Some time ago, a user named Steven uncovered a weakness in the FibonaRNG cipher, leading to this other post as a reply. At that time, I did not think that FibonaRNG needed to be strengthened, but recently I have realized that it would not be very difficult to remove that weakness. The result is PolyCrypt. The “Poly” bit comes from the fact that it can not only add security, but also remove it, making it a good platform to test classic human-computable ciphers.
Category: Crypto
Cryptography, steganography, and related apps
PassLok Human encryption enhanced
It’s been a while since I have published a new human-computable cipher here, and this post is not changing that. Simply, the webpage explaining it now has a new feature that can come in handy in a real situation, where mistakes are made during encryption.
PassLok vs. Minilock – 9 years later
I confess that the development of PassLok learned a lot from a competing app called MiniLock, by Nadim Kobeissi. That app got a lot of press when it was launched 9 years ago but is now defunct. In fact, its successor is also defunct, and so is its successor’s successor. Meanwhile PassLok continues delivering various crypto-related functions and spawning new children. This post collects some of that history and tries to get at the root causes for such a diverse outcome. Morale: sometimes slower is better.
GroupEncrypt: A Tutorial
I have mentioned my new app for adding zero-knowledge encryption to file sharing services that don’t have it natively in this and this other post. Right now I have a group of alpha testers uncovering bugs, and the first one coming in is that the instructions on the app itself are rather terse. This post hopefully will help users as well as group administrators.
This is part 2 of Sharing files confidentially in 2023
Problem: A well-defined group of people formerly working at a single location used to pass along pieces of paper containing confidential information so group members could comment and expand. But after covid they find it hard to get together in one place and, since every member has a computer, they would like to be able to do it online. But confidentiality remains very important, along with integrity of the information. What can they do?
Two-Factor Nightmares
Chances are that by now many readers will have moved on to Two-Factor Authentication (2FA) for their most sensitive logins. The industry has been relentless in its support of this feature, sometimes forcing it on you for your own good. But not everything has been a field of daisies. I had a near-miss this very morning, which encouraged me to write this cautionary tale and offer some solutions you may find useful.
All my crypto apps updated
It’s a fairly small change, but one that may mean much. The versions I just pushed out include an icon on the toolbar, plus sometimes a special button, in order to download encrypted and decrypted files loaded in the box as a link. This gets around the file size restriction of the right-click and “save as…” method that was used until now, especially on Chrome. I’ve been able to load and save files over 1 GB in size. Then you can attach them to a regular email, for instance. This affects the following apps: PassLok Privacy, PassLok for Email, PassLok Universal, FusionKey, SeeOnce, and URSA.
PassLok v2.5 is here!
It’s been a while without an update, but now here’s one that may be bigger than it appears at first. PassLok has moved to version 2.5, which allows users to share their Locks with friends nearby via a QR code. The picture here contains my Lock, in case you want to communicate with me through PassLok.
My computer is compromised, now what?
Besides the surface war in the Ukraine, another war is being waged in cyberspace. Both sides have zero-day exploits that they’ve been waiting for the right moment to use and you may be affected by some of the shrapnel. Here tell you some simple ways to be prepared for a personal cyber Holocaust.