|
ShyFile encodes your text (txt- and html-files) and packs it into an extra file that is to be attached to an outgoing email or uploaded to a website. The recipient thereof does not need to have ShyFile installed to be able to decode since any Internet browser will open it and prompt the user to enter the matching key phrase before decoding it.
Did you know that when you send your email messages, they do not go directly to recipient mailboxes? Did you know that your Internet Service Provider (ISP) stores copies of all your email messages on its mail servers before it tries to deliver them? Do you know that someday all the information kept on the servers can be easily used against you? If you need to encrypt your text documents for distribution via email, or by any other means, then ShyFile can take care of it. Encryption can be set from 192bit to 6144bit, depending on the length of the key you decide to use. Your key is created by entering any sequence of characters available on the standard keyboard, and can be altered for each encryption.
Download security software: ShyFile - Email and File Security 6.233
Developer: Dr. Bootz GmbH
How to create self-decrypting files that contain your encrypted text?
It takes just a few easy steps to encrypt some text and to put it into a self-decrypting, yet harmless HTML-application file. Enter your key (password), enter your text, select a folder to save your ShyFile in and click the Encode button. That's it. ShyFile allows recipients to decode the text without requiring a copy of the program, making it a useful service that offers security to everyone. Any recipient of an email having a ShyFile attached to it simply uses an Internet browser to decode. The HTML-application file is wrapped around the actual JavaScript self-decrypting algorithm that will decode the ciphertext carried along.
Encrypting HTML-webpages:
ShyFile also allows the user to encrypt up to 80 kilobyte of plain text information and turns it into a self-decrypting HTML- or HTA-webpage to be uploaded to a website. Simply use your browser to decode. No installation of ShyFile and no extra applet necessary. However, ShyFile encrypts the source code of webpages only, any additional components, such as pictures and sounds, do not get encrypted.
Encrypting binary files:
ShyFile will also encode all kinds of binary files (e.g. those having a -jpg, -gif, -bmp, -doc, -xls, -cls, -mp3 or even an -exe extension). It has never been easier to encrypt, e.g. your MS Word-document in a way no Secret Service on this planet could ever gain access to. But those files containing encoded binary information cannot be opened using an Internet browser, i.e. they require the actual ShyFile software to decode. Any ShyFile installation can be used to decode, regardless whether it's the full version or an expired evaluation copy.
Encrypting folders:
Not only does ShyFile enable the user to encrypt multiple single files within a folder in a single run, but it can also be used to encrypt a whole folder with all its files as well as subfolders within.
How does ShyFile's proprietary algorithm work?
First of all, some randomly created junk-data is added to the plain text. An interim sum is generated from the ASCII value of the first character from your plain text as well as from the second, regardless whether it’s a plain text character or a junk-data-character. That interim sum renders a new ASCII character itself. The interim sum of the first two characters is the basis for the calculation of the next interim sum to generate the next ciphertext-character to follow, and so on . . . All values representing the ciphertext characters are influenced by the junk-data-characters added in the outset. This way, any encoded character cannot be related to a character of the original plain text, no so-called ‘codebook’ can be found. All those newly ceated interim-sums are then falsified by an "Exclusive-Or-Operation", which is quite common among other encryption-algorithms as well. From that point on, all characters are separated into nibbles (4 bit half-bytes) and the sequence thereof is twisted pseudo randomly by the information the user has entered as the actual key (passphrase). Within a ShyFile the symmetric passphrase per se is not transmitted. Your passphrase rather determines the way your text is encrypted.
ShyFile's enhanced TL6144D algorithm
There are algorithms out there that distort the plain text information in the fanciest ways but keep the actual order of all encoded characters (ciphertext) as they were in the outset. ShyFile, on the other hand, twists the order of those bytes and nibbles of the whole ciphertext like a whirlwind.
The junk data is created by an exclusively developed random generator and not by the one that comes with the Windows operating system. This is done to avoid any discussions whether the Windows random generator is as random as it should be. Therefore, upon every installation of the software, the user will need to enter a few arbitrary characters to initialize that random generator.
ShyFile encodes your sensitive data with an algorithm that's capable to generate a depth of encryption of up to 6,144 bits, which means it will take a potential hacker not knowing your password 2 to the power of 6,144 possibilities (that equals a figure with 1,850 digits) to crack it. Ten thousand years will not be enough time to go through all these possibilities using the best technology available.
Imagine you encode the same text a thousand times, at every time using the same key entry, ShyFile will generate some ciphertext that at every time is different in its contents from the one before. If the user enters a 192 bit key (made of 32 characters) there are up to 2 to the power of 192 possibilities a potential hacker needs to go through in order to retrieve the plain text. And, this is the interesting part, there will be also 2 to the power of 192 variations of how the encoded data stream can look like. If the user chooses to enter a 6,144 bit key (made of 1,024 characters) there will be even up to 2 to the power 6,144 variations the encoded data stream can look like.
About ShyFile's keys:
ShyFile employs a variable key length (passphrase length) of minimum 32 characters (rendering a 192 bit encryption) or up to 1,024 characters (rendering 6,144 bit in a military fashion). Besides, any file can be used as the key, regardless whether it is a picture, a sound file or even an executable.
No cryptographic experts, nor any military crypto experts in particular, who do not know the passphrase, were ever able to crack and decode a document encoded by ShyFile. Unique 1on1 (symmetric) key entries prevent anyone from accessing your messages (as long as you don't give your passphrase carelessly out to anyone, of course).
No key recovery possible. There is no master key. If a ShyFile user loses his key entry, nobody will be able to retrieve the original text (or original plain binary data) anymore, neither the user nor the software developer.
What is the Random Key-button for? Imagine your PC was infested with a hidden keystroke-logging-tool, it is quite possible that your key gets recorded if it is entered with your keyboard. The Random Key-button will randomly create a long key consisting of 1,024 characters with a single click on your left mouse touch. No key-press snooping tool could ever record such a key.
ShyFile's file shredder:
ShyFile also features an integrated File Shredder to provide secure file deletion. Click the File Shredder button and browse for a file which sensitive contents you want to have completely erased. Normal file deletion only removes a file's directory entry, but leaves the data contained in the file on your disk drive. File Shredder completely overwrites the contents of a file 7 times, changes its date and then deletes it. The purpose of the File Shredder is to completely wipe confidential files and their contents from you disk drive. Once a file has been shredded it can not be recovered using any sophisticated file restoration utilities or un-delete programs.
Miscellaneous:
You keep your current email settings. ShyFile secures your 1on1 communication, from one ordinary email account to the other, no extra registration at any additional service providers necessary (no Public Key server necessary). We do not handle your communication.
The recipient of your email needs to know the key with which it was encrypted, but don't just send this along with the encrypted file! Make sure not to let other people gain access to your passphrases.
According to German Law we do not have to leave a backdoor open for any public agencies, so we didn't.
ShyFile and its algorithm were developed and are the sole property of Dr. Bootz GmbH.
No product is secure if used improperly. You can be the weakest link in the chain if you use a product carelessly.
What's new:
- Any file can be used as a key now. |