(April 29, 2012 at 5:11 pm)Tiberius Wrote: Sure, but the first rule of security is to assume that an attacker knows as much about your system as possible, since they can always figure it out in the end. The point of a secure system is that it is secure even if the attacker knows how it works (since the real security is in the password / key).
^^^ This ^^^
Provided that a standard encryption library is used (and why would you roll your own?), it's a trivial matter to analyze the object code and figure out what's going on. Cracking the key is another issue - which is why strong keys are important.
While it's a cool feature, I personally think that if file secrecy is an issue, storing them in an encrypted container (e.g. TrueCrypt volume or similar) is a better strategy.
