Cryptosuite Wishlist

[rodsoto]

Well there's one for Process Guard, haven't seen one for CS, so i'll start one :)


The ability to put in a host in chat as well as an IP address. I plan to have cryptosuite.anti-trojan-security.com as a server for chatting. Its already pointing to my IP just need CS to be able to connect to it.

[Jason_R0]

Doh! :)

Thanks for reminding me of this one, I might release a small fix with this in if I find some other things to add. :)

-Jason-

[Pilli]

Encrypted file sharing:
When acting as a CryptoSuite server - Create a CS file sharing folder on your pc with the ability to place ordinary files ie. non encrypted in that folder so that other CryptoSuite users can see them and from which they can copy to their PC - With the encryption - decryption taking place on the fly.

As each user can be a server and client simultaneously (using two instances of CS) users could share files very easily.

[rodsoto]

The ability to widen the nick window in chat. Its a fixed width, and some people have massive nicknames hehe

[Jooske]

Yes but Rod long names like RodSotoPerthAustraliaSubwayDeliveryService should not be allowed in the first place.

But i would love the ability to add something descriptive in our username only visible when rightclicked on it, so clicking on RodSoto logged in shows us the SubwayDeliveryService or anti-trojan-security.com, while the Host will have some options more like IP, kicking or banning,
and something to show person is away from system, asleep, phone, occupied, anything,
and a private message option somehow: either a separate popup to the person or for both only the writer and the person intended visible in the chat window.

And voice, some time! imagine: would enable encrypted internet pc-2-pc phone via the magic CryptoSuite chat! (would probably need buddies online detection?)

[Jason_R0]

I have added the host resolving (so you can use HOSTNAMES now like cryptoserver.com or whatever) and also chat nickname resizing, on to other features! :)

-Jason-

[rodsoto]

Thats brilliant Jason! Thanks for that! Can't wait for that release :)

All the best
Rod

[TheQuest]

Hi, Jason

This is Jooske Idea, But would Really Help me, among Other's

{QUOTE-> Maybe we can ever add the speech / dictation functionallity into it. <-QUOTE}

Please, Please.
TheQuest 8)

[Jooske]

The opposite is much easier: having an msagent reading your chat by highlighting the parts so it is on the clipboard, read by the agent. (Those things read every text you tell them to read and they keep talking and talking)
Thinking about speech technology and dictation coming standard with XP.
And half an eye to the scripting with TDS of course.

Imagine now the opposite: you talk, it writes in the chat. Possible.
The Speechapi4 SDK (40mb download) includes that whole dictation part to for those who did not discover that yet!. Suppose the SAPI5 has the same and that is on XP standard.
So you might have the software already in your hands, now doing it in a working way.
Fortunately your voice is not transmitted over internet to the other chatters, for that could create some confusion.
But a voice option to be able to speak (conference mode) could be really something, especially if writing can be switched on and off in that mode.
Filesharing, of course; A shares a brilliant idea file/image with the other chatters and get immediate comment. Great!
Can think of more options for our virtual office ;D

[docfleetwood]

I still wish cryptosuite had the option to encrypt files in a folder individually with their original filenames - simply replacing whatever 3 letter extension with the cse extension. I do not like having to compress many files into one single archive in most situations. I would rather deal with each file as a seperate issue. Additionally, I think it is a rather dangerous "all your eggs in one basket" sorta thing. If something should ever happen to that one archive then many many important files could be lost. And since these are the files one chose to encrypt in the first place, they are obviously important. Please add the ability to keep files individual when you encrypt a whole folder in one shot.

[Jason_R0]

Hi DocFleetWood. It is a slightly unusual request but I might be able to accomodate that with a command line option when I add command line parsing to CryptoSuite. Since it would be mostly an unused feature for the majority of people I don't know if its too wise putting it into the actual GUI as an option, but having it on the commandline would be just as easy.

Something like this :-
cryptosuite -e -singlefiles c:\folder_to_encrypt

What do you think of that?

-Jason-

[TheQuest]

Hi, Jooske

{QUOTE-> Imagine now the opposite: you talk, it writes in the chat. Possible. <-QUOTE}

That what I thought you ment I your priviest post, Jooske. [I am easily confused ;D]


You speek in to a microphone, and the text is wrote in the chat, that what I need, it is because I can only type slow because of my hands.

