Security Products

This page is a subsection of the Crypto link farm. Links to further crypto and security-related information can be found there.

Access Control ActivCard Home Page Authentication/single sign-on card. Argus Products & Services Page Extra security measures for Java programs, Orange Book/ITSEC security modules. BRICKHouse Secure Web Server ACL-based web server security. Cambridge Neurodynamics Biometric identification systems. Capella Electronics - Security Systems Access control and security sensors. Check Point FireWall-1 FireWall-1 firewall. Cerberus Homepage Win 3.1/Win95 access control. Core SDI SA Network scanners, authentication and security modules. Cryptocard Corporation User authentication and remote access management tools. CyberSafe - Products Kerberos and public-key based single sign-on, access control. CYCON Labyrinth og CYCON technologies and Cypress Consulting The Cycon labyrinth firewall. GEZ Microsystems Inc. - Oakville, Ontario, Canada Fingerprint verification products. e.g. Software Auditing, security alerts, password analysis, and security software for Netware. Hardcastle Electronics Firewalls, security gateways, F-secure. identikey Java-based access control over SSL. Intracept - X-Ray Vision Blocks Java, ActiveX, and cookies to web browsers. Kalliopi: DELPHI Security - We've got it covered!! Access control to Delphi apps. Keyware Technologies Biometric security products. KyberPASS Certificate-based access control. MARX CRYPTO-BOX Software Copy Protection Software and hardware-based copy protection. medcom Home Page Firewalls, tiger team testing, WWW security. Micah Development Access control for DOS and Windows. New-Tech Systems DOS/Windows access control software. PCGUARDIAN Home Page PC access control and encryption software. SAGUS Products Page Security gateway, firewall, Winsock interface. Schumann Products for Enterprise Security Single sign-on, access control management. Sealabs Watchguard firewall and security management software. SecureLogix: Corporate Firewall for phone networks. SecurePilot PalmPilot based challenge-response authentication supporting a variety of popular protocols. Secure Storage High-security storage facility. Sesame Euro-Kerberos SOL - Security On Line Phsyical security items and information. Startek Engineering Inc. Fingerprint verification products. Technical Incursion Countermeasures Auditing, consulting, and training for networks, firewalls, security policies, and assurance testing. The ULTIMATELY Secure Firewall Wingate Lan to Internet Software Windows Internet proxy.

Data Encryption 3Si Products and Services Crypto hardware accelerator cards. Aegis Research Corporation Windows PGP shell. American Stealth Messenger Email encryption software which is probably some form of rebadged PGP. Ancort File, email, disk, voice encryption including IDE data channel encryption hardware. Proprietary algorithms. Archsoft Security Software Solutions -Cerberus Desktop encryption for Windows using Blowfish. ASIC International - Cryptographic Cores and Technologies DES, SHA-1, MD5, bignum maths cores. AspEncrypt.com - ASP Component for File Encryption, Digital Signatures, Secure Mail and X.509 Certificate Management IIS ASP component for encryption and digital signatures. Atalla Network and internet security processors and solutions. Australian Privacy Home Page Australian PGP vendor. Avalanche Java Cryptography Toolkit Encryption, hash functions, and secure random number generation in Java. Babylon ISDN BRI and PRI online encryption hardware, secure servers, VPN products, all using RSA with triple DES (single DES optional). Frame relay and X.25 encryption using DES or proprietary algorithm. Baltimore | Products Crypto systems toolkit - DES, IDEA, RSA, DSA, RIPEMD, SHA1, MD2, MD5, X.509/CA toolkit, email security software. BBN Security SafeKeyper tamperproof hardware key storage. BestCrypt family of Data Protection systems GOST and DES software/hardware encryption for DOS/Windows. BetweenUs: Features Secure chat program using CAST128/3DES/Blowfish, written in the free world. Bitvise Home Page Windows SSH client/server. Blowfish Advanced Download