|
TraySafe password manager with Strong Encryption is the safest way to store your passwords!
TraySafe password manager stores your passwords and provides you with a large selection of crypto algorithms: 19 cipher algorithms and 10 hash algorithms implemented from TraySafe 4.0.
You can use any of provided algorithms due to your internal politics or external regulations.
TraySafe stores all passwords' and accounts' information into defined structure and encrypts it into file before saving.
Before decryption TraySafe prompts user to provide password and hardware password and uses given information to decrypt data read from file. After that TraySafe recognizes the structure to recover accounts' information from decrypted memory. If all is ok and password provided by user in this session is right, TraySafe recovers accounts' information and displays for use, edition and modification.
If password provided by user is wrong (or hardware hash differs from used for encryption), after decryption TraySafe gets garbage in memory. Due to used cipher algorithms all memory will be messed up even if 1 bit is wrong. TraySafe tries to recognize defined structure of password file, but cannot find labels to recover account information.
Note: There is no backdoors to check whether the password is right or not.
After decryption TraySafe checks if any accounts are in the decrypted password file. If no accounts found, it seems to be like password provided by user was wrong and TraySafe informs about it with suggestion to enter a new password.
Note: The only way to get a hint to remember the right password is using password reminded message.
Note: TraySafe offers user to use hardware hash and adds it into password for encryption&decryption. Hardware hash is a suitable feature but it decreases the level of security and can cause a situation, when you have to change your hardware configuration or computer - you will not be able to recover accounts' information. Beware this situation and use backup with ordinary password. Hardware hash depends on computer hardware and current user name. More about hardware passwords you can read here.
Note: TraySafe provides users with suitable feature - it can store password into password file, protect it with master password and decrypt file automatically without prompting user each time to enter password. This feature is called constant password and you can read more about it here.
But it is a really insecure feature if you don't protect your computer. But you can use hardware hash - in password file it is possible to store only that information which hardware hash uses (1 bit), but it generates on decryption process based on current hardware configuration. In this case all is ok and this file can be decrypted only on your computer - secure level is satisfactory.
Applied algorithms can be chosen from given list at login&password screen on saving operation.

TraySafe uses open source library DCPcrypt Cryptographic Component Library to encrypt and decrypt password files - you can check the sources of encryption/decryption units to take a proof about strong level of protection.
More about DCPcrypt Cryptographic Component Library you can find at http://www.cityinthesky.co.uk/
Below you can find the list of provided cipher and algorithms.
| Ciphers |
| Name |
Block Size |
Max Key Size* |
| Blowfish |
64 bits |
448 bits |
| Cast-128 |
64 bits |
128 bits |
| Cast-256 |
128 bits |
256 bits |
| DES |
64 bits** |
64 bits |
| 3DES |
64 bits |
192 bits |
| Ice |
64 bits |
64 bits |
| Thin Ice |
64 bits |
64 bits |
| Ice 2 |
64 bits |
128 bits |
| IDEA |
64 bits |
128 bits |
| MARS |
128 bits |
1248 bits |
| Misty1 |
64 bits |
128 bits |
| RC2 |
64 bits |
1024 bits |
| RC4 |
N/A |
2048 bits |
| RC5 |
64 bits |
2048 bits |
| RC6 |
128 bits |
2048 bits |
| Rijndael (AES) |
128 bits |
256 bits |
| Serpent |
128 bits |
256 bits |
| TEA |
64 bits |
128 bits |
| Twofish |
128 bits |
256 bits |
* although the quoted maximum key size may be extremely large, it doesn't mean that the algorithm is secure to the same level.
** a 64bit key is used for DES then every 8th bit is discarded (parity), so the effective size is 56 bits.
| Hash Algorithms |
| Name |
Digest Size |
| Haval |
128, 160, 192, 224, 256 bits* |
| MD4 |
128 bits |
| MD5 |
128 bits |
| RipeMD-128 |
128 bits |
| RipeMD-160 |
160 bits |
| SHA-1 |
160 bits |
| SHA-256 |
256 bits |
| SHA-384 |
384 bits |
| SHA-512 |
512 bits |
| Tiger |
192 bits |
Note: This information is provided from DCPcrypt Cryptographic Component Library docs and can be found at http://www.cityinthesky.co.uk/
|