|
Information about me, how to
contact me and the imprint.
Open-Source applications, free C++
classes and other free sources.
Articles, papers, publications
and other texts.
Articles |
Here you find all my articles. New ones are listed at the top, older ones are at the bottom of the list.
Please note that the listed dates are the dates when the articles were originally
published. Up to now, most of the articles have been revised and updated.
CSecureEditEx - A more secure edit control
|
The CSecureEditEx class is an improved version of the CSecureEdit class, but also has
some new limitations. It offers new process memory protection, but has the limitation
that you cannot select any ranges of characters in the control. Memory dumpers
are ineffective against CSecureEditEx controls, since the entered passwords
are encrypted in-memory all the time.
Local copy:
Article,
[Print version]
Published at:
The Code Project - http://www.codeproject.com/editctrl/SecEditEx.asp
|
KeePass Password Safe - An Introduction
|
Today you need to remember many passwords. You need a password for the Windows network logon, your e-mail account,
your homepage's ftp password, online passwords (like CodeProject member account), etc. etc. etc. The list is endless.
Also, you should use different passwords for each account. Because if you use only one password everywhere and someone
gets this password you have a problem... A serious problem. He would have access to your e-mail account, homepage,
etc. Unimaginable.
But who can remember all those passwords? Nobody, but KeePass can. KeePass is a free, open-source, light-weight and
easy-to-use password safe for Windows.
The program stores your passwords in a highly encrypted database.
Local copy:
Article,
[Print version]
Published at:
The Code Project - http://www.codeproject.com/tools/KeePass.asp
|
CTrueRandom - Getting True Random Numbers
|
Sometimes you need true random numbers. True random numbers are, in contrast to numbers generated by a
pseudo-random number generator (PRNG), really random, i.e. there are no patterns and they cannot be predicted.
Pseudo-random number generators are functions that compute random-looking sequences of numbers. For most cases this is
sufficient, but some applications need numbers that are really random.
You need true random numbers for example in the field of cryptography, game-playing and various scientific calculations.
CTrueRandom is completely free open-source. You are allowed to do anything with it what you want. But it would be nice if
you mention me somewhere in the docs of your application. But because it is completely free, there also is no warranty of
any kind. Use it on your own risk.
Local copy:
Article,
[Print version]
Published at:
The Code Project - http://www.codeproject.com/cpp/truerandom.asp
|
Secure Edit Control
|
Today, security becomes more and more important. Very secure encryption and authentication algorithms are designed
(e.g. AES, SHA). But the best algorithms are useless, if crackers bypass these systems by simply exploiting simple
security bugs of operating systems...
As you probably are thinking already, I am talking about the Windows Edit controls. Most "normal" Windows programs
use Edit controls, to get passwords from the user. Normally you see stars (*) when you type something into an edit box,
that has the password flag. Unfortunately, these edit controls are not secure. There are various methods for malicious
programs and crackers to get the password.
The first method is to simply remove the password flag. Windows doesn't do anything against programs manipulating the
window styles of other processes. Just remove the ES_PASSWORD flag of an Edit box and zosh! You see the entered text.
Another method is to read out the text of the Edit box. Use the Windows API function GetWindowText on the Edit control and
you get the text, even if you are not the owner of the control (i.e. another process), and even stars are displayed.
Therefor I created and present you now a control, which is very user-friendly (Secure Edit controls look like normal Edit
controls), and which is immune to these spy tools, i.e. the methods above don't work at Secure Edit controls.
Local copy:
Article,
[Print version]
Published at:
The Code Project - http://www.codeproject.com/editctrl/secureedit.asp
codeguru.com - Passwords and Security
|
ReHash - A console-based hash calculator
|
ReHash is a free, open source console-based hash calculator.
You can disable hash algorithms selectively per command-line if you don't need or like them, you can choose if
you want to use recursive directory scanning or not.
This tool is ideal for webmasters who wish to provide their users hash values of their (downloadable) files.
The complete hashing process can be automated by using a shell/batch script. No additional user interaction
is needed (i.e. the program won't ask for anything, it's just using the command-line).
Local copy:
Article,
[Print version]
Published at:
The Code Project - http://www.codeproject.com/cpp/rehash.asp
|
CryptoCtx - Encryption Per Context Menu
|
An introductory article to CryptoCtx - the cryptographic shell extension for the Windows Explorer.
In this article you will learn how to create simple context menu extensions for the shell (Windows explorer) using ATL-COM.
We will get in touch with STL, which we will use to create a filename array.
Additionally I give a brief introduction to file encryption and user password hashing.
Local copy:
Article,
[Print version]
|
CSHA1 - A C++ class implementation of the SHA-1 hash algorithm
|
The Secure Hash Algorithm SHA-1 is a cryptographically secure one-way hash algorithm. It was designed by the NIST
(National Institute of Standards and Technology), along with the NSA (National Security Agency). SHA-1 is based on
the Message Digest MD4 algorithm design principles by Ronald L. Rivest of MIT.
The CSHA1 class is an easy-to-use wrapper class for the SHA-1 hash algorithm.
Local copy:
Article,
[Print version]
Published at:
The Code Project - http://www.codeproject.com/cpp/csha1.asp
|
E-Grabber - An E-Mail Searching Utility
|
Have you ever lost an e-mail address? You know that it must be somewhere in some document on your hard-drive?
E-Grabber searches for e-mails in files on your hard-disk! Several filters are available (file filter, e-mail suffix filter, etc.).
Local copy:
Article,
[Print version]
Files:
Project files
Published at:
» 'PC Magazin' 1/2002 (a German computer magazine)
|
|
|