3 ms·
Oh god. Please don't use that code for anything remotely serious. It's fine as a learning project, but please, PLEASE make that very clear in the readme.md then
by lawl 12y ago
Oh god. Please don't use that code for anything remotely serious.
It's fine as a learning project, but please, PLEASE make that very clear in the readme.md then.
from random.c
srand(time(NULL));// seed
Here goes your security. All one needs to know is when you generated your keyfile. srand() and rand() ARE NOT secure for crypto applications.
- hoers 12y ago>PLEASE make that very clear in the readme.md then. This. I wish people dabbling in crypto wouldn't be using phrases like "With this project you can be perfectly sure" or "[...]this encryption is unbreakable even in theory."
- TheJH_ 12y agoAaaactually, if you read the code, you'd see that he XORs the bytes from rand() with bytes from /dev/random. This project is horrible, but that's not one of the completely wrong parts.
- lawl 12y agoOops. You're right. I stand corrected.