Matthew,

<< Sure, but the key is to repeat. First hit I found on what I'm talking about: >>

Wow, spooky - I *just* looked at that link this morning while researching this topic after reading about the DropBox breach on Hacker News.

I'm trying to develop a strategy for improving the default security posture of EDB.  DBISAM is a bit easier because the crypto is customizable, but it still has an issue with using 16-byte blocks (AES) instead of 8-byte blocks (Blowfish).

I'm probably going to fall back on using OpenSSL for the core functionality, which is the really tricky part because now we're talking about distributing DLLs with the application.

Tim Young
Elevate Software
www.elevatesoft.com

Tim Young [Elevate Software] wrote:

> I'm probably going to fall back on using OpenSSL for the core
> functionality, which is the really tricky part because now we're
> talking about distributing DLLs with the application.

That's something I found awkward, so I wrote this:

http://matthew-jones.com/openssl-update-distributor/

Right now it doesn't have the 64-bit or 32-bit detection due to their
daft policy of providing no way to detect the difference.

--

Matthew Jones

Matthew,

<< That's something I found awkward, so I wrote this: >>

Nice.

Tim Young
Elevate Software
www.elevatesoft.com