Announcing freeware/donationware "KyrCrypt 0.16"

[kyrathaba]

I'm pleased to announce that I've released a piece of donationware called KyrCrypt.  It has been accepted by Softpedia and I anticipate soon to hear good news from CNET and other sites.

"Its function is to encrypt/decrypt individual files or entire directories of files using 168-bit TripleDES encryption. It offers an optional virtual keyboard for entering passwords with the mouse or touchpad, so that the actual computer keyboard doesn't have to be utilized for this purpose, thereby negating the threat of keyloggers."

As a completely self-taught programmer, I'm pleased with this first serious effort to place myself in the freeware/donationware community of contributors.

[cranioscopical]

Congratulations! Did you have a panel of beta testers?

[kyrathaba]

I have two old college-buddies who used it some while I was developing, and provided feedback.

[lanux128]

nice looking software, thanks for releasing this..

[f0dder]

Why TripleDES, though?

[kyrathaba]

Congratulations!

nice looking software, thanks for releasing this..

Thanks, cranioscopical and lanux128!

Why TripleDES, though?

To be honest Fodder, I had just learned how to implement that particular encryption, in a Programming School assignment, and was I suppose eager to put it to use.  I think that in a future update of the software I may provide the option to select from among several encryption algorithms.

[Curt]

Announcing freeware/donationware "KyrCrypt 0.16"

Congratulations, kyrathaba! 

[kyrathaba]

Thanks, Curt!

[skwire]

Good work, kyrathaba.   Some thoughts after a quick play:

1. The mix of fixed-width and variable-width menu text is somewhat distracting.
2. Decrypting a KPT file with an incorrect password still produces a "password-accepted" message box and a resulting file (though it's unusable).

[Ath]

Decrypting a KPT file with an incorrect password still produces a "password-accepted" message box and a resulting file (though it's unusable).

If it gave  a messagebox that the password is not accepted, that could be a means to hack your way into the vault...

[kyrathaba]

@skwire

Hey, thanks for taking time for a run-through! I will look into reconciling the font issue. As for the unusable "decrypted" file versus the "password accepted" message: the output will be gibberish IF the wrong password is used to decrypt (meaning NOT the same one used to encrypt). The "password accepted" message doesn't mean that the program verified the submitted PW against an encrypted copy of the PW (PW are not 'remembered', not included within the encrypted file). Rather, "Password Accepted" simply means the submitted password meets some sort of RegEx requirement. I will make this clear in my next update, and will ensure the help webpage elucidates it.

From the documentation:

Important: the password you use to encrypt is NOT stored within the encrypted file. Thus, when decrypting, the program does NOT somehow ensure that the supplied password is the same as the one that was used to encrypt. The upshot of this is that if you supply a different password to decrypt than the one that was used to encrypt, you'll get a 'decrypted' file that is 'giggerish'.

Thanks!

[Renegade]

As a completely self-taught programmer, I'm pleased with this first serious effort to place myself in the freeware/donationware community of contributors.

Congratulations on the release~!

[kyrathaba]

Gracias

[f0dder]

Why TripleDES, though?

To be honest Fodder, I had just learned how to implement that particular encryption, in a Programming School assignment, and was I suppose eager to put it to use.  I think that in a future update of the software I may provide the option to select from among several encryption algorithms.

OK, I was just wondering since DES is both slower and less secure than contemporary algorithms, and shouldn't really be used for anything than supporting legacy systems

(yes, it's slower even though it's less secure - it was designed with hardware implementation in mind, and uses operations that are slow on our general-purpose x86 processors).

Decrypting a KPT file with an incorrect password still produces a "password-accepted" message box and a resulting file (though it's unusable).

If it gave  a messagebox that the password is not accepted, that could be a means to hack your way into the vault...

Not really, no - unless very poorly designed, you'd still be no better off than brute-forcing the entire keyspace . Yeah, it does mean you'd have to store a hash of the decrypted file contents, but in practice this isn't really a security concern.

[kyrathaba]

I appreciate the suggestion.  I may well include password-validation in the next upgrade.

NEWS:  KyrCrypt 0.16 has been reviewed by SoftSea.

[kyrathaba]

Hmm, did a search and discovered that Ognilab has listed KyrCrypt.  Funny thing is, I hadn't submitted it to them...

[skwire]

Funny thing is, I hadn't submitted it to them...

Get used to it.  I've never, personally, submitted any of my applications to any site and numerous sites carry them.  *shrug*

[kyrathaba]

Fortunately, I'm not upset 

[Ath]

and numerous sites carry them

That's the price you pay when you make great stuff, like you do

[kyrathaba]

That's the price you pay when you make great stuff, like you do

Skwire does make great stuff!

[bobholm]

Kaspersky says this prog has a virus in it. Is there some way to stop this (only does it with heuristics turned on)?

[Ath]

Is there some way to stop this (only does it with heuristics turned on)?

Upload to VirusTotal and/or Jotti, and report the results to Kaspersky, so they can fix this false positive.

[kyrathaba]

Softpedia has featured another of my utilities, even though I didn't submit it.

[kyrathaba]

KyrCrypt got a nice review on the "I Love Free Software" site.

And, though I find it somewhat difficult to credit (I know sites sometimes inflate these things artificially), it showed this:

[attach]

[mouser]

not to dampen your excitement but that counter and like is for the entire site