[Gambas-user] Need to have blowfish en- and decryption

[Rob]

On Wednesday 14 July 2004 09:09, Brant Wells wrote:
> functions, like the RTLMoveMemory...  But I also don't see the
> problem with creating our own 'encryption' routines just for
> Gambas...

In fact, I think rolling your own "crypto" and then releasing it 
for general consumption by gambas users would be significantly 
worse than the current situation where there's no crypto in 
gambas at all.  This is because it would give gambas users who 
might not know any better a false sense of security when using a 
weak and untested cipher.  You might as well implement rot13 
because at least then no one expects it to be uncrackable.

I gotta think Schneier mentions this concept somewhere on his 
site, maybe in a FAQ or something.  Implementing blowfish as a 
Gambas component or library seems like it would be a great first 
step towards full crypto support in gambas though (with the 
ultimate goal being a GPG component that managed keys and 
everything... far off in the future. ;) )

Not a crypto expert here, just been exposed to a lot of security 
pitfalls over the years at various system administrator gigs.

Rob