Page 1 of 1

AES Crypt

Posted: Thu Oct 23, 2014 4:04 pm
by IT-Technician
If this is an open source software and people can add to and review the software then what makes this "securing" software secure? What is to stop someone from adding a line of code that plants viruses or trojans or anything in that sort of area into this which when downloaded by a random person affects their machine and data?

Re: AES Crypt

Posted: Fri Oct 24, 2014 3:52 am
by paulej
By virtue of being open source, you can look at the code and see that there is nothing hidden inside. For binary code, then clearly there is a legitimate question as to whether it's secure. There's nothing I can do, other than to say that I have not inserted any kind of malicious code into the binaries posted on aescrypt.com. And when I post them, I record the SHA-1 hash and I publish a digitally signed file showing those hash values using my PGP key.

But, trusting me isn't necessary. All code can be built from the sources.