Data Protection/Encryption

Miscellaneous Forums/General Discussion/Data Protection/Encryption

Hey when Blitz Max includes your media files are they compressed in anyway?

Stronger encryption is the only answer, but I'm afraid merely XORing each byte with a "key" isn't going to keep any determined cracker out for very long. That amounts to a key length of just 8 bits, or 256 values to test in a brute force attack (assuming you were planning to XOR each byte with the same value).

However, if your key is randomly generated, and the same length as the ROM data...

Well not really , i dont now if I need to encrypt it, just compress is ok for now.

I mean.. the short answer is to keep tabs on these guys, spam their forum posts with the truth about the files, or better yet, use it as a kind of free advertisement...

You really can't prevent people from breaking the law, you can just minimise your losses.

Stored do this by marking all the products up to cover shop-lifters. You'll catch the total noobs with cameras and prevent some of them from bothering. But the pros will always get away with things.

The trick is to somehow make it work to your advantage... Or at least not to your disadvantage.

If this thing is free. Then you are at least not losing anything.

Another alternative is to nip it in the bud and release whatever he is stealing for free, through you. In a place where you can reap google adsense or something else.

Under-cut him.

Here's my recommendation: for maximum cryptographic strength, your key sequence should not repeat within the length of the data. That means it must be at least 2048 bytes in length.

And if you're really paranoid, don't use a computer-generated PRS, use instead a high quality natural source, like filtered white noise.
Provided you use such a key once only to encrypt data (i.e. a Vernam Cipher or One-Time Pad) that would make it theoretically unbreakable.

no no dont worry about the encryption, its not even important its just I dont have a big online web storage space and helps downloads save bandwidth

you guys are good for stuff like this so if you are going to discuss encryption instead of what I asked about which is compression of files then go ahead, im enjoying it anyway

If I "XOR" all the bytes with a "key" will he still beable to extract the data
Yes. XOR encryption is weak. There is no way to prevent someone determined to rip your data. Sorry. Ask puki if you're in doubt.

XOR encryption per se isn't weak. It's used in some of the strongest ciphers - mainly because it has the convenient property of allowing the same key to be used symmetrically to encrypt and decrypt the data.
But turning the bytes into 32 bit values won't greatly increase the effectiveness of the cipher. It's strength comes from the length and randomness of the key.

The main weakness of this method is that you have to include both the decryption algorithm and the key in your executable, which is vulnerable to analysis by decompilation/disassembly.

Have you considered using Molebox ( http://www.molebox.com/ ) or a similar product?

Or invent your own encryption method or use compression so he can't figure out very easily how to reverse it

No matter how you do it, it will probably be crackable by someone with the time to do it. The main problem is that you have to at some point Un-encrypt it, which means that it would be possible to simply dissasemble you unencrypter and look see. When it is said things like "This would take a pc a milllion years to decrypt", its talking about when you have just the data. (As Smith said)

This doesnt mean that you shouldnt make it as hard as possible to decrypt, but definatly DONT remove your licence text.

However, (and maybe Ive missunderstood you so please explain), but you are ripping someone elses ROMS, and then moaning that someone is ripping the ripped data from you?

Or invent your own encryption method or use compression so he can't figure out very easily how to reverse it
Making your own cipher is something that's very difficult. The strength of a cipher, much like the security of an OS, or the strength of an alloy, is not something that can be designed - it is something that must be proven over time.

For instance the Feistel Cipher is usually considered one of the best. Not because it is the strongest or the most complex, but because it is the most thoroughly studied, and it is widely accepted that the best method of attack is bruteforce.

you guys took over my post

I have decided to use inno installer' it might make it simple


...And the fact that people are so blantantly prepared to discuss and ask others at forums how to hack my software when my license agreement expressly forbids any kind of action other than just using the software for free.


Reverse engineering might be a statutory right in their locale - a license agreement isn't a magic way to rewrite the law. That said, I believe Molebox shuts things up pretty tight, so you can make exercising that right pretty useless for the vast majority.

the best way to hack my software would be to find the de-crypt routine in the code.
No actually, the best way to "hack" your software, is to find the decrypted data in memory.

over-and-out