00:00
00:00
Newgrounds Background Image Theme

Mekatov just joined the crew!

We need you on the team, too.

Support Newgrounds and get tons of perks for just $2.99!

Create a Free Account and then..

Become a Supporter!

undecompilable password ;)

2,599 Views | 26 Replies
New Topic Respond to this Topic

undecompilable password ;) 2005-06-30 17:42:59


My password function generator, just copy the code

ever wanted to make a level password? ever worried someone might decompile your flash and steal your password and tell people? this is how this can be prevented, the one way md5 encryption is safe, noone will be able to hack it (without advanced knowledge of rainbow tables), and it provides good protection for levels

all you have to do is download the cryptography extention and paste the code, remmember to put

#include "cryptography.as"

at the top of your code as explained

post here any questions, and enjoy your new security ;)

Response to undecompilable password ;) 2005-06-30 17:48:47


You've got me compelled now Inglor, I must learn more.

Response to undecompilable password ;) 2005-06-30 17:58:03


sweet, You deserve a present, here have my genitals and left foot

Response to undecompilable password ;) 2005-06-30 18:04:18


no thank you, <3 though

Response to undecompilable password ;) 2005-07-30 16:14:42


How do I make this code work? LIke... WHat do I need to do, with the input texts and all that, and with vars?


%u2020

Response to undecompilable password ;) 2005-07-30 16:18:40


At 6/30/05 05:58 PM, speddyfeddy1234 wrote: sweet, You deserve a present, here have my genitals and left foot

E-mail them to me. eggshell1@hotmail.com

Response to undecompilable password ;) 2005-07-30 16:52:00


yeah we're back with the good old password level type of saving !


website :: hugostonge.com

my job :: we+are

Response to undecompilable password ;) 2005-08-12 10:32:23


lljjjhhjlj;khm8jh

Response to undecompilable password ;) 2005-08-12 10:47:51


Response to undecompilable password ;) 2005-08-12 10:49:00


nice scripting by the way inglor

Response to undecompilable password ;) 2005-08-12 10:50:00


At 8/12/05 10:47 AM, CreatureX wrote: wow, more spam by shane

Check out all his posts, all spam.


Sup, bitches :)

BBS Signature

Response to undecompilable password ;) 2005-08-12 11:10:51


I have a question that Inglor might be able to answer. If I put all my code inside a .as file can someone get that code from inside my game/movie? When the .as code is included is it stuck right in the center of the movie for all to see or is it hidden?

Response to undecompilable password ;) 2005-08-12 11:21:03


At 8/12/05 11:10 AM, Cojones893 wrote: I have a question that Inglor might be able to answer. If I put all my code inside a .as file can someone get that code from inside my game/movie? When the .as code is included is it stuck right in the center of the movie for all to see or is it hidden?

If somebody were to decompile, the code in the .as file would be visible in the decompiler.


Sup, bitches :)

BBS Signature

Response to undecompilable password ;) 2005-08-12 17:05:28


So technically this is a decompilable password. If the person was smart enough they could use the .as file against you. Sure it would be a bit harder, but there is no 100% security in flash (Inglor I think you said that).

Response to undecompilable password ;) 2005-08-12 17:11:19


you didn't get it

they can decompile and see the password encrypted, what does it help them
they'll be able to see the password, but they won't be able to enter it anywhere

let me show you

person a decompiles the flash
person a gets the encrypted password
person a thinks
person a thinks harder
person a puts the password in the password area
person a realises it won't help him becuase the password he enters gets encrypted again resulting a double encrypted password which doesn't match

the flash will only work if he has the unencrypted pass, the flash file contains the encrypted pass and not the unencrypted one.

Response to undecompilable password ;) 2005-08-12 17:15:16


let me explain further

let's say our pass is abcde12345 , now we want to encrypt it, what the function we call from the AS file does is :

left shifts denotes a left bit rotation by s places; s varies for each operation. Addition denotes addition modulo 232.

MD5 processes a variable length message into a fixed-length output of 128 bits. The input message is broken up into chunks of 512-bit blocks; the message is padded so that its length is divisible by 512. The padding works as follows: first a single bit, 1, is appended to the end of the message. This is followed by as many zeros as are required to bring the length of the message up to 64 bits fewer than a multiple of 512. The remaining bits are filled up with a 64-bit integer representing the length of the original message. The message is always padded with at least a single 1-bit, such that if the message length is a multiple of 512 minus the 64 bits for the length representation (that is, length mod(512) = 448), a new block of 512 bits is added with a 1-bit followed by 447 0-bits followed by the 64 length.