As I said before my brain is sharp[ish] but the body is out of syc. [ ;D ]

TheQuest 8)

[Jooske]

Yes, it is what i mean on the wishlist to be able to do that in the CryptoSuite chat too.

It's a build-in function in XP, talk in your mic and it types in Word or maybe in other open documents as well to get your text there, not sure if it enables voice commanded browsing etc too standard, maybe with some additional settings..?
XP uses the SAPI5 speech technology for that.
I'm not sure what you would get displayed when you sing a song though :)
Did you see in the TDS forum in the sticky thread for demo/testfiles the one i point to a download/sample site for that with singing computer, using that same technology?
Now the next step is trying to convince that technology the CryptoSuite chat is an input field to write in too.

Long ago i started with the SAPI4 SDK which has that dictation part as well and i got my computer answering on "tell me the time" "what can i say" "send email" "open browser" etc but dictation was more complicated as i have a dutch system and that software is more used to english sounds. Learned to refine my pronounciation though.
The SAPI5 with XP (you can install that on other windows versions too) is much easier to speak with, but i did not practice myself if it takes dictation in every kind of form, notepad, whatever you might have to click first with the mouse.
Could be for CryptoSuite it gives an extra problem: the input field should be limited to some 250/300 characters as we would lose trail if more people give long comments at a time! but for shorter lines it could be perfect;
another option would be voice heard over internet by the other chatters and no text displayed at all, then we have our internet conferencing, all encrypted :)

[docfleetwood]

{QUOTE->
Something like this :-
cryptosuite -e -singlefiles c:\folder_to_encrypt

What do you think of that?

-Jason- <-QUOTE}


Hello Jason,

That would be great IF you could then add a right click shell extension where I could select a folder in windows explorer and right click and cause CS to do the above using the same folder as the default and secure deleting the original files. I guess the secure delete part would be an additional command to be added? Then when you double click a cse file within the folder a password box pops up, you enter the password and you are off and running with that particular file or you could right click the folder and undo the encrypton of each file. Effectively, I suppose it is the same thing CS does now but on a folder level instead of a single archive file level. I guess I just do not understand the need to archive all the files into one encrypted file, especially if you are encrypting data you use often - but only certain files on certain days - i.e. word documents. On the other hand, if you wanted to store something encrypted as a backup or for an extended period then I understand fully why you would want to combine all the files into one archive and encrypt it. Perhaps I misunderstand the purpose or abilities of CS, but keeping the files separate seems like a common enough need to me. But, obviously, if I'm the only one then it doesn't need to be a gui option.

Thanks for the consideration!

[Fraha]

My wish for the chat option in CS is a sound when someone you selected (1 or more people in the buddy list) has written something on the server! Or is coming on line (with another sound)

Also, when talking to one person in chat, Show some text that the other party is typing in a reply! I love that function in Messenger.

FTP possibilities are also very welcome here. So I can send files to people on my chatserver!

Thanks

Frans

[Khaine]

I would really like the ability to create encrypted partitions or containers, I realise that their is currently lots of software that does this function, however I feel that diamondcs could do it better.

I think that implementing the serpant algorithm and using SHA-2 for password hashing (I had a quick look at the cryptosuit website, and I couldn't see if this was already implemented or not)

[Snook]

The ability to secure-delete the contents of the desktop recycle bin via context menu.

[Khaine]

{QUOTE-> The ability to secure-delete the contents of the desktop recycle bin via context menu. <-QUOTE}

Actually that reminds me of a very cool function PGP has that I wish eraser would incorperate, I suppose any secure deletion progam too. It is Automatically wipe on delete, so that if you delete files using windows (either via the recycle bin or shift-delete) it will securely erase the files.

[Khaine]

Another feature that bestcrypt has which is really cool is the ability to encrypt your pagefile. If cryptosuite could allow you to encrypt both your pagefile and the hybernation storage file that would be really cool

[Snook]

Any future plans for email encryption...?

[Jason_R0]

Yes there is plans for something like email encryption, but I am not sure yet which way it will be going. If I did do it, it would probably have to be compatible with PGP's current method I think just to encourage the use of it.

[Snook]

10-4.

[rerun2]

Inspired by this recent thread about password strength http://www.wilderssecurity.com/showthread.php?t=28532.

