Encryption and decryption password files

TraySafe provides you with the large selection of crypto algorithms: 19 cipher algorithms and 10 hash algorithms implemented from TraySafe 4.5.
You can use any of provided algorithms due to your internal politics or external regulations.

TraySafe saves all accounts information into the defined structure and encrypts it into the file before saving.
Before decryption TraySafe prompts a user to provide the password and hardware password and uses a given information to decrypt the data read from the file. After that TraySafe recognizes the structure to recover accounts information from decrypted memory. If all is ok and a password provided by user in this session is right, TraySafe recovers accounts information and displays for use, edition and modification.
If the password provided by user is wrong (or hardware hash differs from used for encryption), after decryption TraySafe gets garbage in memory. Due to used cipher algorithms all memory will be messed up even if 1 bit is wrong. TraySafe tries to recognize the defined structure of a password file, but cannot find labels to recover an account information.

Note: There is no backdoors to check whether the password is right or not.

After decryption TraySafe checks if any accounts are in the decrypted password file. If no accounts found, it seems to be like the password provided by user was wrong and TraySafe informs about it with suggestion to enter a new password.

Note: The only way to get a hint to remember the right password is using password reminded message.

Note: TraySafe offers user to use a hardware hash and adds it into the password for encryption&decryption. The hardware hash is a suitable feature but it decreases the level of security and can cause the situation, when you have to change your hardware configuration or computer - you will not be able to recover accounts information. Beware this situation and use backup with the ordinary password. The hardware hash depends on computer hardware and current user name. More about hardware passwords you can read here.

Note: TraySafe provides users with a suitable feature - it can save a password into the password file, protect it with the master password and decrypt file automatically without prompting user each time to enter a password. This feature is called constant password and you can read more about it here.
But it is really insecure feature if you don't protect your computer. But you can use the hardware hash - in the password file it is possible to save only that information which hardware hash uses (1 bit), but it generates on the decryption process based on the current hardware configuration. In this case all is ok and this file can be decrypted only on your computer - secure level is satisfactory.

Applied algorithms can be chosen from the given list at login&password screen on saving operation.

TraySafe uses open source library DCPcrypt Cryptographic Component Library to encrypt and decrypt password files - you can check the sources of encryption/decryption units to take a proof about the strong level of protection.

More about DCPcrypt Cryptographic Component Library you can find at http://www.cityinthesky.co.uk/

Ciphers
Name	Block Size	Max Key Size*
Blowfish	64 bits	448 bits
Cast-128	64 bits	128 bits
Cast-256	128 bits	256 bits
DES	64 bits**	64 bits
3DES	64 bits	192 bits
Ice	64 bits	64 bits
Thin Ice	64 bits	64 bits
Ice 2	64 bits	128 bits
IDEA	64 bits	128 bits
MARS	128 bits	1248 bits
Misty1	64 bits	128 bits
RC2	64 bits	1024 bits
RC4	N/A	2048 bits
RC5	64 bits	2048 bits
RC6	128 bits	2048 bits
Rijndael (AES)	128 bits	256 bits
Serpent	128 bits	256 bits
TEA	64 bits	128 bits
Twofish	128 bits	256 bits

* although the quoted maximum key size may be extremely large, it doesn't mean that the algorithm is secure to the same level.
** a 64bit key is used for DES then every 8th bit is discarded (parity), so the effective size is 56 bits.

Hash Algorithms
Name	Digest Size
Haval	128, 160, 192, 224, 256 bits*
MD4	128 bits
MD5	128 bits
RipeMD-128	128 bits
RipeMD-160	160 bits
SHA-1	160 bits
SHA-256	256 bits
SHA-384	384 bits
SHA-512	512 bits
Tiger	192 bits

Note: This information is provided from DCPcrypt Cryptographic Component Library docs and can be found at http://www.cityinthesky.co.uk/