Re: [Security Weekly] Bad c# encryption class

[Ben Floyd <dataplex () gmail com>]

Have you tried searching for "typical" class names with file extensions .cs
in open source / public repositories (github, bitbucket, etc)?
Stackoverflow probably has a ton of fodder as well and no one ever copies
code from SO right? A lot of them will use the .NET enryption classes, but
there in lies the magic - many of them implement the requirements for those
algorithms incorrectly. Are you looking strictly for custom "crypto"
implementations or will abused vetted crypto algorithms work as well?

- dpx


On Sat, Jun 14, 2014 at 12:55 PM, Robin Wood <robin () digininja org> wrote:

> As part of a project I'm building I'm looking for a c# class where someone
> has implemented their own crypto. Don't care how good it is but it needs to
> be complicated enough that someone can't just look at it and see how it
> works.
>
> Can anyone point me at one?
>
> Robin
>
> _______________________________________________
> Pauldotcom mailing list
> Pauldotcom () mail securityweekly com
> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> Main Web Site: http://pauldotcom.com
_______________________________________________
Pauldotcom mailing list
Pauldotcom () mail securityweekly com
http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
Main Web Site: http://pauldotcom.com