Maybe it would be beneficial to have a built-in utility to test your password's entropy. I know there are sites that do this or you can read more about entropy and then generate your password from this knowledge. But some may not wish to put their password in a website just to test entropy. Especially when they might be using this same password to protect confidential and important data later.

[gkweb]

{QUOTE->
I would really like the ability to create encrypted partitions or containers, I realise that their is currently lots of software that does this function, however I feel that diamondcs could do it better.

I think that implementing the serpant algorithm and using SHA-2 for password hashing (I had a quick look at the cryptosuit website, and I couldn't see if this was already implemented or not)
<-QUOTE}

I am really waiting this feature, it would be really great if it could be done in a stable way. There is other softwares to do it, either giving BSOD or being less secured than the Cryptosuite implementation (AES + TwoFish, CBC mode, compression, etc...).

It is easy and fast, convenient. Just double click on your file container, enter your password, and it is mounted as a real volume in the Windows explorer.
You can copy your files directly on this volume, and when you dismount it, only remains your encrypted container which is unreadable.

It is far more convenient while daily using some files/folders than to decrypt/encrypt all the files each time.

gkweb.

[Infinity]

I second the encrypted partitions options. this would rock this baby and should be a major plus point against all the other players around. also a hide function where you can hide files/exe's.

[Dazed_and_Confused]

You might find this picky, but I sure would appreciate some of the common shortcuts be placed in the file explorer pane that are typically found in Windows Explorer, like "My Computer", "My Documents", etc. It takes me forever to navigate from the "C:/" root directory all the way down to the "My Documents" directory, and then to the folder I'm aiming for. Just a thought to save time...

[Dazed_and_Confused]

...In addition, in the Encrypt pane where the files are listed that you are going to add to an archive, it would be nice to add a "Clear" button. Unless I'm missing something, the only way to clear files from this pane is to select them all and press delete.

[Dazed_and_Confused]

I'm on a roll now ;D ....Regarding the process of adding files to a secure archive...It would be nice to have an option where the user could select to have CS secure delete the individual files from the hard drive after they are added to a secure archive. The user now has to do this in two steps - add them to archive, and then manually secure delete from hard drive.

[Rui]

As CryptoSuite is able to checksum files, why not extend this ability and making it capable of verifying file integrity using the different algorithms already used for checksumming, and not only CRC32 or MD5 - these ones commonly used in file integrity verification?
Regards
Rui

[Andreas1]

here's something that would be of a huge help for me, but I don't really know how much others will benefit from it:

make it run in wine (http://winehq.org/).
I hate it when I can't use it without a reboot. ;)

Cheers,
Andreas

(Actually, I'm not even sure how much this is a question of tweaking CS or rather wine itself. I've tried a lot with it but to no avail. Maybe someone can at least have a look at it/them both.)

[Pilli]

Hi Rui, Not sure what you mean exactly as CS already does give you the ability to check others apart from CRC32 & MD5:

The file <C:\Documents and Settings\Utils\procexp.exe> has the following Checksum(s)

ADLER32 - FA2ED59A
CRC32 - F6E8D18D
HAVAL128 - 4A5A006AE2DF1D99E2A49FFB5E000139
HAVAL256 - 0E3A7CC593507E961AE820D1155206B3051388F0959D56D37A4D0F3F1BAB4C18
MD2 - 2CAF30A910FDAAFC5FDAECD42754C196
MD4 - FA74211AB7650056ADE921E7409E5839
MD5 - F373EB00925D44B88244FC70E1926C0A
SHA-160 - 61C35DDA9D1EF955F58E7EEB3DF7B9C9A4B4388A
SHA-256 - 5B3B49DE5F95A8E8E33A2EB9119BA604F9D99C5A723DFA7357EB4C39417AC49A
SHA-384 - CFFE79D2829D0ADC7892EAB9C4AF83882451AF9E95696D8CF48189697B334EB56749674B07ADACC4F4579C136B18FA6A
SHA-512 - F77E026B473FA6C246D96F741DB7E591CAA2CF6FD03D5E04252552CBF23D257C1E9DC92AB3F89022C4FDDC0C02B2507FB13D83925AB1A0F18D8182783AD6E776
TIGER - 4737BEC5164547B7A71232087D1E8E8FB39D541AF85D782E

[Rui]

{QUOTE-> Hi Rui, Not sure what you mean exactly as CS already does give you the ability to check others apart from CRC32 & MD5 (...) <-QUOTE}

