Slashdot Mirror


User: mes0n

mes0n's activity in the archive.

Stories
0
Comments
1
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 1

  1. SuperLameEncryption on Elegant Email Encryption for Everyone? · · Score: 1

    Use my SuperLameEncryption page at http://users.interact.net.au/~cblj/slen.htm

    I still have to make the site look nice and explain how you use it, but
    basically it goes like this.

    You want to send email to your friends and/but your work has a filter
    blocking messages with keywords, or your boss might be intercepting your
    mails for whatever reason, or you just think it would be cool to encrypt
    your mails. Well, what you do is this:

    1. Utilise SuperLame key creation/distribution. Get together with your
    friend in the park and agree on a key-phrase that you will both use to
    encipher and decipher your communications. In our example, we'll pretend
    that we have agreed on the key-prhase "toomanysecrets".

    2. The sender points their browser at http://users.interact.net.au/~cblj/
    enters the key-phrase in the 'key-phrase' field, then enters their plaintext
    message in the 'plaintext/ciphertext' field, and hits the 'encipher' button.

    3. The sender then copies the entire ciphertext which is now in the
    'plaintext/ciphertext' field as a result of step 2, pastes it into their
    email, and sends the message -- too easy.

    4. The recipient points their browser at
    http://users.interact.net.au/~cblj/, copies the ciphertext message into the
    'plaintext/ciphertext' field, enters the key-phrase agreed upon in step 1
    into the 'key-phrase' field, and hits the 'decipher' button -- revealing
    the original plaintext message.

    The encryption algorithm used means that it would be pretty easy for anyone
    with a little crypto knowledge to decipher ciphertexts generated by it
    (hence the 'SuperLame' component of my product name). The longer the
    keyphrase the harder the decipherment, and the more often you change keys
    the more difficult you make life for eavesdroppers.

    Obviously bearing this stuff in mind, I don't recommend using it for
    critical communications. Can you imagine the news headlines like "CIA
    Arrests Terrorists after decoding their SuperLameENcrypted Communications"?

    On the plus side however, it will get your emails past key word filters, and
    it would make your boss go to a lot of trouble to read your communications.
    Maybe one day I'll use a stronger encryption algorithm like Rijndael.

    Notes:
    Because the SuperLameENcryption application is executed using clientside
    scripting technologies there is no transmission of plaintext data to a
    webserver, and thus no possibility of interception there. Also, the page
    could be copied and run locally without any problems, negating the need to
    connect to the website to process messages.

    Obviously you can't encrypt email attachments with this tool.