4 ms·
Where's the source code? Creating a closed-source cryptosystem is generally a bad idea. https://en.wikipedia.org/wiki/Kerckhoffs%27s_principle https://en.wikip
by sarciszewski 12y ago
Where's the source code? Creating a closed-source cryptosystem is generally a bad idea.
https://en.wikipedia.org/wiki/Kerckhoffs%27s_principle https://en.wikipedia.org/wiki/Kerckhoffs%27s_principle
> You may not distribute or redistribute this software without permission.
This is a turn-off. MIT/BSD/GPL/WTFPL licensing is more likely to gain rapport with hackers than non-free software.
> The keyfile is secured by a password using PKCS #5 (PBKDF2) with a SHA512/Whirlpool based HMAC using 100000 iterations and also AES and Twofish.
This sentence makes me greatly question the implementation of this system and now I really want to see the source code before I even think of trusting it for any reason. PBKDF2 is generally performed with ONE hash function and doesn't require block ciphers at all.
- nadams 12y agoThe whois is quite interesting as well: http://whois.domaintools.com/frankhissen.de http://whois.domaintools.com/frankhissen.de If I'm reading that right - it says that 1&1 are the owners of the domain. Yikes - and it looks like he is distributing a version of Java with it.
- wongarsu 12y ago>If I'm reading that right - it says that 1&1 are the owners of the domain. German domains should be looked up directly at denic.de for best results. Owner and admin-c of the domain is Frank Hißen. 1&1 is tech-c and zone-c, but not owner.