home
***
CD-ROM
|
disk
|
FTP
|
other
***
search
/
PC-SIG: World of Utilities
/
PC-SIG's World of Utilities (PC-SIG) (1994).iso
/
UTI
/
DISK2004.ZIP
/
MERLIN.DOC
< prev
next >
Wrap
Text File
|
1991-01-25
|
4KB
|
133 lines
PC-Merlin V2.2-1
================
Overview
---------
PC-Merlin implements the DOS 'copy' program with data encryption. This
allows the user to copy multiple files to a target disk or directory,
encrypting the data as the copy proceeds.
Such a function is particularly useful to users who need exchange
sensitive data with remote users, or who need to keep offsite backups
of such data.
PC-Merlin encrypts data using the DES (Data Encryption Standard) algorithm
in ECB, CBC, CFB, CFB8, OFB, OFB8 modes. There is currently no known general
solution to this algorithm.
PC-Merlin syntax
----------------
MERLIN input output /K:keyvalue /E /D /S /B /M:mode /V:vector
input The source file(s)
output The destination file(s)
/K:keyvalue Keyphrase or DES 64 bit hex key
/E Encrypt the input
/D Decrypt the input
/S Secure erase the source after processing
/B Brief mode - suppress block counting for speed
/M:mode DES mode: ECB, CBC, CFB, CFB8, OFB, OFB8, default is ECB
/V:vector Initialization vector, default is 12-34-56-78-90-ab-cd-ef
The input & output files must be supplied as parameters 1 & 2 respectively.
The order in which the switches are supplied is unimportant.
Keyvalue expression:
The keyvalue may be entered in one of 2 forms:
1. 64 bit Hex. This is a 64 bit or 8 byte Hex value entered thus:
/K:1F-6C-F1-37-1A-D4-71-0F
2. Keyphrase. This is any arbitrary sequence of characters such as
an easily remembered phrase. The minimum length allowed is 8
chars, maximum 64 chars. Two rules should be considered when
selecting keyphrases:
1. Easily remembered phrases are often easily guessable
2. Long phrases produce more secure keys than short ones
An example of a good (ie: secure) keyphrase would be:
/K:slowaheadallengines
Cipher function:
The user selects the cipher function, Encrypt or Decrypt with the /E or /D
switches. /E indicates that encryption is required, /D indicates that dec-
-ryption is required. If both switches are specified, then the last one on
the command line has precedence.
Secure erase:
It is often desirable to erase the input file after processing. This option
is selectable by specifying the /S switch. The secure erase function erases
files by repeatedly overwriting them with a changing pattern. After the file
data has been overwritten, it is then deleted.
Example:
A user wishes to copy all data from a directory to floppy, which will be
stored off-site:
C:> merlin c:\secrets\*.DBF a: /K:nevertalktostrangers /E
The user may choose to erase data after it has been copied thus:
C:> merlin c:\secrets\*.DBF a: /K:nevertalktostrangers /E /S
If the data had to be restored from floppy, the following command would
be used:
C:> merlin a:*.* c:\secrets\*.DBF /K:nevertalktostrangers /D
Merlin v2.2 New features
------------------------
C1 Recompiled under Microsoft C v6.0 (previously v5.1)
Merlin v2.0 New features
------------------------
F1 DES chaining modes implemented. All common DES modes are now supported,
these being:
ECB - Electronic code book (Default)
CBC - Cipher block chaining (Recommended)
CFB - Cipher feedback (64 bit)
CFB8 - Cipher feedback (8 bit) (V. Slow!)
OFB - Output feedback (64 bit)
OFB8 - Output feedback (8 bit) (V. Slow!)
If unspecified, ECB mode will be used. Other modes can be selected
by specification of the /M: switch, for example /M:CBC selects cipher
block chaining mode.
F2 /V Initialization Vector switch. The initialization vector used in
CBC, CFB, CFB8, OFB, OFB8 modes may be specified via the /V:vector
switch. If unspecified, the IV will default to:
/V:12-34-56-78-90-ab-cd-ef
F3 /B brief mode switch. Specification of this switch causes Merlin to
not display the current block count during file processing. This
improves overall performance.
F4 DES performance. The performance of DES encryption/decryption has been
improved by 300%.
F5 Secure erase performance. MERLIN now implements the FASTerase erasure
algorithm, with 300% performance improvement.