srskko |
|
| mai credere a quello che dice il produttore di un software, se proprio ci tieni alla sicurezza dei tuoi file ti conviene utilizzare algoritmi accettati come standard modiale ovvero Rijndael (AES 128-256) quoto qualcosa: CITAZIONE Some quotes from the Powercrypt home page:
"It is an exclusive quite new technology developed for PowerCrypt not
used by any other competing software."
"Make sure your files safe with a 100% secure encryption algorithm.
This encryption is unbreakable (including NSA and CIA)."
"It will never be possible to extract or crack used password."
And now some from Phil Zimmermann, founder of PGP:
"Anyone who thinks they have devised an unbreakable encryption scheme
either is an incredibly rare genius or is naive and inexperienced."
"There can be no absolute security guarantees in practical
cryptographic implementations."
At best one can have only a calculated trust in the key algorithms,
message digest algorithms, and block ciphers used in encryption
implementations and this trust is based on three factors:
1.these algorithms were designed by some of the best cryptographers
in the world;
2.these algorithms have had extensive security analysis and peer
review from some of the best cryptanalysts in the unclassified world,
and this necessitates the availability of the source code;
3.the implementation is created or verified by a qualified
cryptographer.
PowerCypt does not satisfy the first two conditions nor, as far as I
know, the third either. I have no idea if its creator is a rare
genius but the use of the MD5 hash algorith (checksum) is already a
reason for doubt, because a weakness in this algorith was discovered
in 1996!! and it is no longer considered secure for anything but
low-level security requirements. |
| | |