The main MD5 algorithm operates on a 128-bit state, divided into four 32-bit words, denoted A, B, C and D. These are initialised to certain fixed constants. The main algorithm then operates on each 512-bit message block in turn, each block modifying the state. The processing of a message block consists of four similar stages, termed rounds; each round is composed of 16 similar operations based on a non-linear function F, modular addition, and left rotation. Figure 1 illustrates one operation within a round. There are four possible functions F, a different one is used in each round:

F(X,Y,Z) = (X\wedge{Y}) \vee (\neg{X} \wedge{Z})
G(X,Y,Z) = (X\wedge{Z}) \vee (Y \wedge \neg{Z})
H(X,Y,Z) = X \oplus Y \oplus Z
I(X,Y,Z) = Y \oplus (X \vee \neg{Z})

\oplus, \wedge, \vee, \neg denote the XOR, AND, OR and NOT operations respectively.

Response to undecompilable password ;) 2005-08-12 17:17:38


For example, if you're making a Flash, and the password you want is "ownage," you would first find out what the MD-5 hash of ownage is. It will be something like 54erte$%sdf. Now, for the AS part, you would do something along the lines of:

if ( encrypt( password ) == '54erte$%sdf' )
{
// Do whatever.
}

So when your Flash is decompiled, that's the only thing that will be visible.

Response to undecompilable password ;) 2005-08-12 19:22:17


Couldn't someone just change the programming so that the password does not get encrypted when it is checked in a password box, and then all they have to do is type in the encryted one?


BBS Signature

Response to undecompilable password ;) 2005-08-12 19:52:04


that's the not 100% secure part, but most free decompilers don't allow you to alter the code, just view it, and most people don't know enough to do that

plus you can always combine it with a domain check

if md5(password) && _root._url="http://uploads.ungrounded.net.
...

this is VERY hard to break :P

Response to undecompilable password ;) 2005-08-12 19:58:41


At 8/12/05 07:52 PM, Inglor wrote: that's the not 100% secure part, but most free decompilers don't allow you to alter the code, just view it, and most people don't know enough to do that

plus you can always combine it with a domain check

if md5(password) && _root._url="http://uploads.ungrounded.net.
...

this is VERY hard to break :P

I have a question about this. If I use this to encrypt a password in Flash that will be passed to a dynamic page (ie, ASP or PHP), is there a method that will allow the dynamic page to decrypt and check it? Or is this strictly just for swf passwords/etc?
I did download it, but I haven't played with it at all. However, encrypting values to be passed to ASP would be great, since I'm having to use 'jumbling' methods within Flash to semi-hide passwords for highscore table addscores currently, and that's by no means 100% secure (although it will hopefully deter the majority of casual hackers.


- - Flash - Music - Images - -

BBS Signature

Response to undecompilable password ;) 2005-08-12 20:04:10


hmm... you never need to decrypt it, in fact you CAN'T decrypt md5, it's 1 way encryption ,if you want something decryptable use RSA or DES.

Response to undecompilable password ;) 2005-10-21 01:52:59


sorry to bring back old topics, but i need something i can encrypt and decrypt dynamically and i dont know what RSA and DES are... ive tried a bunch of bitwise stuf but it only works with numbers and doesnt really have the desired effect. i want it to be all gobbledy-gook, but but still decryptable.

Response to undecompilable password ;) 2005-10-21 09:08:06


Sorry but you have failed to impress me.

MD5 is as old as the world. I'm just wondering where you found that md5 library.


BBS Signature

Response to undecompilable password ;) 2005-10-21 09:42:33


At 10/21/05 09:08 AM, F-13 wrote: Sorry but you have failed to impress me.

I didn't try to impress you...

Response to undecompilable password ;) 2005-10-21 10:40:12


Unless of course you piss someone off the DOES know how to use rainbow tables and brute forces the hell outat it.. I mean even if they do have like a 2% chance of getting it to decrypt.. Don't mean it's impossible who's to say they won't be that person that is lucky enough to get within that 2% I mean yeah people prior to this has mentioned stuff about this so the pint to this post.. IS that no matter what people still have their skiddie brute forcers .. :o *gasp* :P

Response to undecompilable password ;) 2005-11-14 01:36:34


At 10/21/05 10:40 AM, Cyrax88 wrote:

I mean even if they do have like a 2% chance of getting it to decrypt..

2% thats still pretty low and you could add it with THIS then it would be VERY hard to hack