Hi Pilli

I am afraid my request was not adequately clear.
I know that CS provides the user with the ability to check files using several algorithms. Now, suppose you want to check two files with same name and extension, to see if they are different. As far as I understand it (please correct me if I am wrong), you would calculate first checksums for one file, and then for the other, and finally you would VISUALLY check both files checksums, in order to see whether they are identical or not. What I mean is that CS should have a routine providing the user with the ability to AUTOMATICALLY compare files/folders, one against the other, using the several algorithms already used.
So, my wishlist for CS is:
(1) Ability to automatically compare two apparently identical files;
(2) Ability to automatically saving checksum data using an apppropriate extension, and providing the user the ability to check a file against its checksum, to see if the file is corrupted, tampered or altered in some other way - also useful when you want to check data was adequately written to the CD-R you have just burned ;
(3) Ability to automatically compare files/folders at different moments, thus providing the user a simple way of verifying system files integrity, For instance, CS should provide the user with the ability of calculating individual checksums for all files in "My Documents" folder, storing this data at a convenient location, and one week later compare the changes occurred in the files of the same folder, informing the user of what files in that folder were deleted, what files are new, and what files were modified.
IMHO this would give CS an interesting added value.
Hope I was clear this time!
Best regards
Rui

[Pilli]

Understood Rui, Thanks for the clarification :)

[Rui]

You're welcome, Phili!

[AJohn]

In addition to Rui's request, it would be great to be able to drag any two files into CS for automatic comparison.

[Digger]

Over the past couple of years have been reading where the AES candidate
"Serpent" Cipher is more secure than Rijndael. A sampling:

"Many cryptographers agree that Twofish or Serpent where far superior in terms of security than Rijndael. Also, concider the fact that there is only 3-rounds of security margin to the 128bit and 5-rounds security margin to 256bit AES, since best known attacks currently breaks 7/10 and 9/14 rounds of AES. For example, the best attack only breaks 8/16 rounds of Twofish and 10/32 rounds of Serpent ciphers."

Also check out the CryptoSyetem Site: http://www.cryptosystem.net/aes/

Have you considered using Serpent down line if Rijndael shows weaknesses?

[Jason_R0]

{QUOTE-> Over the past couple of years have been reading where the AES candidate
"Serpent" Cipher is more secure than Rijndael. A sampling:

"Many cryptographers agree that Twofish or Serpent where far superior in terms of security than Rijndael. Also, concider the fact that there is only 3-rounds of security margin to the 128bit and 5-rounds security margin to 256bit AES, since best known attacks currently breaks 7/10 and 9/14 rounds of AES. For example, the best attack only breaks 8/16 rounds of Twofish and 10/32 rounds of Serpent ciphers."

Also check out the CryptoSyetem Site: http://www.cryptosystem.net/aes/

Have you considered using Serpent down line if Rijndael shows weaknesses? <-QUOTE}

I was considering Serpent back when it started but ultimately made the decision to use TwoFish since it was a bit faster and pretty much as secure as Serpent. With CryptoSuite you have the luxury of not needing to worry so much if AES/Rijndael is ever broken because you will have another algorithm there protecting your data. Incase you are unaware, CryptoSuite uses 2 encryption algorithms in cascade to protect your data, not just one like other programs.

[Digger]

{QUOTE-> I was considering Serpent back when it started but ultimately made the decision to use TwoFish since it was a bit faster and pretty much as secure as Serpent. With CryptoSuite you have the luxury of not needing to worry so much if AES/Rijndael is ever broken because you will have another algorithm there protecting your data. Incase you are unaware, CryptoSuite uses 2 encryption algorithms in cascade to protect your data, not just one like other programs. <-QUOTE}


Am aware CryptoSuite uses two algorithms, which is a main reason for purchasing the Program. In the past my choice has always been toward Twofish. The question is if Rijndael is ever compromised, would you consider using Serpent as the 2nd cypher in CryptoSuite?

