Encode only binary or decode with key/password binary about mod_screwim HOT 3 CLOSED

I'm sorry .. I do not understand what the situation explains.

from mod_screwim.

do you want the option --decode to disappear?

[root@host tools]$ /usr/bin/screwim -h
screwim 1.0.5 : encode or decode php file
Usage: screwim [OPTION] PHP_FILE
   -c VAL, --convert=VAL convert key byte to digits
   -d,     --decode   decrypt encrypted php script --------------> do you want to remove?
   -h,     --help     this help messages
   -H VAL, --hlen=VAL length of magic key(SCREWIM_LEN or PM9SCREW_LEN). use with -d mode
   -k VAL, --key=VAL  key bytes. use with -d mode
   -v,     --view     print head length and key byte of this file

from mod_screwim.

There is no problem providing binary that does not support decoding. However, what you want is probably as follows.

1. It must be encrypted without any command line arguments. (Because of .bash_history)
2. When decrypting, a key string must be received. But don't leave it in the .bash_history.

The first issue is originally supported, so there is no problem.

However, the second issue is ambiguous.

screwim cannot control leaving an execution history in the .bash_history. It depends on the user's behavior as command export HISTFLIE=/dev/null.
Therefore, the problem of decoding by giving a key string as an option is still dangerous.

Finally, the condition you want seems to mean that you will not leave the original file.
This is a very dangerous idea.

Decryption is an additional function, not a function that supports recovery if there is no original. For stronger security, it is recommended to back up the original file in a separate location rather than attempting decryption.
Therefore, if run ./configure with the --disable-decode option, you will get the screwim command without decryption.

from mod_screwim.