chokepoint / crypthook Goto Github PK
View Code? Open in Web Editor NEWTCP/UDP symmetric encryption tunnel wrapper
License: MIT License
TCP/UDP symmetric encryption tunnel wrapper
License: MIT License
Dude thank you for this code =)
Is it possible for you to tag a release with a version to your repo?
I am creating pisi packages (for PisiLinux ) and i need a download from github.
Cya!
[!] Error in EVP_DecryptUpdate()
this is what I'm getting when I try to send data through the ncat tunnel
I installed it on a few vmware operating systems and had the same problem on all of them
I have a hobby of auditing random crypto code I find on github, so I took a look at this one. There are two problems I found:
First, the way it checks if the key has already been generated will lead to unnecessary calls to PBKDF2, which could slow it down a lot:
if (glob_key[0] == 0x00) // Generate key if its the first packet
gen_key();
A random key will have the first byte 0 with probability 1 in 256. For such keys, PBKDF2 will be re-run for every call to encrypt_data.
Second, the same key is used for both directions (from the client to server, and server to client). This makes it possible to re-send one side of the connection's own packets back to itself and it will accept them as though the other client is sending them. Also, there are no sequence numbers, so packets can be re-ordered by the adversary and it will not be detected.
I suggest adding to the disclaimer section that it does not provide message authentication, since to claim message authentication those properties must be satisfied as well.
Can you add a license to this one as well please?
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.