Re: encrypted SPSS .sav files

[Michał Dubrawski]

Dear Ben,

That's great news :-) I'm really impressed. Reading your emails about what you have found out abut encryption and how was for me like reading very interesting detective story. 

This thought came to me: if SPSS encryption is so poor, maybe we should think about better encryption as additional option (working only on PSPP). It would be an option only for PSPP users, but users of previous versions of SPSS also cannot read encrypted files with encryption designed by SPSS. The difference is (if they have a password) they can always get PSPP, open it and save as non-encrypted file readable for any SPSS version (if they insist on using it ;-) ). 

warm regards,

Michal

Date: Tue, 29 Oct 2013 22:55:13 -0700
From: Ben Pfaff <address@hidden>
To: Basti?n D?az <address@hidden>
Cc: "address@hidden" <address@hidden>
Subject: Re: encrypted SPSS .sav files
Message-ID: <address@hidden>
Content-Type: text/plain; charset=us-ascii

I've now written code that reliably reads an encrypted .sav file, given
the password.  I'm concerned about poor crypto design, so I'm going to
ask people who are more expert than me to evaluate the design defects
before I publish the code.

I've also written a program to decode an encoded password to obtain the
human readable password.  (This is much less interesting, but still
useful for interoperability.)



------------------------------

_______________________________________________
Pspp-users mailing list
address@hidden
https://lists.gnu.org/mailman/listinfo/pspp-users


End of Pspp-users Digest, Vol 89, Issue 28
******************************************