Skip to content

FalseCrypt is demonstration project for the static code analysis tool Sharper Crypto-API Analysis

Notifications You must be signed in to change notification settings

jusito/FalseCrypt

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

35 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

FalseCrypt - How NOT to do encryption

FalseCrypt is demonstration project for the Roslyn-based static code analysis tool Sharper Crypto-API Analysis.

Purpose

FalseCrypt is a file encryption tool like TrueCrypt or BitDefender. Its code contains many weaknesses like the insecure usage of the old DES block cipher. The project was developed to demonstrate the code analysis findings offered by Sharper Crypto-API Analysis.

Disclaimer

By any means the source code of this project does NOT contain any good usage of the .NET Crypto API. It should therefore not be used for any serious production code.

Java version linux / mac

Currently only windows x64 dependencies are added of swt, maybe you need: Maven SWT Linux Maven SWT Mac

How to use

  1. run Maven with goal "package"
  2. insert password
  3. insert absolute path to file or directory (processing every file on its own)
  4. hit encrypt / decrypt

Android

  • Supporting Android 8/8.1/9
  • Crypto should be identically with java_desktop
  • below 8 would need different Crypto as java_desktop, some methods aren't available
  • Android 10+ needs Android SAF, java.io.File doesn't work on sdcard (short explanation), DocumentFile is needed everywhere. The GUI/Activity is prepared, see TODO comments.

About

FalseCrypt is demonstration project for the static code analysis tool Sharper Crypto-API Analysis

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • Java 71.7%
  • C# 28.3%