-
-
[分享]On the security of the WinRAR encryption
-
发表于: 2009-5-7 05:09
-
On the security of the WinRAR encryption
Gary S.-W. Yeo and Raphael C.-W. Phan
Abstract
Originally written to provide the file compression feature, computer software such as WinRAR and WinZip now also provide encryption features due to the rising need for security and privacy protection of files within a computer system or for sharing within a network. However, since compression has been much in use well before users saw the need for security, most are more familiar with compression software than they are with security ones. Therefore, encryption-enabled compression software such as WinRAR and WinZip tend to be more widely used for security than a dedicated security software. In this paper, we present several attacks on the encryption feature provided by the WinRAR compression software. These attacks are possible due to the subtlety in developing security software based on the integration of multiple cryptographic primitives. In other words, no matter how securely designed each primitive is, using them especially in association with other primitives does not always guarantee secure systems. Instead, time and again such a practice has shown to result in flawed systems. Our results, compared to recent attacks on WinZip by Kohno, show that WinRAR appears to offer slightly better security features.
Keywords: Compression, Encryption feature, Attacks, WinRAR, WinZip
導讀:
這是一篇討論 Win RAR 加密的論文，對於 WinRAR 加密及壓縮的特徵與特性，做一個分析，然後去破解它。
這一篇是回應 http://bbs.pediy.com/showthread.php?t=18442 的文章，很可惜的事是，原帖乏人問津已經關閉(因在五个月内没有任何回复而自动关闭)。
但我我樂意把所知道的分享出來。
這篇內容看不懂沒關係，有圖、有表，照著做就可以，其實不難地。
Gary S.-W. Yeo and Raphael C.-W. Phan
Abstract
Originally written to provide the file compression feature, computer software such as WinRAR and WinZip now also provide encryption features due to the rising need for security and privacy protection of files within a computer system or for sharing within a network. However, since compression has been much in use well before users saw the need for security, most are more familiar with compression software than they are with security ones. Therefore, encryption-enabled compression software such as WinRAR and WinZip tend to be more widely used for security than a dedicated security software. In this paper, we present several attacks on the encryption feature provided by the WinRAR compression software. These attacks are possible due to the subtlety in developing security software based on the integration of multiple cryptographic primitives. In other words, no matter how securely designed each primitive is, using them especially in association with other primitives does not always guarantee secure systems. Instead, time and again such a practice has shown to result in flawed systems. Our results, compared to recent attacks on WinZip by Kohno, show that WinRAR appears to offer slightly better security features.
Keywords: Compression, Encryption feature, Attacks, WinRAR, WinZip
導讀:
這是一篇討論 Win RAR 加密的論文，對於 WinRAR 加密及壓縮的特徵與特性，做一個分析，然後去破解它。
這一篇是回應 http://bbs.pediy.com/showthread.php?t=18442 的文章，很可惜的事是，原帖乏人問津已經關閉(因在五个月内没有任何回复而自动关闭)。
但我我樂意把所知道的分享出來。
這篇內容看不懂沒關係，有圖、有表，照著做就可以，其實不難地。
|
|
|---|---|
|
|
|
|
|
[QUOTE=sessiondiy;618847]请R侠看一下这帖, 是不是有内奸 ? 开玩笑的.
以你的观点来看是怎么回事. 你做得到吗 ? http://bbs.pediy.com/showthread.php?t=83431 ("http://bbs.pediy.com/showthread.php?t=83431")...[/QUOTE] 1) 理論上 ECC 160 bits 是相當於 RSA 1024 bits 的安全度，這是經過公認的。 2)為什麼會出現這個容易被破解的狀況？ 這要從很多層面來探討。 2.1) 譬如前幾天討論 crack2.exe 時，有人用“爆”的方法。 2.2) 也有人用 trial and error，一個一個試，老子就是時間多，不怕跟你磨時間。 2.3) 檔案裏的數據(data)，可能有某些地方被找出來，或是被發現，這也是一個弱點處(weakness)，不然就不會有人發明 Olly Debug 或是 Ultra Editor 這類的 Hex editor 了。 2.4) 你猜的也有可能，有內賊。 2.5) 其它因素，未明，待查證。 3) 以上是基於ECC 跟 RSA 都設計良好的狀況下。 如果不是設計的很好，那可能又是另一個問題。 話說金鐘罩或是鐵布杉都會有罩門，或許有些人知道那個罩門在哪。  4) 我前幾天還有發一帖，是關於破解 RSA 系統的評估，「【分享】植基於RSA加密演算法頻頻特性之研究」 ，談的就是關於 RSA 的一種罩門。  5) 我還有發一帖，相信你可看過，「【原创】The XOR Secret in Our Computer System 」，談的也是另一種罩門，可惜這兩篇都乏人問津。  ※ 我一發帖完，你就馬上補上來，真嚇人。感覺好像偷偷的躲在我背後的樣子。
|
|
|
这里以搞逆向的为多数, 若非真正遇上"目前"要破的软体跟密码学有关的,
实是有点乏人问津. 说句实话, 逆向要搞得好,数学跑不了. 大约近一年前好像也有个人喜欢密码学, 希望能弄个版块, 最后不了了之. 我不回帖的话怕你太无聊啊...  PS. 经你指导, 那2个定律我看得懂了. 那些符号在密码学一定很常用到. 谢谢! |
|
|
1)
剛剛指給我看的那帖，4樓的 XSIS (http://bbs.pediy.com/showpost.php?p=588562&postcount=4) ，他的觀點就是類似我指出的2.3)點，很接近。 他講的是不當的使用(abuse， misuse)，我講的是特徵(characteristic, feature)。 2) 我只希望可以把在 phate 上的密碼學區材料，移一部份過來。 不然，可能敬要麻煩你們過來看了。 3) 我希望你可以在 XOR Secret 那篇好好著磨一下，或許你可以看出些許有趣的地方。  4) 指導不敢當，歡迎有空常交流。的確你回我，我不會感到很孤單。
|
|
|
|
|
|
|
|
|
下载了就要顶!
|
|
|
 全英文文档啊，本人英语水平太差了。至于密码学还是有人会学的吧，因为我就想把密码学应用在自己写的程序中，可惜本人太愚笨，看别人的源代码很多都不知道为什么要那么做，狂汗个。 |
|
|
|
|
|
|
|
|
|
|
|
《植基於RSA加密演算法頻率特性之研究》一文，对不起，一着急，发错地方了。
|
|
|
|
|
|
|
|
|
[QUOTE=rockinuk;622066]Step 3，主要在算Φ(r)。
如果Φ(r) 算的出來，那八九不離十地，RSA 的 Φ(n)也可以計算的出來。 Ps. RSA 系統裏，Φ(n) 是未知的，跟 p 及q 一樣，都是不公開(unpublished)。[/QUOTE] 感谢相告
|
|
|
斯普林格的一个文章，感兴趣的同仁可以看看。
本人对密码分析的理论和工程实现非常感兴趣，希望有机会多和大家交流。 我的QQ:903121 |
|
|
不错的文章，感谢分享~
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
