Encryption is a passing hobby of mine, but I'm not a coder,
so take what I say with this big grain of salt.

Speaking of sale, crypt is pretty breakable.  Most modern
Linux distros use MD5 hashing.  Problem with this is that
it's a one-way hash which will be useless for your use.

Best bet is to take a look at Bruce Schneier's "Applied
Cryptography" which includes source code and examples for
about 50 different crypto algorithms.

You can also check out Bruce's web site at http://www.counterpane.com/

-Mark

Cole Tuininga wrote:
> 
> Hi folks - I have a couple of encryption related questions for the
> programmers in the group.
> 
> I'm in the process of coding an application that I need to have store
> data files.  Now, some of these data files will need to be encrypted (at
> the option of the user).  The basic implementation concept I planned to
> use was to take a static value, say "00000000" and encrypt it using the
> password as the salt.  Before I put much thought into it, I planned on
> using just the good 'ole crypt(3).  But then I got to thinking about how
> easy that was to brute force, and unless I'm mistaken, it is not
> portable between flavors of Un*x?
> 
> In any case, I was wondering if anybody would care to recommend any (C
> based) GPL'd encryption packages for this use?  Any you would recommend
> against?
> 
> Oh yeah.  Linux rules.

-- 
Mark Komarinski - Senior Systems Engineer - VA Linux Systems
(cell)  978-697-2228
(email) [EMAIL PROTECTED]
"Have one day pleasant" - Babelfish

**********************************************************
To unsubscribe from this list, send mail to
[EMAIL PROTECTED] with the following text in the
*body* (*not* the subject line) of the letter:
unsubscribe gnhlug
**********************************************************

Reply via email to