Allaire has not revealed what algorithm they are using for the encrypt() and
decrypt() functions. However, given the "tone" of the few mentions they have
made of it, I highly suspect that it's someone's home-built XOR routine that
wouldn't stand up to analysis by a 5 year old with an abacus.
It's definitely *NOT* DES, since DES functions on 64bit data blocks, and
would therefore produce output of a number of characters divisible by 8.
(blocks less than 64bits must be padded)
Whatever this algorithm is, it produces approx. 1.5*n bytes for every n
bytes input, with some occasional garbage appended to the end. It's
definitely a stream-type cypher, and very definitely extremely weak.
Folks, the only reason this one hasn't been cracked is because no-one cares
enough yet.
Michael J. Sheldon
Internet Applications Developer
Phone: 480.699.1084
http://www.desertraven.com/
PGP Key Available on Request
-----Original Message-----
From: Chris Montgomery [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, May 16, 2000 21:05
To: [EMAIL PROTECTED]
Subject: CF and Encryption
Howdy folks,
I am looking for info on what kind of encryption CF employs. In
particular, I am wondering about single DES encryption. I've searched
the docs and support forum at Allaire's site but found no specific
mention on what algorithm CF uses for encryption.
My reason for asking: Am about to take on a project to write an app for
issuing software licenses. Developers at the company say that the
actual license generation module will be done in Java, invoking single
DES encryption to generate the license codes. I know you can employ CF
to encrypt strings and am thinking that if it uses single DES encryption
then why not just use CF for the whole thing, including the license
generation part.
Any thoughts on this or pointers where I can find out more about how CF
encryption works?
Thanks,
Chris Montgomery [EMAIL PROTECTED]
::Web development/Consulting http://www.astutia.com ::
::210-490-3249 / 888-745-7603 Fax 210-490-4692 ::
::Find a Job in San Antonio http://www.sajobnet.com::
----------------------------------------------------------------------------
--
Archives: http://www.eGroups.com/list/cf-talk
To Unsubscribe visit
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or
send a message to [EMAIL PROTECTED] with 'unsubscribe' in
the body.
------------------------------------------------------------------------------
Archives: http://www.eGroups.com/list/cf-talk
To Unsubscribe visit
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or send a
message to [EMAIL PROTECTED] with 'unsubscribe' in the body.
