09stephenb Posted July 10, 2015 Share Posted July 10, 2015 How secure is:_Crypt_EncryptFile _Crypt_DecryptFileI understand the strength of encryption is mainly down to the algorithm and password, but I’m not referring to either of these, I am looking to find out how strong the code behind crypt it.I have noticed when encrypting a file, it uses a “.tmp” file while encrypting. In my experience a “.tmp” file is temporary and is deleted after use. But does this file contain any data that is related to the file being encrypted, or worse the password itself. Even though the file is deleted, it could possibly be recovered with a tool like: https://www.piriform.com/recuva.I'm not quite sure if this is a potential security threat, and if anyone could say if it is or not then that would be much appreciated. Link to comment Share on other sites More sharing options...
jvds Posted July 10, 2015 Share Posted July 10, 2015 I think it reads directly from the source file and write directly to the destination file without any temp files, but not 100% sure, you can look inside Crypt.au3 in autoit includes folder Link to comment Share on other sites More sharing options...
BrewManNH Posted July 11, 2015 Share Posted July 11, 2015 Where do you see this tmp file being created? I see plenty of deleted tmp files in my Temp folder, but none of them appear to be from autoit. If I posted any code, assume that code was written using the latest release version unless stated otherwise. Also, if it doesn't work on XP I can't help with that because I don't have access to XP, and I'm not going to.Give a programmer the correct code and he can do his work for a day. Teach a programmer to debug and he can do his work for a lifetime - by Chirag GudeHow to ask questions the smart way! I hereby grant any person the right to use any code I post, that I am the original author of, on the autoitscript.com forums, unless I've specifically stated otherwise in the code or the thread post. If you do use my code all I ask, as a courtesy, is to make note of where you got it from. Back up and restore Windows user files _Array.au3 - Modified array functions that include support for 2D arrays. - ColorChooser - An add-on for SciTE that pops up a color dialog so you can select and paste a color code into a script. - Customizable Splashscreen GUI w/Progress Bar - Create a custom "splash screen" GUI with a progress bar and custom label. - _FileGetProperty - Retrieve the properties of a file - SciTE Toolbar - A toolbar demo for use with the SciTE editor - GUIRegisterMsg demo - Demo script to show how to use the Windows messages to interact with controls and your GUI. - Latin Square password generator Link to comment Share on other sites More sharing options...
iamtheky Posted July 11, 2015 Share Posted July 11, 2015 (edited) I think this behavior but the other way, though no one really answered what it was for. It did make me want to only use it for 1kb files so successes and failures result in the same payload. Edited July 11, 2015 by boththose ,-. .--. ________ .-. .-. ,---. ,-. .-. .-. .-. |(| / /\ \ |\ /| |__ __||| | | || .-' | |/ / \ \_/ )/ (_) / /__\ \ |(\ / | )| | | `-' | | `-. | | / __ \ (_) | | | __ | (_)\/ | (_) | | .-. | | .-' | | \ |__| ) ( | | | | |)| | \ / | | | | | |)| | `--. | |) \ | | `-' |_| (_) | |\/| | `-' /( (_)/( __.' |((_)-' /(_| '-' '-' (__) (__) (_) (__) Link to comment Share on other sites More sharing options...
09stephenb Posted July 11, 2015 Author Share Posted July 11, 2015 The tmp file seems to appear in the windows temp directory as soon as the script is executed and is deleted shortly after. Link to comment Share on other sites More sharing options...
RaiNote Posted July 11, 2015 Share Posted July 11, 2015 (edited) If u want just to make something very strong against cracking decrypting etc just use AES 256bt Encryption ^-^ it's mainly i think the best also used by one of the most annoying trojan("Teslacrypt"but maybe it don't use it at all) used but here Times(1.)how long it would take to decrypt AES. Edited July 11, 2015 by RaiNote C++/AutoIt/OpenGL Easy Coder I will be Kind to you and try to help you till what you want isn't against the Forum Rules~ Link to comment Share on other sites More sharing options...
Stratus Posted November 18, 2015 Share Posted November 18, 2015 for decrypt encrypting files use this http://nabzsoftware.com/types-of-threats/ccc-file Link to comment Share on other sites More sharing options...
Stratus Posted November 18, 2015 Share Posted November 18, 2015 can also ask for help on this forum bleepingcomputer.com/forum they helped me a lot! Link to comment Share on other sites More sharing options...
jdelaney Posted November 19, 2015 Share Posted November 19, 2015 (edited) Since you will need to include the encryption key within your script, probably not too secure.Edit: didn't see that you didn't want that answer until after I posted it. Edited November 19, 2015 by jdelaney Stratus 1 IEbyXPATH-Grab IE DOM objects by XPATH IEscriptRecord-Makings of an IE script recorder ExcelFromXML-Create Excel docs without excel installed GetAllWindowControls-Output all control data on a given window. Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now