ASProtect 1.x vs 2.x protection strength

Hi,

I'm a registered user of ASProtect 1.x. I've been using it for over 3 years now and with the new 2.0 version reaching a final release I'm considering if I should or should not upgrade my applications to this new one.

I know the registration keys will not work on the new one since 2.0 uses short keys but I would only use it one major new versions of the software.

So, my question is, is the protection of the 2.0 version of the same strength of the 1.x one?

Thanks,
SM

[TmC]

The protection is the same. The changes are only in the registration routine that mutes from the v1 rsa 1024 to the v2 elgamal.

Considering that skamer keygenned the hardest elgamal i don't know if switching keys is wise.

Anyway only time can say if it is better or not.

Originally Posted by TmC

The protection is the same. The changes are only in the registration routine that mutes from the v1 rsa 1024 to the v2 elgamal.

Considering that skamer keygenned the hardest elgamal i don't know if switching keys is wise.

Anyway only time can say if it is better or not.

In my opinion, the main reason skamer was able to keygen it is because ARMA had a poor implementation of it that left in too much info... The algo is still better than RSA (again, in my opinion), if the new ASPR implements it well...

Of course, with ASPR most people just unpack and hope there were no encrypted-for-registration routines anyway...

[TmC]

Originally Posted by Satyric0n

Of course, with ASPR most people just unpack and hope there were no encrypted-for-registration routines anyway...

Or use a leaked key to dump encrypted-for-registration routines

Armadillo developers are experts at poor implementation :P I would take RSA over the arma algos anyday, if I was to write a program I was going to market I wouldnt trust it to Arma key system for another 6-8 Months to insure all the holes are patched. ElGamel in its self is fine, as always its a matter of implementation.....

[TmC]

Well, now it seems all ok, it's a lot of version that armadillo resists to keygenning.
Anyway i think that armadillo chose ecc crypto because it is not so popular as rsa. afaik only ice license is now using ecc instead of rsa(svkp, asprotect, obsidium, acprotect, sdprotector) so maybe probabilistically is less crackable. Anyway it wouldn't be a bad idea to put in armadillo rsa keys.

Originally Posted by MrAnonymous

Armadillo developers are experts at poor implementation :P

Well said

Can i plagiarise this as my signature ...