Re: Looking for old file encode.e
- Posted by DerekParnell (admin) Jun 17, 2013
- 1345 views
Something i did not understand ..., the recipient would need the same code the sender used, and the clear password beforehand, to generate the encrypted password to compare to what was sent by the sender. ...
Or am i missing something?
No, you are not missing something. This does not use a public/private key mechanism. The keys, or access to the (next) keys, needs to be given via an entirely different mechanism. The better way of doing this is using some sort of one-time-pad that all legal parties to the data know about. It would be a security issue to keep this protected so this is not expected to be used for long-term sensitive data. Another method is to use a public-private key system (e.g AES256) to generate the keys for encoding.
