IExplore AutoComplete crypto-algorithm

IExplore AutoComplete crypto-algorithm

Post by vartekqu.. » Sun, 23 Jul 2000 04:00:00



     IExplore comes with a "nice" feature called AutoComplete, which
stores typed URLs inside forms, search words, passwords, credit card
numbers and so on in the registry.

     No need to say how "nice" is this when you are at a *cafe or
when you share your computer with anyone. :-(

     Monitoring registry changes shows as that those values are stored
under:

     HKEY_LOCAL_MACHINE\Software\Microsoft\Protected Storage Systems
Provider

     The values are stored at
HKEY_LOCAL_MACHINE\Software\Microsoft\Protected Storage Systems
Provider\YourComputerName\Data

     The words are stored Item Data binary values and are ciphered.

     So the question is, has anybody found or is willing to find or
does know the algorithm used to cipher them? Further, has anyone found
the way to break it?

     What kind of crypto-algorithms are typical for Microsoft to use,
apart from propietary (bad)ones such as the flamed PPTP?

Sent via Deja.com http://www.veryComputer.com/
Before you buy.

 
 
 

IExplore AutoComplete crypto-algorithm

Post by Paul Rub » Sun, 23 Jul 2000 04:00:00



>     So the question is, has anybody found or is willing to find or
>does know the algorithm used to cipher them? Further, has anyone found
>the way to break it?

Yes, a description is somewhere on Peter Gutmann's web site.  It's
fairly trivial.  But it's intended to save stuff on your own computer,
so it doesn't try to provide real security.

 
 
 

IExplore AutoComplete crypto-algorithm

Post by El Pac » Sun, 23 Jul 2000 04:00:00


It's probably XOR-ed, like the poor Screensaver passwords,,,

Willing to try?

Grtz,
EP

Quote:> Yes, a description is somewhere on Peter Gutmann's web site.  It's
> fairly trivial.  But it's intended to save stuff on your own computer,
> so it doesn't try to provide real security.

 
 
 

IExplore AutoComplete crypto-algorithm

Post by ben.. » Sun, 30 Jul 2000 04:00:00



>      What kind of crypto-algorithms are typical for Microsoft to use,
> apart from propietary (bad)ones such as the flamed PPTP?

rot13 I assume. well, if they can implement it without bugs, that is.

<grin>
--
Grobbebol's Home                 |  Don't give in to spammers.   -o)
http://www.xs4all.nl/~bengel     | Use your real e-mail address   /\
Linux 2.2.16 SMP 466MHz / 256 MB |        on Usenet.             _\_v  

 
 
 

1. Orderless crypto algorithm

Hi,

Is there some "quite secure" (no flame on that) algorithm which is
"commutative"?

I mean:
an algorythm which could encrypt some data with two key in an order,
(first crypt'ing with key A and then with key B) and decrypting in
the SAME order (decrypting by key A and then by key B) and you would
get back the clear text.

Ex:

Clear text --crypt-with-A-> Crypted --crypt-with-B-> double crypted text.

Double crypted text --decrypt-with-A-> Crypted --decrypt-with-B> clear text.

You cath the draft?

Thank you,

Regards.
--
Philippe Langlois
INTRINsec - Securite informatique

2. Inkjets & Nametags

3. I need an exportable crypto algorithm.

4. Terminal services

5. high speed crypto algorithm for satellite

6. Help! Securing Solaris TELNET & FTP

7. Password Autocomplete

8. Problem with man-viewer

9. Worried About IE5's 'Autocomplete'

10. Deleting History and Autocomplete data from IE 6.0

11. iexplore.exe listening

12. Iexplore Error Message

13. iexplore automatically downloads exe files without prompting