147 replies to this topic

[andrewmc]

UltraCrypt v1.1
Download Now (v1.1)
Download Now

About the DLL:
So its been over a year since I released SuperCrypt, my other encryption DLL. While it was pretty good it had one major downfall... it could only encrypt files using other files. I hope that UltraCrypt will set the encryption standard for Game Maker.

So whats so different about UltraCrypt? For starters it can use both files and standard strings as keys. Also it only has one command, and that is all it needs. Let me explain how this works:

dll_crypt("C:\filepath.exe","this_is_an_encryption_key",1,0);

The first argument is the file that is to be encrypted/decrypted. The second argument is the key. The third is the mode. If the mode is 1 (like in the above example) then the key has to be a string. If the mode is 2 then it works like this:

dll_crypt("C:\filepath.exe","C:\encrypt.exe",2,0);

The file, instead of being encrypted with a string, will be encrypted by using "encrypt.exe." This is perfect for people who liked the idea of SuperCrypt (that is encrypting/decrypting files with other files).

Other advantages include:
- Strong encryption that is almost unbreakable through brute force methods.
- No more seperate output files, the file that you select to be encrypted/decrypted is the file that gets encrypted/decrypted.
- No more specifying whether you have to encrypt or decrypt the file. If the file is already encrypted then it will automatically be decrypted, and vice versa.
- The DLL itself is only 16kb.
- Only takes 3 seconds to encrypt a 16mb file on my crappy laptop.

New features:
The fourth argument is new to version 1.1. If it is set to 1 then text file mode in enabled. This can only be used if the mode is set to 2 (a file to be used as the encryption key). It doesn't encrypt the spaces if your key file is a text file, allowing for faster and stronger encryption. Note: if this is set to 1 and the mode is also 1 then you will get an error. It should only be used if the mode is 2 and the file that you are using as the key is a text file.

Please comment on this if you download, its what keeps me making this stuff! As far as credits go, a little "UltraCrypt DLL made by andrewmc" in your GMC post is sufficient.

Edited by andrewmc, 29 September 2006 - 02:43 AM.

[IsmAvatar]

Still holding strong ever since I first thought up the idea 2 years ago with IsmCrypt. Great minds think alike.

[pj357]

Is it just an XOR encryption?

[andrewmc]

Still holding strong ever since I first thought up the idea 2 years ago with IsmCrypt. Great minds think alike.

<{POST_SNAPBACK}>

I remember you talking about that in the SuperCrypt topic. Although this can use files as keys I'd actually reccomend for most cases you use regular strings. Also this is a more stronger encryption than SuperCrypt. I hope this is very useful to everyone. Have you had a chance to try the example yet?

Edited by andrewmc, 28 September 2006 - 10:23 PM.

[andrewmc]

Is it just an XOR encryption?

<{POST_SNAPBACK}>

No, it is not.

[pj357]

I just tried the example, and your right. It's pretty cool though.

Edited by pj357, 28 September 2006 - 10:32 PM.

[IsmAvatar]

IsmCrypt used both files and strings as well. Yours is probably better because IsmCrypt hasn't been updated ever since it was released in 2004, though.

[metalhead1023]

This is awsome I will definatly use this in my future projects.

[andrewmc]

Update to v1.1:

Text file mode is now added. Taken from my edited post:

"The fourth argument is new to version 1.1. If it is set to 1 then text file mode in enabled. This can only be used if the mode is set to 2 (a file to be used as the encryption key). It doesn't encrypt the spaces if your key file is a text file, allowing for faster and stronger encryption. Note: if this is set to 1 and the mode is also 1 then you will get an error. It should only be used if the mode is 2 and the file that you are using as the key is a text file."

Also, thanks for the good replies

Edited by andrewmc, 29 September 2006 - 02:41 AM.

[Sindarin]

2 keys huh? This definately looks promising.

[andrewmc]

It can't actually use two keys at once but it can use either a file or a string as a key.

[Sindarin]

Hmm.. think you could implement both at the same time? That would empower encryption a lot.

[andrewmc]

Hmmm... I may try and impement that in the future. I have never heard of that being done before so it might be kinda unnessisary...

[nickydude]

Just had a play around with this and used a gm6 file to encrypt a text file:

Visit http://forums.gamema...howtopic=118601
for the latest on this topic.