[Jason_R0]

{QUOTE-> Am aware CryptoSuite uses two algorithms, which is a main reason for purchasing the Program. In the past my choice has always been toward Twofish. The question is if Rijndael is ever compromised, would you consider using Serpent as the 2nd cypher in CryptoSuite? <-QUOTE}

Yes Serpent would be the next one in line most certainly. :)

[BourgePD]

Suggested additional features:

1. Secure password generator with selectable: number of passwords to generate, password length, characters and ability to save generated list. Feature would be convenient for generating one-time pads.
2. Create encrypted zip files
3. Merge file function (steganography).
4. Simple SMTP e-mailer as in TDS-3
5. Bind encrypted files to drive/volume names
6. Lock/unlock directories
7. Selectable compression rate
8. Force complex password profiles
9. Lock/unlock drive directories
10. View password when decrypting self-extracting files

Example of one-time pad generation:

Base characters generating a pad of 10 passwords:

abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ,./<>?;':"[]\{}|`1234567890-=~!@#$%^&*()_+

The passwords:

0: K7;s18I/f?d>Tsd@-u7v!#bg3|a_4``bgw^-4iBm5+6WxZVxW$Xw3w#bdD/fkm!MKv@F)d@3P?3.cQ{&oF+X|x:%Gc@4/lg
1: '&\QEa@1r_m<~1<DC(xNe~L*p^j.xCF@S_|<Z%0p(V#QlzgEe2:e0|iB*uT7wF!qcM"B8scyPw_b/EQ*r)[l)p}#F5=ze?z
2: e`2c.d[,#-.nTl,4{e1|@[U/3pC/s/(Z!FpZPp.T|rb-,pTWDE6H:oL("n;|zAimD&Rp^yX7jFwzS}V<9bUK[6&kj5|e1u?
3: *y*kbiQZSu(cA)G^KWP@6z+/rLP|dHacH@ksNa&fM_<FQDv*3(y'25yrG>A!~K-}p'UQ&`c0Sk,vgyl:))Rc[Yo)]ZE>O?W
4: &'tVxCJehTed&ljE+5'Hal@E>t8KNBDK#T/~>RgRJscb0A"2~KD>q^uWh*4od2EK:#+'q/$6]HbFL&w=aO?n2i#Y0=Xix7(
5: clU^rx+g;H'7'Bs]|eaNC>7Gx[8_XelhMpHrx4y\'p:!LB-E*,]#\uT):3]6?WlbtWa4=Dp*.v_Z&EKf4&RQy41t2|zJC$#
6: ["5P_Ij'eAjq~MQay(W73CdKV{VH$O?yM<UhMU_~r[{`:2@'8#U;5NPPE]V'H>n}pNf0=yRt<}DfR3)=nX)B|.fln(R5Nzq
7: PFm1cOa]xUT]/]hs_qI*'e+>~S$YN<2WK!z2TUNM2ol!:KnqeHVB$XDMA8(ymkmlov+oO]Wh{-~KYVw{3":5=oNTu{;.OaI
8: gfIb%/=;2A0+jW"R"YYcg"t>Q{[S47dv<m4;#hsMk~P#z6w3kU+T|^vM<*ys>]4CejP{-,m!Xf)d,XR@xSYQo5c38PiYnQU
9: d)J#{LgFE):3^a0xPL+s#|`]@"5|C#RC]+jp:gl5Of;ptg4E0cBVL:5UHF02M1+cB%k7oB\]ogrXZ,InE3CVkcKkg]"90(D

:lurking:

[NOD32 user]

Have you considered support for steganography?
ie. the hiding of encrypted data in something aparently benign like a picture or wave file.

[Notok]

{QUOTE-> It would be v.nice to have on the fly intercepts to file access to allow files to remain encrypted on disk and be accessed transparently as if they hadn't been touched. If that is what you are referring to then it would be good to be able to specify whitelists and blacklists so that some programs (like the application) would always go via the decrypt route and other programs would just get the encrypted file (backups etc) <-QUOTE} I would love to see this, along with a password manager/generator/notepad. :)

[Infinity]

Why would you want a notepad for if I may know?

[gottadoit]

1. Have an option to transparently compress the data before it is encrypted so that frequency analysis cannot be performed on the 2nd layer of encryption (if the first one is cracked)

2. Fix the bug in the Chat client where people are still shown as being connected after they have lost their connection to the server
(maybe a periodic poll to the server for a connected user count and if it doesn't match then sync again)

3. In the chat client allow mutiple lines of text to be sent

alternately when a multiple line "paste" is performed accept each line and iterate so that all of the lines are sent

[TylerGred]

I'd like to be able to drag and drop files or folders into CryptoSuite for encryption rather than using the tree.

