Encryption Software Review

ShyFile

Features:

Encrypts email messages; works independently of email software.
Allows strong encryption (192- to 6144-bit symmetric key encryption) using proprietary algorithm. Randomly generates 6144-bit keys.
Gives the user a choice of attaching the encrypted message (as a file) or pasting the encrypted message (as text).
The encrypted message includes plain-text English instructions to help the recipient decode the message.
The recipient does not need to install the software; decoding requires only a web browser with JavaScript.

Impressions:

Shyfile has an intuitive, straightforward interface. I did not need to refer to the documentation to use the program. A helpful pop-up window appears the first time a user encrypts a message, to explain how to use the ciphertext. (It also has a box to check if you don't want to see the help message again.

How It Works:

After I picked the installation directory, ShyFile asked me to type in 256 characters to initialize the random key generator. After I did that ShyFile finished installing and added itself to my Start Menu.
The program enabled me to create a key by writing or pasting a key into the key box dialogue window, or pressing the Random Key button and letting ShyFile generate a 1024-character key. I hit "Random Key," and ShyFile prompted me to save the key so that I could give it to the recipient of the encrypted message. The default option saves the key to C:\My ShyFiles.
To encrypt a message, either type directly into the Input Box dialogue window or paste it in, then press the "encode" button. Either way, Shyfile turns the plaintext into ciphertext. Once the message is encrypted, you have the option of either pasting the ciphertext into an email message or attaching a file that ShyFile can generate (as a .hta file).
I tested the program by typing some text into ShyFile's message field and hitting "encode." ShyFile asked me where to save the encrypted file. The default location was C:\My ShyFiles. After I saved the encrypted file, the program instructed me to attach it to my outgoing email message.
The recipient uses his or her web browser to decrypt the message. If you've sent the encrypted message as an attachment, the recipient can either double-click the .hta file icon to launch a web browser, or drag the message into a web browser if it is already open. In either case, the web browser prompts the recipient for the key. (Remember that with symmetric encryption the recipient needs the same key the sender used to encrypt the message.)
I decrypted a ciphertext email message by opening the message and following the plain-text instructions at the end of the message to "Decode online at http://www.shyfile.net/d.htm." I went to the web site, pasted the encrypted text into the box and hit the "Decode" button. A JavaScript box popped up and prompted me for the key.
You can try this yourself by going to http://www.shyfile.net/d.htm and pasting the following encrypted message into the appropriate box:


(((((0400ACHCLBGHEPIOFJJHPLJOFIJAPHOAIDBJEGBMIOHONGALJ

NFMMFINKPNFBIKJKLBLCPEHLPBDLDJEMFHOMPHLCMDLNGILOECLFFI

CNHOEAODJMBLKCDCBAEALAJLCEBBBFIGIOOHGBOPHBJDEPGDLOOBOJ

PBBCIHAIJOHLMHJIMJCGILHMCAKKGNNPMAJKHGBGCNDLFDGMBKGGNJ

ODPDAEKKIPLALIKKPHDFIPOBBEDFMKKBLNMEEPNMMMOIDIPDBMGOEE

CDNMNKOIAIAHICOACNAGBDDPKPNKAOJPFGPIFCGFDLLOCMEGIMNOHD

GMAAEOJEKJIDNIGBHBHNBKENNOGILFAMMOIJDBDAHHNIKCBCFEIPNJ

NMIGGCIMKDGACMGHFGKLMFDNAKOELAOHDJCGGDEDAGDAJNHHAOBJME

KJKGMFGIKPCOJIFFDEHFONKAPHP)))))

Use this key to decode the message: netaction.org-encryptionfornonprofits
When I closed the ShyFile program, it asked me if I wanted to clear my clipboard for security purposes. I agreed, and it was done.
I found one drawback to ShyFile when I uninstalled the program: the instructions were in German. The uninstaller displayed a four-button prompt. Here is the English translation of the German text that appears on the buttons, from left to right:
- -Keep this file
- -Remove this file
- -Keep all files ("Remove none")
- -Remove all files

Back to Reviews | Back to Guide