SC with MSRC4 Encryption Secure? The rc4.key is extractable

[DanielHughes]

Hi all,

Just a brief on my setup:

I have a vncserver with ultravnc repeater running on it. Clients make a secure connection into the server externally and supporters make a secure connection to the server internally. Both Client and Supporters use a generated rc4.key file. The customer downloads the sc.exe file and takes the relevent steps to make a connection.

The question i have is that when the client downloads the sc.exe, within that self extracting zip file is the rc4.key....... Therefore all someone has to do is download the sc.exe file and they have hold of the encryption method key and key length... am i right?

I guess the question is am i able to make the self extracting exe secure? so that no-one can get access to the rc4.key file?

Regards

Dan

[Rudi De Vos]

Key can be extracted.
As the plugin need to read the key, it's impossible to prevent this.

[DanielHughes]

Oh, its not that secure then?

Is is possible to secure the .exe with somesort of password encrpytion? like winzip password protect?

Regards

Dan