New Beta plugin to play with...

[scovel]

ARC4Plugin

Based on OpenSSL RC4 code. No keyfile required. Uses an MD5 hash of your password to generate a 128bit key.

IT IS NOT COMPATIBLE WITH MSRC4PLUGIN!

It is as fast or faster than Microsoft's RC4. It is 3x faster than AESPlugin. (AES is more secure, and more processor intensive.)

IT IS A BETA. DON'T DEPLOY IT IN PRODUCTION SYSTEMS.

Enjoy!

Sean

[jp0469]

Do you think that the new plugin actually removes a layer of security? I realize that traffic cannot be intercepted but with a listening server on my home PC I like knowing that even if someone got my password, they still cannot connect without my key. Also, is an 8-character passwork still the max for UltraVNC?

[scovel]

Do you think that the new plugin actually removes a layer of security?

Yes, I do. Using a pre-shared key, you have 2 forms of ID they have to break. a 128bit key, and a password.

Also, is an 8-character passwork still the max for UltraVNC?

Yes. You are correct. But Sam is working on that for me.

See this thread for a comment I made about plugin security and password length: [topic=2639][/topic]


Sean

[jp0469]

Thanks, great info.

[redge]

Scovel

What is the reduction of the encrypted traffic brought with this method, because I noticed no visible difference between MSRC4 and ARC4 (has part the method of autentification)
1 % ?

[scovel]

Redge,

I'm not sure what you are asking...

It appears (to me) that the computation done by ARC4 is a little faster (less latency?) than the MCRC4 plugin. I get this from monitoring the kbits/s in the status window. It appeared to me that the MSRC4 plugin was pushing 15-17,000 kbits/s while the ARC4 plugin was pushing 17-20,000 kbits/s.

Does it matter? Probably not. Why bother with it? It should run 128Bit on any 32Bit version of Windows without having to deal with High Encryption packs and export-only versions.

Sean

[redge]

scovel,

you answer is OK for me, thank you

[redge]

ARC4plugin (used 8 caracter standard vnc password)
connection OK work very well for long time

RC20.5 server LAN 100Mbits/s + ARC4plugin XP SP2 pro
RC20.6 viewer WLAN 54mbits/s WPA-PSK TKIP +ARC4plugin XP SP2 home

quick options=auto or lan
options.vnc deleted before 1st connection
options.vnc not deleted after 1st connection was made.
server was stoped and restarted before 1st connection was started.

Billion Wireless ADSL VPN Firewall Router
BIPAC-7402G
(strong wlan, better than zyxel p660hw-61 )