Projects / Security Related

On-The-Fly Encryption (OTFE)

Please see the software development section for information on components that will allow you to interface your Delphi applications to OTFE systems.

On-The-Fly Encryption: A Comparison - The most comprehensive listing and review of disk encryption (OTFE) systems available

CrossCryptGUI - A GUI for the commandline CrossCrypt OTFE package. Includes full source code.

Attacking OTFE; Known Security Flaws in Certain OTFE Systems - Expands on some of the security flaws mentioned in the OTFE review mentioned above

OTFE Volume File Finder - Thought you were being smart renaming your OTFE volume files so noone would know what they were? Think again. This utility was written to demonstrate that it is possible to seek out certain types of volume files, irrespective of filename and location. Includes full source code.

BestCrypt DATA_BLOCK Dumper - For those of you interested in the BestCrypt volume file format, and what happens to a volume file when you conceal a hidden part within it. Includes full source code.

PKCS#11 Explorer - Tool for examining the contents of PKCS#11 tokens (e.g. USB tokens and smartcards), and for carrying out various simple operations on them. Intended to allow users to gain a better understanding of PKCS#11 tokens and how they operate, and act as a testbed and demonstration of the Delphi PKCS#11 software included as part of the SDeanComponents package.

Disk and File Shredders

Disk and File Shredders: A Comparison - Need to know what's the best way to destroy data? Check this review of many of the shredders (aka file wipers, aka file overwriters) currently available

The Dangers of Windows 9x/Me Not Initializing Allocated Memory/Diskspace - A short article drawing attention to the security risks presented by Windows 9x/Me, and how memory/diskspace is allocated.

Other

USB Flash Tools - A toolkit for use with all flash memory card (e.g. SD cards, Compact Flash cards), and USB flash drives (aka key drives, pen drives, memory drives, flash drives, key sticks, etc). Detect fake flash memory cards, secure overwrite, and imaging. Includes full source.

Integrity Checker - Check the integrity of your files to ensure they have not been tampered with. Includes full source.

PasswordGen - A password generation program to create secure passwords based on password length, or password strength. Includes full source.

SDHash - A simple command line utility for calculating the hash values of files. Runs from the command line, and can optionally recurse directories.

SSH Clients for PDAs: A Comparison - a review of all SSH clients for PDAs

Sarah Dean's Norton Firewall Update Ruleset Fixer - Long since obsolete (and only included here so I don't lose it), but if you use the Norton Firewall, and are upgrading to v2.55 (e.g. via LiveUpdate) in order to get the SHA-1 security fix, check for essential information regarding preserving your existing firewall rulesets.