Dont be a stranger! if your using this please put a post with
a link to your project or WIP! i dont need credits but would LOVE to know my
hard work is being put to good use! and would love to see it in use! =D

and as always .. all feedback is welcome!

and this was the result:

Ǽai,"ht¹º8/~˜È}˸‘hâôˆâàÍ0p*,nl/index.php?siowt–œ=118601
for the latest on this topib.

Dnnt ce a stranges! if your uŒing!thiÍ(pleare!pUT a!porÜ(wibh
"a lInk 4o ynuz projågt or WIP! i dont need cmªdik£ bj´ wpÊld?“OVZÀto?ÛnohÏmy?¢
h~Òd/W€rt™s?M•iqHÏpj\Ït`

Although encrypted, you can still make out parts of the text.

[IsmAvatar]

This is probably because the encryption scheme is simply addition, like the first beta version of IsmCrypt. In a GM6 file, there are many many 0-bytes, so when you add these to the original text, you still get the original text. The full release of IsmCrypt fixed this using some fancy encryption algorithms using the file as a key instead of a simple addition. You should do this too.

[Sindarin]

Hmmm... I may try and impement that in the future. I have never heard of that being done before so it might be kinda unnessisary...

I recall an program creating application which had file encrypting actions and
used tripleDES encryption with 2 keys.

Ǽai,"ht¹º8/~˜È}˸‘hâôˆâàÍ0p*,nl/index.php?siowt–œ=118601
for the latest on this topib.

Dnnt ce a stranges! if your uŒing!thiÍ(pleare!pUT a!porÜ(wibh
"a lInk 4o ynuz projågt or WIP! i dont need cmªdik£ bj´ wpÊld?“OVZÀto?ÛnohÏmy?¢
h~Òd/W€rt™s?M•iqHÏpj\Ït`

And yes, it needs more hiding...

[pj357]

I'm still wondering how you could encrypt a file to be smaller than it originally was.

[IsmAvatar]

You would have to both encrypt and compress the file. In the case of text files, only certain characters are used, and if done correctly, you could chop the filesize down to 3/4th the original size by realizing that the standard alpha-numeric table only takes up 6 bits out of the 8 bits that it now uses. Thusly, with a few bitwise operations, you could compress the text with a very simple algorithm.

[andrewmc]

Just had a play around with this and used a gm6 file to encrypt a text file:

Visit http://forums.gamema...howtopic=118601
for the latest on this topic.

Dont be a stranger! if your using this please put a post with
a link to your project or WIP! i dont need credits but would LOVE to know my
hard work is being put to good use! and would love to see it in use! =D

and as always .. all feedback is welcome!

and this was the result:

Ǽai,"ht¹º8/~˜È}˸‘hâôˆâàÍ0p*,nl/index.php?siowt–œ=118601
for the latest on this topib.

Dnnt ce a stranges! if your uŒing!thiÍ(pleare!pUT a!porÜ(wibh
"a lInk 4o ynuz projågt or WIP! i dont need cmªdik£ bj´ wpÊld?“OVZÀto?ÛnohÏmy?¢
h~Òd/W€rt™s?M•iqHÏpj\Ït`

Although encrypted, you can still make out parts of the text.

<{POST_SNAPBACK}>

Hmmm... thats funny, because when I encrypt that same text with a 15 char. string I get:

V
 
UHHK

\]WXXH]WQWT|   e l o  o\{e~! 

D   
  
 
 
 t
ua l   
  #,(J    
 e   5#9"   tf

or    g  t
 
 eS         
S X<fotf    BA    

  eY

Either you are encrypting using files or you should make your key longer. As you can see that is completely unreadable. Also, when you encrypt using file you have to take int account the type of file. Image files are good but others won't be (for example text files because of spaces). That why I implemented text file mode,set the last argument to 1 when encrypting using files for better results.

Edited by andrewmc, 29 September 2006 - 10:22 PM.

[Sindarin]

how many characters or numbers can the key be?

[andrewmc]

how many characters or numbers can the key be?

<{POST_SNAPBACK}>

I didn't set a limit. If you want it could be 100 characters.

[Knightmare]

Wouldn't it be invulnerable to Cheat Engine users? Since they can see lines of code in the memory.

[andrewmc]

Wouldn't it be invulnerable to Cheat Engine users? Since they can see lines of code in the memory.

<{POST_SNAPBACK}>

I would say no but if anyone wants to do any tests on this then go ahead. There are many programs that use encryption, and I just dont see why they would use it if they are vulnerable to memory scanning. If they arnt then I dont see any reason why this DLL would be.

