Cryptographic keys, and the Free Software

2005-06-25 Thread Itay Duvdevani
Hello, list. Recently I was wondering about applications like Mozilla's Password Manager, KWalletManager and applications of this sort. I assume these applications use encryption to store my passwords on the disk. Unfortunately, the code is open, and I find this sort of protection pretty weak

Re: Cryptographic keys, and the Free Software

2005-06-25 Thread Ilya Konstantinov
Itay Duvdevani wrote: Since the source code is available to everyone, I conclude my passwords can be easily deciphered by anyone who has access to the code. As any experienced software cracker will tell you, not having the code doesn't make it all that harder to figure out the ciphering

Re: Cryptographic keys, and the Free Software

2005-06-25 Thread Orr Dunkelman
On Sat, 25 Jun 2005, Itay Duvdevani wrote: Hello, list. Recently I was wondering about applications like Mozilla's Password Manager, KWalletManager and applications of this sort. I assume these applications use encryption to store my passwords on the disk. Unfortunately, the code is open, and

Re: Cryptographic keys, and the Free Software

2005-06-25 Thread Oron Peled
On Saturday 25 June 2005 15:33, Itay Duvdevani wrote: Encryption method is known, and so is the encryption key (whether in the source code or anywhere on my hard drive). No. If you ever used any of these applications, you must have noted that they interactively ask you a master password for

Re: Cryptographic keys, and the Free Software

2005-06-25 Thread Itay Duvdevani
On 6/25/05, Orr Dunkelman [EMAIL PROTECTED] wrote: On Sat, 25 Jun 2005, Itay Duvdevani wrote: Hello, list. Recently I was wondering about applications like Mozilla's Password Manager, KWalletManager and applications of this sort. I assume these applications use encryption to store

Re: Cryptographic keys, and the Free Software

2005-06-25 Thread Itay Duvdevani
I'm getting a few replies to my question, and I'd like to clarify it a bit: 1. I'm not interested in a master-key. The idea is that everything decrypts automatically. 2. My question was more FS oriented, less cryptographic oriented, and could be rephrased as: Can I use a different constant for my

Re: Cryptographic keys, and the Free Software

2005-06-25 Thread Tzafrir Cohen
On Sat, Jun 25, 2005 at 08:30:24PM +0300, Itay Duvdevani wrote: On 6/25/05, Orr Dunkelman [EMAIL PROTECTED] wrote: On Sat, 25 Jun 2005, Itay Duvdevani wrote: Hello, list. Recently I was wondering about applications like Mozilla's Password Manager, KWalletManager and applications

Re: Cryptographic keys, and the Free Software

2005-06-25 Thread Aviram Jenik
On Saturday 25 June 2005 20:30, Itay Duvdevani wrote: Recently I was wondering about applications like Mozilla's Password Manager, KWalletManager and applications of this sort. I assume these applications use encryption to store my passwords on the disk. Unfortunately, the code

Re: Cryptographic keys, and the Free Software

2005-06-25 Thread Ilya Konstantinov
Itay Duvdevani wrote: 2. My question was more FS oriented, less cryptographic oriented, and could be rephrased as: Can I use a different constant for my key in the code I release to the public, and not be in violation of the FS principles? The GPL is perfectly okay with using a modified

Re: Cryptographic keys, and the Free Software

2005-06-25 Thread Micha Feigin
On Sat, 25 Jun 2005 20:40:29 +0300 Itay Duvdevani [EMAIL PROTECTED] wrote: I'm getting a few replies to my question, and I'd like to clarify it a bit: 1. I'm not interested in a master-key. The idea is that everything decrypts automatically. Storing your key in the binary is not safe,