs8dHsbHvcUS ahxa5cLLcfE9LgU s2+lyBLsFiTRJXp tUifY84G32gxf0G abpExgHbgDGg/vkgowZ5825tGIK2 xnrwCyeCcPKtqku CATaw4oQNjYM3PD 5dAIk4ByuiY2KHz Zj59HSso/v3qCEUm3kYpP61u K09B0+fxhDTiG1m bs/iaDmKY2TuBN9sDP iPsjzNLiTe2SznE suAhRiKMXyNddU0 Aa2Vp6iuxv5l4Ws UZccmD2uqeqcv2/lDs/wnCOeUaP8O63L0/u8Gw58tyc48IiKK ZNUfIjoXJRjhr1a M+skmKXgZb6OUv2 4k3tks5xLLjY2DN zw+XQCfywD1VZmO 4CoqrnriUP8VRBG zc4Hvj9d+kAq6QQ MSXPxQLePN4cChI 1IZT+/MzGxYatBs+GZuJn PHR7Gx73FEhW/XXmqe1T89CZ0yGG V1wllwWNkt7Jm7g pvR0GuglTYjKjpH G45zpPUInI8hl
      N
      41pTqeW9wFmOELO QZ8cwnKKqTpLTmf gq/wYV/XorwLBirvRBdUTK CNF52yNGBf7dzPJ ALp5Zcqcp3QijII RY+QLDgtqcsx12t A4CVjfOSIa/mhbKcj8cHqtDgtq csx12tA9ObEdPaK xQEtqIwSWvkiYVB vA5EnAG7EJSNXxp WRvSTNjYM3PD5dA K9b8AqvlkXemNmS UTROKET39Pp7BQM sPJ+JdnUQnHdcQf mblsaYv+t1kPzsX p90JmSSrLIWDChF stXaAiYfBqjcqPC ssmOoKZAyX6iVgv hett0mZC6ohkjxV 3luggahjr0GabpE xgHboiWYT0eiCRR HoYWm7lsNqLAaxb WsHQVNGVzZ5f+nx X7eO5A16p/FH+H9OwZ63kyJL8 RIuzvCBbzdsjRgX +3czyHYcCjMyQgI 41IZT+/MzGxLGBXWhyXbME 1wYnnNFm4+izkGf HMJyiqk6S05n4Kv 8E21QAtqjfk5c/Lvb4t32ANkuRmCM QwxHaFf16K8CwYq yCSIu/ypU2vAhRiKMXyNd eJKzTwVsIah3Kjw rLJjqCmkuRmCMQw xHafhXeMWWacI96 ghFJt5GKTTGvbqs +e3ZpSp1aBheu0W u+BxUnBBIEoaWQs BWh9su44E8WEQ8Y nbfiYTn56zLcl1k PzsXp90JmJoOYpj ZO4E40oIHIoa627 uwWJNElem1Q4E8W EQ8YnbQzXO3hzgm k4cqPCssmOoKbIe liSYnIOy4V/XorwLBirMMCMApm WwiACQHxuQ9EU9I 9ulOCYEoKe1MGmB 4AmDH5FlljIlIIt vfEmELwHU0Uyzd5 7nw3Zp8cUgtzLa7 iMRq0xoTAnwEGod sjRgX+3czz4pAvy MGrExVygbtreSpJ fOBPFhEPGJ21ybP 0t1CG5OJhVzRWZV fRLYYEQMybXfRV5 2DheOlXAoc8dHsb HvcUSX3kg7Ty2tL 4nAipmb6upofiYT n56zLclI9Nv3mVf kRirNz41
      d
      jP9QsYXl8l8Ygi8 Fh0ekc72jpgyG2B 81ObxSJ7IPdiOsW F4YYEQMybXfRW6A Rn9OwtYpCirLnWw d21doKF/CL/C8iD0JnTIYZXXCR fUIX+MY9S5js/nD8hy0eo4E8WEQ8 YnbevALJ4Jw8q2y 2ly5K3h5Bk4E8WE Q8YnbbEp5EHYu5v MGcCntxHKDfwnAi pmb6upoZhdiKRTs JhJPnKshPgergOS 5GYIxDDEdtBJj7i v8LsvaoPyCXkPyg VaCwdkCu8Dllb3K oNMq+ooLScNeQgX cA+sKCsqjp2eOzT 7W5Pug6tVlZbxBd mP1rqvv3RwMuZo9 Zhc0hxILkF91h/g+IrBUB0dM0Er0g Niw8eVPGe7xgC6o KF/CL/C8iD6QCrpBAxJc4 yEqzoCt3fej5RoN rcX14nRewkK8iQP 364ukC6DQzZIY3T znw2HkL3GKcecxq K+aHH5phsUqoEp1 MGmB4AmDH5C3xxP P+XwN88dHsbHvcU SlZbxBdmP1rqvv3 RwMuZo9XD3II3pO HBQiaDmKY2TuBPA g+LtRU5NvuINSVB OtUru3Mro1hjfA4 3J4qfZTllwYTpu5 Eli2+xsjUhlP78z MbG7FVZc2kYVQP6 6QdlIurK7NjYM3P D5dAIs4jpZidV+e 1XhiEXO02xm9CZ0 yGGV1wkQ2c9KS+0 137ow36tRPgZMku RmCMQwxHbgUILEP +RjRJRjhr1aM+sk ENnF/K2TSHyjkAo3kyXF jNhbw0qMGUm23oF Q7g8ZG8jjxtO7WO K/E41IZT+/MzGxXbrfLlxBkuH x4IVeHcb+3F95IO 08trS+++zGaZvZy zI=