[r00t]

I'd like to see CS use encrypted containers :).

[Mr.Blaze]

hey jason you ever chexcked out invisiable secrets its phat program it give you some ideals to expand on

for me my wish would be a crpto hd lock and burner for cd's and dvd's

[Infinity]

Been using Inv.Secr. for a year now and I truely find it's an amazing program.

Hi Blaze :)

[Mr.Blaze]

:D hi

[yogix]

{QUOTE-> 1. Have an option to transparently compress the data before it is encrypted so that frequency analysis cannot be performed on the 2nd layer of encryption (if the first one is cracked)

2. Fix the bug in the Chat client where people are still shown as being connected after they have lost their connection to the server
(maybe a periodic poll to the server for a connected user count and if it doesn't match then sync again)

3. In the chat client allow mutiple lines of text to be sent

alternately when a multiple line "paste" is performed accept each line and iterate so that all of the lines are sent
<-QUOTE}

I second that.
Plus, I'd like some ability to exchange files securely with a chat partner.
For now, a simple send/receive mechanism would make me quite happy.
Also, is there a way to copy (parts of) the chat buffer to the clipboard?
Thanks for consideration!

[JimF.name]

This post was about what I want to do. I'd like to store just one checksum for each file in a database indexed on the checksum with volume, share, workstation, username and date/time information. As new files are added to the database, the server would respond with any other filenames/paths/user and date that have had the same checksum. Then the filename could be changed when you copy or burn it to CD-R and the checksum would still indicate a match.

{QUOTE-> Hi Pilli

I am afraid my request was not adequately clear.
I know that CS provides the user with the ability to check files using several algorithms. Now, suppose you want to check two files with same name and extension, to see if they are different. As far as I understand it (please correct me if I am wrong), you would calculate first checksums for one file, and then for the other, and finally you would VISUALLY check both files checksums, in order to see whether they are identical or not. What I mean is that CS should have a routine providing the user with the ability to AUTOMATICALLY compare files/folders, one against the other, using the several algorithms already used.
So, my wishlist for CS is:
(1) Ability to automatically compare two apparently identical files;
(2) Ability to automatically saving checksum data using an apppropriate extension, and providing the user the ability to check a file against its checksum, to see if the file is corrupted, tampered or altered in some other way - also useful when you want to check data was adequately written to the CD-R you have just burned ;
(3) Ability to automatically compare files/folders at different moments, thus providing the user a simple way of verifying system files integrity, For instance, CS should provide the user with the ability of calculating individual checksums for all files in "My Documents" folder, storing this data at a convenient location, and one week later compare the changes occurred in the files of the same folder, informing the user of what files in that folder were deleted, what files are new, and what files were modified.
IMHO this would give CS an interesting added value.
Hope I was clear this time!
Best regards
Rui <-QUOTE}

[Blackspear]

{QUOTE-> Suggested additional features:

1. Secure password generator with selectable: number of passwords to generate, password length, characters and ability to save generated list. Feature would be convenient for generating one-time pads. <-QUOTE}I'll second this one.

Cheers ;D

[tuatara]

Encryption of removeable media (as a container / mount a new disk)
which can contain the software you need to de-crypt it on another system.
Like encryption of USB memory, CD-RW DVD-RW etc.
OR split up your USB in normal memory space and encrypted memory space
(like G: and H: drive on one USB-stick)

[tuatara]

If you backup data on a remote FTP server and want to have this data encrypted,
it is often very usefull not the store the whole backup as one (1) file.
1) Uploading takes normally much more time then downloading.
2) This makes a restore of 1 directory within such file very slow.
(you have to download the whole container).

So it would be nice if you want to backup a logical disk lets say f:
with all it's directories to the ftp-server,
That you had an option to make seperate files for each directory of f:
filename = directoryname
and THEN upload them to a ftp server.

This feature is also usefull with other 'slow' connections.
And this also enables you to upload in a 'incremental' way.

(upload after that only the changed files).

hope you like the idea, because remote backups become more and more important!

[Tony H]

Seems very quite in here.

I was wondering if there is a new version in the off'ing.

I am still keen to see an encrypted e-mail feature in CS; it's ironic, but I suppose these days, this would be seen as an undesirable security feature, but if its done in the context of CS it would be acceptable, I would have thought. If not then some means to say 'hello, I called you today and you were not on line' would be good.

