|

MySCP and MySSH.
Free version has a nag screen and compression
on-the-fly is always disabled.
Download Includes MySCP, MySSH and Visual Basic Samples
MySCP Help file Online
MySSH Help file Online
Activecrypt. Encryption component
Supported symmetric encryption algorithms: AES, RC4, RC5, IDEA, CAST5, Triple DES, DESX, BlowFish
Supported hashes: MD5, SHA1, RIPEMD160
Supported digital signatures: SHA1-RSA, MD5-RSA
The free version is a full featured and not time limited program. However it has some functional limitation shown in the table:
Download a free version of Activecrypt
Activecrypt Help file Online
|
Free
version |
Full
version |
| RSA
key generation |
Fixed to 256
bits |
Unlimited |
| RSA encryption |
Limited to 21 chars |
Unlimited |
| Symmetric
encryption, hashes for strings |
Limited
to 16 chars |
Unlimited |
| Symmetric
encryption, hashes for files |
Limited to 1024 bytes |
Unlimited |
| Digital
signatures API |
Limited
to 16 chars |
Unlimited |
| Loading x.509
certificates |
No |
Yes |
If you purchased the components, download the full featured version from here
|
|
Industry news:
Mar 23. SSH Tectia Server (Unix) 4.0 Vulnerability in "passwd" Program
SSH.com reported that there is a vulnerability in the SSH Tectia Server (Unix) 4.0.3 and
4.0.4 code. The flaw reportedly resides in the password change mechanism that executes
the "passwd" program during user authentication to change the user's password when the
user's password has expired. This feature is not enabled by default, the vendor said.
Jan 19. OpenSSL Vulnerabilities in ASN.1 parsing
NISCC (www.niscc.gov.uk) prepared a test suite to check the operation
of SSL/TLS software when presented with a wide range of malformed client
certificates.
Dr Stephen Henson (steve@openssl.org) of the OpenSSL core team
identified and prepared fixes for a number of vulnerabilities in the
OpenSSL ASN1 code when running the test suite.
A bug in OpenSSLs SSL/TLS protocol was also identified which causes
OpenSSL to parse a client certificate from an SSL/TLS client when it
should reject it as a protocol error.
Nov 11. OpenSSH Buffer Mismanagement Vulnerabilities
A buffer mismanagement vulnerability has been reported in OpenSSH. This issue exists in the 'buffer.c' source file and may potentially be exploited to execute arbitrary code with the privileges of OpenSSH. Exploitation of this bug to execute arbitrary code has not been confirmed, though it may potentially be used to cause a denial of service. This condition can reportedly be triggered by an overly large packet.
Nov 4. OpenSSL ASN.1 Large Recursion Remote Denial Of Service Vulnerability
A problem has been identified in OpenSSL when handling specific types of ASN.1 requests. This may result in remote attackers creating a denial of service condition.
This issue is also known to affect numerous Cisco products. It is possible that other vendors will also be acknowledging this issue and providing fixes.
|