Dear Ben,

That's great news :-) I'm really impressed. Reading your emails about what
you have found out abut encryption and how was for me like reading very
interesting detective story.
This thought came to me: if SPSS encryption is so poor, maybe we should
think about better encryption as additional option (working only on PSPP).
It would be an option only for PSPP users, but users of previous versions
of SPSS also cannot read encrypted files with encryption designed by SPSS.
The difference is (if they have a password) they can always get PSPP, open
it and save as non-encrypted file readable for any SPSS version (if they
insist on using it ;-) ).

warm regards,
Michal


> Date: Tue, 29 Oct 2013 22:55:13 -0700
> From: Ben Pfaff <b...@cs.stanford.edu>
> To: Basti?n D?az <diaz.bast...@ymail.com>
> Cc: "pspp-users@gnu.org" <pspp-users@gnu.org>
> Subject: Re: encrypted SPSS .sav files
> Message-ID: <20131030055513.ga22...@blp.benpfaff.org>
> Content-Type: text/plain; charset=us-ascii
>
> I've now written code that reliably reads an encrypted .sav file, given
> the password.  I'm concerned about poor crypto design, so I'm going to
> ask people who are more expert than me to evaluate the design defects
> before I publish the code.
>
> I've also written a program to decode an encoded password to obtain the
> human readable password.  (This is much less interesting, but still
> useful for interoperability.)
>
>
>
> ------------------------------
>
> _______________________________________________
> Pspp-users mailing list
> Pspp-users@gnu.org
> https://lists.gnu.org/mailman/listinfo/pspp-users
>
>
> End of Pspp-users Digest, Vol 89, Issue 28
> ******************************************
>
_______________________________________________
Pspp-users mailing list
Pspp-users@gnu.org
https://lists.gnu.org/mailman/listinfo/pspp-users

Reply via email to