I have taken over a system written in ASP and am porting it to ASP.NET - one of the requirements is that certain data fields be encrypted with "Strong" encryption (this is actully a possible compliance issue too) - The only easy to use VBScript encryption code they found online was for RC4 - the problem is that for certain applications RC4 is not considerd "Strong" enough.
So they had a brain storm - just like the DES algoritihm was strengthed into 3DES by tripple encrypting it what they did was made a function called Encrypt3RC4 which was basiclly
return value = rc4Enc(rc4Enc(rc4Enc(value to be encrypted),key),key),key)
and viola - a new "strong" encryption method has been born 3RC4
The problem is that RC4 is a stream cipher that is reversable (call rc4 on itself and you get the input value)
Well at least they didn't decide to take it one more level and make it "stronger" by making it 4RC4
D
DeepICE2
@DeepICE2
0
Reputation
1
Posts
16
Profile views
0
Followers
0
Following
Best posts made by DeepICE2
This user hasn't posted anything yet.
Latest posts made by DeepICE2
-
Triple RC4 = Strong encryption