        Comment

        • Marc Gravell
          #3
          Re: basic string encryption

          Here's another idea... don't store passwords... hash them (with salt)
          and store the hash. To verify, re-hash (with salt) and compare hashes.
          For example, HMACSHA[n]

          If you genuinely need encryption, consider things like
          RijndaelManaged ; don't roll your own unless you genuinely understand
          cryptography.

          http://msdn2.microsoft.com/en-us/lib...ptography.aspx

          Marc

            Comment

            • =?Utf-8?B?UGV0ZXIgQnJvbWJlcmcgW0MjIE1WUF0=?=
              #4
              RE: basic string encryption

              j1mb0jay,
              Is it realistic to expect readers to take and attempt to "crack" your custom
              encrypted text? What's the goal here? There are plenty of well-tested, best
              practices encryption protocols already built into the Framework, no need to
              reinvent the wheel and then look for accolades about it.
              -- Peter
              // Abandon all hope, ye who enter here.
              http://www.eggheadcafe.com

              unBlog: http://petesbloggerama.blogspot.com
              BlogMetaFinder: http://www.blogmetafinder.com



              "j1mb0jay" wrote:
              I have created some simple string encryption in C# to be able to store
              passwords in a database without them being stored in plain text.
              >
              I have attached a encrypted passage from a book I like. Please let me
              know if it is really simple to crack.
              >
              Regards j1mb0jay
              >

                Comment

                • j1mb0jay
                  #5
                  Re: basic string encryption

                  Marc Gravell wrote:
                  Here's another idea... don't store passwords... hash them (with salt)
                  and store the hash. To verify, re-hash (with salt) and compare hashes.
                  For example, HMACSHA[n]
                  >
                  If you genuinely need encryption, consider things like
                  RijndaelManaged ; don't roll your own unless you genuinely understand
                  cryptography.
                  >
                  http://msdn2.microsoft.com/en-us/lib...ptography.aspx
                  >
                  Marc
                  >
                  I created this using MD5 and Tripel DES with a few of my own touchs on
                  top of them. I didnt want to just store password with encryption. I
                  gussing you manged to convert the passage back to plain text?

                  Regards j1mb0jay

                    Comment

                    • j1mb0jay
                      #6
                      Re: basic string encryption

                      Peter Bromberg [C# MVP] wrote:
                      j1mb0jay,
                      Is it realistic to expect readers to take and attempt to "crack" your custom
                      encrypted text? What's the goal here? There are plenty of well-tested, best
                      practices encryption protocols already built into the Framework, no need to
                      reinvent the wheel and then look for accolades about it.
                      -- Peter
                      // Abandon all hope, ye who enter here.
                      http://www.eggheadcafe.com

                      unBlog: http://petesbloggerama.blogspot.com
                      BlogMetaFinder: http://www.blogmetafinder.com
                      >
                      >
                      >
                      "j1mb0jay" wrote:
                      >
                      >I have created some simple string encryption in C# to be able to store
                      >passwords in a database without them being stored in plain text.
                      >>
                      >I have attached a encrypted passage from a book I like. Please let me
                      >know if it is really simple to crack.
                      >>
                      >Regards j1mb0jay
                      >>
                      My point was to see if my coursework would last outside of the protected
                      walls of academia. I haven't really re-invented the wheel just added a
                      few my own touches to existing technologies such as triple DES and MD5,
                      which are built into the framework like you stated.

                      Breaking encryption is also a big part of the course that I am taking at
                      the moment.

                      Sorry if my post wasn't to taste.

                      Regards j1mb0jay

                        Comment

                        • Marc Gravell
                          #7
                          Re: basic string encryption

                          I gussing you manged to convert the passage back to plain text?
                          Nope; I didn't try... in general, this group tries to give overall
                          best-practice guidance; for the average programmer (i.e. writing
                          business code), attempting your own crypto code is a very bad idea,
                          and is likely to be insecure. Likewise storing passwords purely for
                          user-authentication purposes is usually a mistake. This was the best-
                          practice knowledge that I was trying to impart.
                          I created this using MD5 and Tripel DES
                          Again, in best-practice terms, AES and SHA [2 or higher] variants
                          would be adviseable, since both MD5 and Triple DES have weak-spots;
                          but if the exercise is to further your knowledge of enryption (rather
                          than to protect your employer's money), then fine.

                          You didn't specify that you intent was academic; ok - if you want to
                          roll encryption, and you know what you are doing - great! However, if
                          you want meaningful assessment of your efforts, then you'd do a lot
                          better on a security / encryption forum - where people have the
                          expertise and tools to tear your cipher to shreds (or not, depending
                          on how good it is ;-p). The real test is: if you post the code
                          (excluding any private keys), does it remain secure? [that is
                          rhetorical; please don't post it - just ask the question of your
                          code]. If not, it isn't secure.

                          Marc

                            Comment

                            • =?ISO-8859-1?Q?Arne_Vajh=F8j?=
                              #8
                              Re: basic string encryption

                              j1mb0jay wrote:
                              I created this using MD5 and Tripel DES with a few of my own touchs on
                              top of them. I didnt want to just store password with encryption.
                              I think you should study some cryptography.

                              One of the basic rules for cryptography is that the security
                              should rely purely on the keys and not on the secrecy of the
                              algorithm used.

                              MD5 is for hashing. 3DES is for encryption. Use of both sound
                              let us call it "exotic".

                              Arne

                                Comment

                                Previous template Next
                                Working...