The Daily Click ::. Forums ::. Klik Coding Help ::. How secure is the Ini Plus encryption?
 

Post Reply  Post Oekaki 
 

Posted By Message

Chris Burrows



Registered
  14/09/2002
Points
  2396

GOTW WINNER OCT. 2011
14th March, 2011 at 06:01:22 -


How does the Ini Plus encryption work?

Is it unbreakable?

Can you simply decrypt it with another MMF2 application?
Or is there something in the encryption that ties it to the application that encrypted it.

Thanks!

 
n/a

UrbanMonk

BRING BACK MITCH

Registered
  07/07/2008
Points
  49614

Has Donated, Thank You!Little Pirate!ARGH SignKliktober Special Award TagPicture Me This Round 33 Winner!The Outlaw!VIP MemberHasslevania 2!I am an April FoolKitty
Picture Me This Round 32 Winner!Picture Me This Round 42 Winner!Picture Me This Round 44 Winner!Picture Me This Round 53 Winner!
14th March, 2011 at 06:14:53 -

It uses a key that you can set, so it is tied to your application in a way.

It's not too difficult to crack but I doubt anyone would go to the trouble if it's just a game save.

If you really feel like the data file needs extra protection you could also use blowfish to encrypt it.
However your app will still need to decrypt it before it could be loaded into memory, so with the right tools all one has to do is grab the file after it has been decrypted. I did that before with an online game that was uploaded to this site, set my character's level to 9999

Prolly the biggest concern is memory hacking, once the file is decrypted and loaded then it's stored in memory as plain text. It can then be edited with a memory viewer and then your program will then save the edited data back to the file.

Like I said though, most won't go to the trouble, so just use the encryption since it'll keep most people from tampering and it's easy to use.

 
n/a

Chris Burrows



Registered
  14/09/2002
Points
  2396

GOTW WINNER OCT. 2011
14th March, 2011 at 06:23:56 -

Thanks a lot!

I think I'll try use the Blowfish object. Do you know of any examples or documentation floating around anywhere?
Is Blowfish unbreakable?

 
n/a

Eternal Man [EE]

Pitied the FOO

Registered
  18/01/2007
Points
  2976

Game of the Week WinnerHero of TimeLOL SignI am an April Fool
14th March, 2011 at 12:17:49 -

All encryptions are breakable, it all depends on what skills the person trying to break it has. But I really doubt that anyone will go to such lengths to open a savefile or what-not. As long as there isn't money involved it's just not that important.

 
Eternal Entertainment's Code'n'Art Man

E_E = All Indie


...actually Ell Endie, but whatever.
Image
Image

Phredreeke

Don't listen to this idiot

Registered
  03/08/2002
Points
  4504

You've Been Circy'd!VIP MemberPS3 Owner
14th March, 2011 at 17:23:30 -

Also don't use something stupid for a key like 123456.

You could try a defense-in-depth approach.

1. Calculate your own checksum of values. For example checksum = (time mod 555) + (level * 3) + (lives * 7)
Extend it to as many items you're gonna use of course. Also add some random unused items just to confuse.

2. Encrypt with blowfish or RC4 or encryption of your choice.

3. Store a hash of the encrypted file in a second file.

 
- Ok, you must admit that was the most creative cussing this site have ever seen -

Make some more box arts damnit!
http://create-games.com/forum_post.asp?id=285363
   

Post Reply



 



Advertisement

Worth A Click