Site Blowfish file encryption for DOS and Win95. Bokler Software's Home Page DES and hashing DLL's and OCX's. Briggs Softworks: Software Directory snoopper/file eraser, file encryption for Windows. Brivida, Inc. - Technology for Virtual Private Networks "VPN" VPN's using IPSEC DES encryption. Brokat X*PRESSO Home Page Secure non-US encryption by adding another layer of 128-bit encryption over the top of the US crippled 40-bit version. Business Security home page Fax, video, voice, and modem encryption. Bytefusion Products Secure mail relay. C & A CA and timestamping software, SSL servers and clients. carrick Encryption Home Page DES and Blowfish file encryption. CE Infosys GmbH Fast DES hardware, encrypting SCSI controllers, PCMCIA cards, from a non-US source. CellCase Key Agile ATM Encryptor RSA/triple DES ATM link encryptor. Certicom Elliptic curve cryptosystem products. CES Home Page Phone and fax encryption add-on (questionable algorithm). Chrysalis ITS - Product Information Encryption hardware and crypto accelerators. Ciphermax Pure ECC-based file encryption. Cisco Network Encryption Services DSA-signed DH for link and session encryption. Citadel Products Firewall/VPN, Windows file encryption. CodedDrag Drag-and-drop DES encryption for Win95/NT. Cold Fusion Power Packs Encryption/decryption, credit card processing, for Cold Fusion. Communication Security Corporation Home Page Diffie-Hellman and triple DES speech encryption. No GAK. Communication Systems - East Infosec Home Page Secure comms gear for government use. Computer Development Systems Crypto Page Link encryption hardware, file and fax encryption software (unknown algorithm). ComScire QNG From Quantum World Johnson-noise-based RNG for PC parallel ports. Condor - Secure Ubiquitous Portable Interoperable Communications Buzzword Buzzword Secure Fortezza-protected voice and data over celluylar links. Confidentiel : Présentation Mac file encryption, approved by the French secret service. CoolFish Blowfish file encryption. CopyTele, Inc. Phone and fax communications encryption. CoreDesign Royalty-free Verilog PKC core. CPE Security/PKI Swiss resellers of various US security products (Entrust, ActivCard, Datakey), although some require US export permits. CPKtec Technology Crypto algorithm implementations for embedded systems. CRYTEK Communications - Secure Telephone Adaptor Key-based subband voice scrambler. Uses Diffie-Hellman key exchange, but a questionable encryption function "based on matrix multiplication". Cryptext Win95/NT 4 encryption shell extension. Crypto AG Switzerland Encryption software and hardware of all kinds (but see also the links in the "Crypto Social Issues" section). CryptoEx 1.0 PGP add-on for MS Exchange. Cryptomathic homepage Encryption and security software and consulting. Cryptosystem ME6 MD5-based file encryption. CSM Proxy Server - The Ultimate Gateway to the Internet Proxy which includes SSL tunnelling. CustomTracks Home Page ZixMail mail encryption with 3DES and RSA. Software contains US government backdoors, thus its exportability. cv cryptovision Smartcard-based ECC implementations. Cybanim PEM software, bignum maths package. Cybernetica - CryptoChip project IDEA + RNG + bignum accelerator on a chip. Produced in the free world. Cylink Corporation Cypris Lockheed Martin's crypto processor. Data Encryption Key PANDORA DES/RC4 file encryption using a USB dongle, unfortunately keys are hardcoded into the dongle. DATACRYPT Home Page File and file transfer encryption (unknown algorithm). DataGuard® - The Software Safe IDEA and SEAL file encryption for Win32. DataSAFE encryption software by NovaStor Pasword-based file encryption using Blowfish. DEMCOM: Steganos for Windows 95/98/NT Homepage - The home of steganography BMP/DIB/WAV/VOC/text/HTML stego with RC4 encryption. Deming Software S/MIME software for MS Exchange and Eudora. DES DES core for FPGA's/ASIC's. DES Core VHDL DES core. Design Automation - CyberLock DES-based encryption program. Fairly standard stuff, but the marketing smells of snake oil ("most secure file encryption available", "patented encryption enhancement technology", etc). D.I.C.A. ISDN