4 ms·
I continue to be somewhat baffled as to why malware authors don't use public key crypto for these things. Maybe commonly available libraries don't make it easy
by moyix 11y ago
I continue to be somewhat baffled as to why malware authors don't use public key crypto for these things. Maybe commonly available libraries don't make it easy enough?
Also, single DES in 2015 -- amazing.
- wyldfire 11y agoI think they just want the bar to be high enough to avoid arousing the suspicion of casual snoopers. Single DES is enough to do that.
- apetresc 11y agoBut it's not really any harder to do it properly. So many good libraries exist. You kinda have to go out of your way to use the wrong thing here.
- kjs3 11y agoPure speculation, but perhaps they thought they were making a compromise between obfuscation and performance. I've heard this argument made in similar contexts on the theory that software implementations of 1DES should be faster than software AES-128 or other alternative algorithms. In practice, however, the performance between 1DES and AES-128 is not that large, and probably not large enough to matter.