Skip to main content
kglad
Community Expert
Community Expert
February 12, 2007
Question

SWF Encryption and Security by kglad

  • February 12, 2007
  • 35 replies
  • 15163 views
i have developed a swf encryption program (jsfl) that, i believe, is relatively uncrackable. relatively means if it were worth tens of thousands of dollars to crack, it wouldn't take more than a few weeks for a professional to crack.

it does have two weaknesses. one i'd rather not reveal but has nothing to do with the encryption scheme, the swf or anything else under the control of the encryption scheme. and the other is the possibility someone could hold a gun to the head of the encrypter and demand the code. (which i think would be a pretty successful tactic.)

but other than that it is much more secure than anything else i've seen.

i've uploaded a test file to my website. i'd like to invite users to decompile, check the source code or otherwise mess with it to see if they can find a weakness.

there's no need to crack the code and spend a lot of time. i'm just looking to see if someone can see a method to attack the encryption that would eventually lead to success.

http://www.gladstien.com/test.html

p.s. the swf displays a much faster and much more versatile (than g skinner's) hit detection scheme that i made after working on a project for urami. click on the dot or weird shape to drag. release and the object released turns green if it has a positive hit with the other shape.

p.p.s. please don't hack my server. i'm not challenging anyone to destroy all my files or otherwise bring down my website. i'm just looking for challenges to the encryption scheme.
This topic has been closed for replies.

35 replies

kglad
Community Expert
kgladCommunity ExpertAuthor
Community Expert
February 12, 2007
oh, you won't be able to make anything of it without an organized attack. even for a cryptographer it should be resistant to attack.

i started with a simple encryption scheme (Tiny Encryption Algorithm) that i substantially strengthened and applied to every bit of flash code that can be encrypted. which is everything but key words which is why you'll still see words like function, if, else etc and symbols that are not encrypted. everything else is encrypted.
Inspiring
February 12, 2007
Yes, I've seen that. It looks great! Completely unreadable. I certainly hope you are going to license this. Great job.
Known Participant
February 12, 2007
You should get a job at Microsoft - you'll fit right in - perhaps you could head their security team.

Design - Build - Release - Update - Update - Fix - Fix - End Support - The Microsoft Approach.

Your on to a winner. Congratulations, Bill will be pleased with your effort - NOT!!!!!!!!!!!!!!!!!!!!!!!!!!!.
Inspiring
February 12, 2007
Decompiled the file and I can't make anything of it and I don't think I ever will. Are you going to license this?
Inspiring
February 12, 2007
Come to think of it, I should have my accountant look at the decompiled code. The guy is great with numbers
Inspiring
February 12, 2007
Very clever protection idea – make something that doesn't work so nobody will want it. :)
kglad
Community Expert
kgladCommunity ExpertAuthor
Community Expert
February 12, 2007
doesn't work for me either. lol.

i made a last minute change to the swf after i posted this message and failed to retest. i'll have to fix it later today when i get home.
Inspiring
February 12, 2007
On a Mac with Safari 2.0.4 and plugin 9 I can't get the red dot or the weird blue shape to drag.