(Aug 20, 2016 05:48 AM)Chickendipper Wrote: Because crypters typically use some encryption method and then store it somehow. Sure, we can reverse the stub, but what if we're an antivirus company and we've only been handed this encrypted data?
If you use any form of encryption and you don't use a secure PRNG, then why the fuck are you encrypting? If your argument is "you can just reverse it", then you have the wrong mindset. The problem is:
- You use an encryption algorithm
- You DO NOT use a secure PRNG
- You are lowering your standards because "you can reverse it"
The goal of encrypting is to make it take as long as possible to get the plaintext representation. If you don't take precautions, your encryption is as useless as base64 encoding a string hoping people will never figure it out.
Couldn't have said it better myself!
Wow, Chickendipper, you're smart (and that's rare on hf)