Hello to old friends.

T.

[Genady Prishnikov]

Make the source code available.

[CypherGary]

I know something close has been suggested several times, but pendrives have become affordable in pretty large sizes. Is it possible for CS to initally wipe a drive with random characters, and act as a driver. So anything on the drive is not only encrypted, but invisable unless CS is used to access it.

You can not break the encryption of a file when you do not know where it ends and starts, or if there are files, or how many. (Plausible denyability)

Gary

[CypherGary]

After I posted the previous message, I read up on TrueCrypt.
The part I like on it is not being able to see if there are files there.
I can be ordered to give up the passwords to open CS files, but not with files that can not be seen.

I would like CS to provide this, but I guess Jason is right about it not being high priority to provide something that is already out there.

I stand corrected.

Gary

[buffet]

is it going for Jason to integrate/develop his own codes for video/voice chat, isn't it ? Hope it will.

thx.

[rodsoto]

I wonder if CS has had any updates? I don't think the IP/Hostname resolution is working for chat....

Also, as mentioned before, transmitting of files encrypted. Could always do a CSE, and MSN Messenger it. Just too many processes. A cool drag and drop to the persons nickname in chat will send it to them. Drag and drop into main window, allows for all there to get the file.

Basic IRC functions for chat. Admin/Operators, bans, channels, passworded for chat, but another password for channel.

mIRC plugin for encryption algorithms in IRC. Would be good to have a Cryptosuite Script for it.

Web Browser, the ability to browse crypt://www.server.com will allow for viewing like HTTPS, however algorithms used in cryptosuite, and password protected, and to download the files encrypted too automatically in CSE format... Could say 'enter password for opening downloaded CSE file'. The server would then encrypt to CSE - password it, and allow for download...many options, just thinking out loud :D

MSN Messenger/Miranda/Yahoo plugin (if possible??) Encrypts files/chat via those programs.

TrueCrypt like application. Ability to format a hard drive encrypted, even if hidden, outer/inner layer (two passwords for each). Must load cryptosuite to map the drive. Allows for normal explorer access that way.

Voice/Video of Chat *yay*

Chat server listing - possible encrypted HTM listing on ghostsecurity.com that people share themselves, for public passworded access - again for more security, you can have individual channel passwords.

Shared CPU processing of user files for people in chat - like SETI @ home. Plugins for any function, brute forcing forgotten passwords in ZIP/RAR files etc... obviously not allowed for CSE files *grin*

Download files from IE/FireFox which convert to CSE/EXE, May not be secure to download, but with a 'Download with Cryptosuite' feature will automatically encrypt files once finished with custom password (or master password)

Now I don't know if this is possible.... or whether it can be implemented for positive uses...

Cryptosuite as part of GSS package. Would allow for encryption of system files/programs and password 'stored' in the cryptosuite application whenever its loaded. Probably excessive, but it will prevent anyone downloading files if you have a Trojan Horse and them being able to hex edit it, or view it.

Encryption of image files (or any files) on HDD (like above). Would be a kernel level aspect, any program can view those files, but if downloaded via trojan horse or any other method (onto USB) the receiving OS wouldn't be able to read it.

Ok i think thats enough suggestions for bloating it!

Rodrigo

[rodsoto]

Jason,

Whats the update on your apps?

I have a huge request, because I need to do certain things that I am not sure other software does, hoping they can be implemented into Cryptosuite, would be great, perhaps you can sell it under an enterprise edition.

All this is in discussion of business ideas and concepts, and development. Person I am working with wants total secrecy/privacy on the specifics....

File Transmission - necessary for what i need at the moment

Content Viewer - Person I sent a PDF to is worried in storing the file on his HDD, doesn't want to print it, and is worried on keyboard hooks, and screenshots. Suggested AppDefend - however didn't understand it, so gave up. I understand PDFs can have print disabled and password protected, thats not really a problem, just need traces of opening documents removed as quickly as its closed (secure delete), and locked from any other application from accessing it whilst its open.

Encrypted Voice - the guy doesn't want to talk over phone, type in CS chat (fear of copy/pasting) or any other method other than face to face. He's on the other side of the world. Same reason as content viewer, no way to record the conversation to HDD, save it.

Hope these things can be done at all? Maybe extra coders are required :D

Cheers