News for hackers. Stuff that matters.

A comment on Show HN: Shell utility to encrypt a file into a self-decrypting script. Parent comment

Re:Show HN: Shell utility to encrypt a file into a self-decr... by tptacek on Friday April 22, 2016 @02:31PM (#11551433)
Don't ever use RC4.
[ Parent | on HN ]
Re:Show HN: Shell utility to encrypt a file into a self-decr... by peterwwillis on Friday April 22, 2016 @02:47PM (#11551598)
Can you show any reasonable case where encrypting a small file once would be unsafe with RC4? Maybe if you had 74 million such files...
[ Parent | on HN ]
Re:Show HN: Shell utility to encrypt a file into a self-decr... by kkl on Friday April 22, 2016 @04:25PM (#11552327)
There are known biases throughout RC4 output. There are really bad biases towards the beginning. A small file would likely be XOR'd with certain bytes or patterns of bytes. If this is not exploitable in your hypothetical scenario, it maybe exploitable in others. I think this is generally unsafe.
[ Parent | on HN ]