[IsmAvatar]

If you read his post, you see that he was using a GM6 file as the seed, not a string. Like I said, there are so many 0's in GM6 files, that using a simple addition algorithm would produce no change when a 0 is met, so that many 0's would cause a poor encryption. That's not a sign that you should use a different file - it's a sign you should use a better encryption algorithm, like IsmCrypt did.

[andrewmc]

If you read his post, you see that he was using a GM6 file as the seed, not a string. Like I said, there are so many 0's in GM6 files, that using a simple addition algorithm would produce no change when a 0 is met, so that many 0's would cause a poor encryption. That's not a sign that you should use a different file - it's a sign you should use a better encryption algorithm, like IsmCrypt did.

<{POST_SNAPBACK}>

Using a different file thatdidn't contain so many 0's would be a solution. I really don't know too many reasons why someone would pick the file method over the string though. I really just added that in so the dll wouldn't be so plain.

[Potnop]

Awesome, U fixed that read-only problem right?

The only problem with not having an output file is that if the game crashes and the file is decrypted its not protected. I'll probably jsut do a copy paste of a file into the temp directory somehow.

[andrewmc]

Awesome, U fixed that read-only problem right?

The only problem with not having an output file is that if the game crashes and the file is decrypted its not protected.  I'll probably jsut do a copy paste of a file into the temp directory somehow.

<{POST_SNAPBACK}>

I never thought of that. You might want to try quickly decrypting it then loading the rescource them immediatly encrypting it again. And yes, the files shouldn't be read only.

[andrewmc]

anyone else try the dll?

[TyrantX]

I just tested it and it works perfectly. It has a VERY strong encryption even with only a few letters. I will most likely use this!

[Smarty]

I have trouble seeing any practical use in this.

It's fun to use if you want to send someone a file and both parties have the key string or file. But as a local encryption method it has major vulnerabilities.

For example, if the encryption is file-based, you know that the key file is contained within the game folder. So all you have to do is run this DLL past the other files in the same directory.

Or, since GML scripts in running executables aren't quite as protected as people think they are, you could simply look up the file or string used as a key and run it past the file - and you're done.

There are many programs that use encryption, and I just dont see why they would use it if they are vulnerable to memory scanning.

<{POST_SNAPBACK}>

If you are referring to this forum, then the problem is a complete lack of knowledge on the subject. Any encryption is vulnerable when you deliver the key with it, no matter how good you hide it.

And a file and a GML script aren't good places to hide a key.

Edited by Smarty, 03 October 2006 - 10:24 AM.

[Invero]

Very Nice I Already Found Very Good Use For This To Protect My Small Little Game Files B)

But What Sucks About This Is That It Cannot Protect / Encrypr .bmp's ect... or Sprite Images ???

Will The Next Update Be Able To Encrypt Image Files ?
It Would Be More Helpfull And It Would Be Then Considered the Best Encryptor For Me

But Besides Everything Else Awesome Work !!!!

Hope You Answer Back Before Tommorow That Is If Your On lol

[Reshure]

It can encrypt image files. It works for me.

[Alex]

Edited by Alex, 25 January 2009 - 06:36 AM.

[mattn]

Hi,
I've spent the past two years researching encryption methods and writing 4096 bit encryption and am attempting 10000 bit encryption, but sorry for sliding away from the topic at hand. I'd suggest that you try to re-write the program using the Rijndael encryption algorithm at least at 512 bits, preferribly 1024 or 2048 or if you have the skills 4096 bit encryption. It's just about the strongest encryption algorithm created to date, but only runs really smoothly at 2048 bit encryption or higher, without any corruption and on any file.

from mattn

[Alex]

Edited by Alex, 25 January 2009 - 06:36 AM.

[39ster]

"Best File Encryption For Gm" - What encryption algorithm are you using?

[THE Stefan]

It's funny to see how just saying its secure makes everybody think it is.

it is still possible to make strong encryptors which can survive brute force

<{POST_SNAPBACK}>

I have to correct you there, brute force can crack any encryption algorithm. It just takes time, lots of time.

It doesn't encrypt the spaces allowing for stronger encryption.

In fact, not encrypting half the file makes the encryption weaker.

[Mentat]

Geez man... give people a piece a lettuce and they demand a salad...

