PM Encryption - Encrypt all your PMS!

PM Encryption v 1.0.0

As requested by Sully02, here: https://vborg.vbsupport.ru/showthrea...780#post636780
This nifty little hack encrypts your user's (and your), PMs when sent, and unencrypts them when they are read !
It also supports the downloading of the PMS, all PMs downloaded will be unencrypted.

Creator: Deaths
Live Demo: Theres nothing to see.
Screenshots: Nothing to see.
Support is in this thread, and preferably at vBadditions.com

I have included an Installer, which will encrypt all previously sent PMs!

Tested on 3.0.7, should work with all 3.0.x's.

Stats:
Files to Edits: 1
New Files: 0
Templates to edit: 0
Templates to add: 0
Dont underestimate this hack though, its not a mini-mod .

Follow the instructions in the install file, and everything should go just fine .

Todo list:

• Your suggestions.

[Trigunflame]

Zach, it does not matter which type you use. Whatever is used to has to translate the message back into plaintext, thus there is no point to this hack whatsoever.

[Zachery]

Originally Posted by Trigunflame

Zach, it does not matter which type you use. Whatever is used to has to translate the message back into plaintext, thus there is no point to this hack whatsoever.

You could store the key and the encryption type in the database or in a file somewhere. Or even make it an extra option for two users to create their own keys to be shared with eachother.

Its more than possible to encrypt them so an external source who may gain access to your database will not be able to read their contents.

[Deaths]

How is a user going to tell which encryption (or whatever you want to call it) you're using?

Ofcourse, anyone can translate it back, else this hack wouldn't even be possible.

[Zachery]

Originally Posted by Deaths

How is a user going to tell which encryption (or whatever you want to call it) you're using?

Ofcourse, anyone can translate it back, else this hack wouldn't even be possible.

I didn't say it was easy, just possible.

[Deaths]

@Zach thats a very nice guide, but users would need to install it first, wouldn't they?

EDIT I'm too slow today :/

[Deaths]

I was replying to Trigunflame's post, but you just reply too fast

[Trigunflame]

Originally Posted by Zachery

You could store the key and the encryption type in the database or in a file somewhere. Or even make it an extra option for two users to create their own keys to be shared with eachother.

Its more than possible to encrypt them so an external source who may gain access to your database will not be able to read their contents.

That's my point. If a person got access to the db, what is to prevent them from using the key itself.

All they would have to do is try different variations of encryptions, and arragements of the keys in relation to the data encrypted.

Whats worse, if they were a member at vbulletin.org, they will Know the arrangement of the keys, just by viewing this hack.

[Zachery]

Originally Posted by Trigunflame

That's my point. If a person got access to the db, what is to prevent them from using the key itself.

Like I said, It does not need to be stored in the database. I would assume if someone needs something like that encrypted they will give the second user the key so they can decrypt it.

[Deaths]

But would the user installing this hack also need to install Mcrypt, or did I just read that wrong?

[Trigunflame]

Originally Posted by Deaths

But would the user installing this hack also need to install Mcrypt, or did I just read that wrong?

Mcrypt is compiled in most installations on *Nix.

And yes they would need it... however, there is no point to it. If you did use a key encryption, I would do it somewhat like;

encryption(plaintext password . PMData . passwordHashinVbulletin)

there has to be some form of user input, or they would be no point; as zach mentioned.