TE
TechEcho
Home24h TopNewestBestAskShowJobs
GitHubTwitter
Home

TechEcho

A tech news platform built with Next.js, providing global tech news and discussions.

GitHubTwitter

Home

HomeNewestBestAskShowJobs

Resources

HackerNews APIOriginal HackerNewsNext.js

© 2025 TechEcho. All rights reserved.

Show HN: CryptoPocket, Encrypt anything then Decrypt by providing a required key

7 pointsby mp85over 3 years ago

3 comments

woodruffwover 3 years ago
From a very quick cursory search: this is using VB&#x27;s `Rnd` to generate random &quot;keys,&quot; which is a <i>massive</i> warning sign[1]. `Rnd` is not cryptographically secure[2] and you should not use it for anything remotely close to key generation.<p>Edit: I also can&#x27;t find any evidence that this tool changes the default block mode for `RijndaelManaged`[3], which is CBC. Without any other mitigations (which I can&#x27;t find), this makes this tool vulnerable to a chosen ciphertext attack.<p>[1]: <a href="https:&#x2F;&#x2F;github.com&#x2F;miroslavpejic85&#x2F;cryptopocket&#x2F;blob&#x2F;main&#x2F;src&#x2F;Class&#x2F;RandomKeyGenerator.vb" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;miroslavpejic85&#x2F;cryptopocket&#x2F;blob&#x2F;main&#x2F;sr...</a><p>[2]: <a href="https:&#x2F;&#x2F;docs.microsoft.com&#x2F;en-us&#x2F;office&#x2F;vba&#x2F;language&#x2F;reference&#x2F;user-interface-help&#x2F;rnd-function" rel="nofollow">https:&#x2F;&#x2F;docs.microsoft.com&#x2F;en-us&#x2F;office&#x2F;vba&#x2F;language&#x2F;referen...</a><p>[3]: <a href="https:&#x2F;&#x2F;docs.microsoft.com&#x2F;en-us&#x2F;dotnet&#x2F;api&#x2F;system.security.cryptography.rijndaelmanaged.mode?view=net-6.0" rel="nofollow">https:&#x2F;&#x2F;docs.microsoft.com&#x2F;en-us&#x2F;dotnet&#x2F;api&#x2F;system.security....</a>
评论 #29864935 未加载
评论 #29801096 未加载
throwawayay02over 3 years ago
I don&#x27;t get it, what does it do?<p>I can encrypt anything and decrypt it by providing a required key with 7zip and a myriad other programs, but the Github pictures suggest to me much more.
评论 #29802097 未加载
pixxelover 3 years ago
Small detail: the file lock icon isn’t the best choice IMO. The files can be slid out, which makes the lock useless. Not the ideal association for the product.
评论 #29802204 未加载