It is true that no encrytion method is completely invulnerable or unbreakable... however that point of sufficient encrytion is to prevent the vast majority of people from being able to break it. He has accomplished this.

I think he has done the community a great service by providing this DLL.

Good Job!

[localmotion34]

...and am attempting 10000 bit encryption

man, you must be hiding some heavy **** on your computer if you need somthing that strong.

Although, key length dosn't mean anything if you don't know how to hide it. However, even with GM's security issues, it is still possible to make strong encryptors which can survive brute force. At least, I know how.

<{POST_SNAPBACK}>

If you encrypt a file using RC4 in a DLL, it an only be correctly decrypted with the right key. that key gets passed to the DLL as an argument from the program.

There is no known way as of now for a person to peek into memory areas through a network to internal stack registers to grab the key in memory.

if the hacker has the program and file in hand, he must know where to look on the system to find the key, or where in the code. else, the key can be based on user input, in which case the hacker has no idea what the key is.

if you use EXE cryptor to morph the sections of your code that contain the key, almost no one except Seek 'N Destroy, iNfEcted or RELOADED would be able to break it.

additionally, encryption keys can be hardware dependent, as a combination of hard drive serial, processor seral, windows activation key ect.

even if a hacker stole a copy of your file, he would have absolutely no idea how to reconstruct your hardware fingerprint.

Edited by localmotion34, 28 October 2006 - 01:14 AM.

[Alex]

I have to correct you there, brute force can crack any encryption algorithm. It just takes time, lots of time.

There is a line where brute force would be as effective as going through every byte combination to unlock a file.

It's like saying, if I make a program to generate a file by going through all the byte combinations, then I will eventually get the decrypted file. Which is true..., but, its possible for brute force to detect many valid files because of the large number of combinations, and so you wouldn't know which file it really is. Keep in mind, were talking about billions of billions of combinations. Too many valid files would be impractical.

Correct me if i'm wrong though...

Edited by /\lex, 28 October 2006 - 03:34 AM.

[Invero]

It can encrypt image files. It works for me.

<{POST_SNAPBACK}>

Wierd For me it works for everything execpt for images or sprite files ....
maby I am doing somthing wrong ....
I might re-Download it.
Yes all encryption programs can be cracked but I also am a type of person that likes the job to be done fast well thats me and seccond of all it may be true that this ecryptor is not that greate but at least its better then nothing and that I am happy about.

Thanks ~

(If anyone else has this problem why I cant seem to encrypt image files / sprites please tell me what you did to fix up this problem Thank You.)

I am using Gm 6.1 Reg

[SquareWheel]

As long as it was the best encryption possible, I wouldn't care if it took an hour. Decrypting, probably not as long though.

[Bander]

"Best File Encryption For Gm" - What encryption algorithm are you using?

<{POST_SNAPBACK}>

I'm curious as well.

Anyway thanks for the awesome DLL.

[Big J]

Wow, this is much faster then the other encryption I was using! When I release the next version of my game (logo currently in my signature), you'll be in the credits... because the next version will actually have credits.

[Lord Sturm]

I think you should add a function too see if a file is encrypted with the dll or not. That way, you could encrypt the file again in the game end event if it was not already encrypted.

[Big J]

Well, for example, when working with a text/ini file, you would do something like this:

For text files

decrypt it if it exists, and you are appending
open for writing/appending
write it
close it
encrypt it

For ini files:

decrypt it
open it
write ini value(s)
close the file
encrypt it

When encryption is used correctly, the files written should remain encrypted at the end of the game.

There is no need for this DLL check function.

If you are loading encrypted external resources through code, you should:

decrypt
load
encrypt

Of course, the DLL only has one command, and that is all it needs.

[iwulff]

i have seen some posts in this topic, that said that there a some flaws with this dll. Now i was wondering, is this a good tool to use for me, to encrypt and decrypt my save files?

[??? Lauria]

This gives me an idea for a game - obviously if you put more than one encryption on something they all have to be decrypted for it to work - and in order.

So why doesn't someone make a game where there are 10 puzzles, it doesn't matter which order you solve them in but they each give out a code, and you have to enter the codes in the order of the levels to get a password to enter into the game itself to get a prize?

[JonathanPzone]

I wouldn't say this was the best but some protection is better than nothing at all isn't it?
Good job on the dll.

~JPZ

[royboyjoytoy2]

nice dll
8/10
just what i needed