Encryptor ISDN link encryption using FEAL 16, IDEA, or DES. Digital Delivery Secure (encrypted) software and information distribution systems. Diskcrypt 95 Floppy drive encryption for Windows 95. docSpace Direct Secure data transmission via a web browser and SSL, but intermediate storage is unencrypted on a third-parties sever. DubnerCruncher Very fast bignum maths card for PC's. e-Lock, Security Solution from Frontier Technologies,Home Digital signature/encryption software and interfaces (implemented as wrappers around crypto toolkits like BSAFE and CryptoAPI). EasyCrypt DES file encryption. EasyPrivacy DOS, Win95, and NT file, drive, and email encryption using IDEA, file wiping, EES Family Data Sheet Clipper chips. EMD Enterprises Win95/NT anti-virus and encryption software. Encrypt-It Plus DLL/VBX/OLE control providing DES and 3 other (unknown) encryption algorithms. Encryption Plus Encryption for Visual Basic. Encrytor DES file encryption for Windows. Entrust - Home Page (Formerly Nortel) Entrust cryptography product family. GAK alert: These products are GAK-ready. ERACOM - Encryption Adaptors Encryption toolkits, DES encryption hardware for PC's. F-Secure Cryptography Products Windows/Unix <-> Windows/Unix link encryption with secure telnet, X11, port forwarding, etc. The link is encrypted with algorithms like triple DES or Blowfish, with 1024-bit RSA for key exchange an authentication. f5 - Intelligent Building Blocks for a Smarter Web SSL accelerators. FileVault File encryption using 64-bit (?) Blowfish. FineCrypt File encryption using Blowfish, CAST-128, GOST, IDEA, and RC5. Forge - Distributed Environment Solutions JCE, SSl in Java. Formal Systems X.509 certificate viewer, PKI, encryption services and consulting. FORTEZZA Developers Home Page FORTEZZA PC Cards Links and information for Fortezza developers. Fortress Technologies VPN's. Free, secure, reliable, E-mail Email encryption using 2Kbit RSA and Blowfish. Frontier Technologies e-Lock Home Page PKCS/X.509 and S/MIME key management, signing, secure email and browser. Fulltime RSA RSA speech encryption for PSTN lines. fun communications - http://www.fun.de/ Crypto, SSL, certificate managent software from the free world. GDS: Encryption, Authentication, Transaction Security Link encryption hardware from ISDN up to T3 speeds. Gemini Computers, Incorporated Orange Book A1 certified network processor. Global Technologies Group, Inc. Products based on the German SuperCrypt DES/triple DES chip. GTEI-CyberTrust-SafeKeyper-Overview Hardware-based key management for CA's. GTGI PowerCrypt Web Site A HiFn chip on a PCI card. Hammercore DES Cores FPGA DES cores for Altrea FPGA's. Hide Me for Windows Windows file encryption, unknown algorithm. Highwinds Trading Company Products Various crypto-related add-ons to the Mac OS. HRB Systems Data encryption products (an division of E-Systems) IBM cryptography: cryptographic cards home page IBM's (really cool) 4758 crypto module. IBM SecureWay Data encryption, security, consulting. iD2 Smart cards, PKCS #11/CAPI drivers, certificate management, SSL tunneling. I.D.E.A Encryption for Windows Win95 file encryption. IDS - Products Disk encryption using Blowfish, PGP-compatible mail encryption using RSA+IDEA, smart cards. INFOSEC Products Triple DES file encryption for Windows. International Cryptography Framework HP's international big brother design. Internet Solution Security (Pty) Ltd Access control, electronic commerce, 128-bit SSL proxy. Internet Smartsec Internet security technology (knowledge of Swedish useful). Interscope BlackBox Homepage DES-based file encryption. Inventra Soft Cores Current Documentation DES cores. Invincible Data Systems, Inc. PGP - compatible encryption software for e-mail, hard disk encryption, access control hardware tokens. IPivot Products SSl accelerator boxes (now swallowed by Intel). iPower Home Page National's PCMCIA crypto card. IRE Product Catalog Network and link encryption hardware. ISC Products Email encryption, crypto toolkits, encrypted Zmodem. ISDN Encryptor iSolv Technologies S/MIME with 2Kb RSA, 3DES, crypto toolkit. Java Cryptography Extension Java crypto extensions (JCE). JVDE EBackup File encryption/archiving using DES, Blowfish, CAST128. Kremlin Win95/NT drag-and-drop file encryption. Kryptel - File Encryption Software for Windows 95/98 File encryption using Blowfish, 3DES, IDEA, Twofish. Kryptology Home Page Snake oil for the masses. LAN Crypto Programms Document and file encryption and digital signature software using proprietary algorithms. Langley System Web Site Floppy disk encryption software. Lintel Security DES and RSA encryption chips and hardware. LUC ENcryption Technology (LUCENT) Limited Lucas-function based PKC. MAILguardian and MAILguardian Enterprise Email encryption using DES, 3DES, Blowfish and DH (but will automatically and transparently fall back to sending cleartext - this is listed as a feature of the software). Marathon Computer Press Jumpstation DES, Blowfish file encryption, disk wiping. Markus Hahn's Software Page File/data encryption using Blowfish, Twofish, RC4, Cobra128, GOST, triple DES, and CAST. Megacrypt/MVS : cryptography made efficient and easy for IBM/MVS mainframes DES, 3DES, and Blowfish for MVS. Microlink's Solution of the telephone wiretapping,eavesdropping and interception, telecom security solution POTS and ISDN phone encryption. Motorola Advanced INFOSEC Machine (AIM) Motorola crypto processor. Motorola SSTG Secure Telecom Products Morotola secure phones and fax and data communications products. Mykotronx! Clipper and Capstone chips and related products. nCipher products Hardware crypto accelerators. NetFortress Network link encryption. NetLOCK(tm) Network Security IPSEC-based VPN security. Netseal Product Specifications IPSEC/ISAKMP/OAKLEY drives for ODI, NDIS, and Linux. Next Wave Software DES-based file encryption for the Mac. NEXUS Solutions NTrust Blowfish encryption for Windows. Nokia Clustered IP Solutions - CryptoCluster VPN Gateways IPSec boxes. NTrust Blowfish file encryption. Ocean Logic DES VHDL/Verilog DES core. Okiok Data Security Products Crypto processors. Opera Software - Bringing speed and fun back into Internet browsing Non-US web browser with strong SSL encryption. PC-Encrypt Email Security Blowfish file encryption (web page smells slightly of snake oil). PGP -- Pretty Good Privacy, Inc. Home Page PGP Tools from Net Services Windows front-end for PGP. SSLava SSL in Java. Phobos SSL Offloading and Accelerating Products SSL accelerators. PIJNENBURG Beheer N.V. Cool RSA/bignum and DES/triple DES encryption hardware. PKIMagic Entrust-based S/MIME integrated into Lotus Notes. View pages with Java turned off, or just wait for their spam to arrive in your mail. Pointsec Mobile Device Security Solutions Disk encryption using Blowfish and CAST-128, combined with user authentication using passwords or smart cards. PowerCrypt Website PEM and S/MIME encryption for the Power Mac. Private Data - Protecting your privacy with innovative products Disk encryption for Win95 (unknown algorithm). PrivateExpress Some sort of secure tunnel for email (details are sketchy and the "proof" of security even more so). Psypher/EDI+ DES EDI encryption. Racal/Airtech Security Various access control and security products. Rainbow Technologies Internet Security Group CryptoSwift crypto hardware accelerator. RAMPART for DOS/Windows DES encryption software and other utilities. Reflex Magnetics - homepage Secure FTP, mail, modem encryption using DES, 3DES, Blowfish, or IDEA. RPK Public Key Cryptography Crypto SDK and email software utilising a new, fast discrete-log-over-GF(2^k) based PKC. RS Cryptographic Development Kit Public-key crypto toolkit. RSA Data Security, Inc. RSA DesignObject RSA processor core. RSA2048A 2Kbit RSA processor RTL Verilog core. S to Infinity - Encryption Page Windows file/directory encryption using RC4. SAFE Folder Transparent Win95 file encryption. SafeHouse Drive Encryption DES disk encryption for Win3.x/Win95 (exportable 56-bit because it's GAK-ready). SafeMessage Home Page Secure ICQ-type application using Elgamal and Twofish. SafePassage Web Proxy Full-strength encrypting web proxy which bypasses US export restrictions. SandTiger File encryption using Blowfish, CAST-128, and Diamond2. SAWFTWARE Secure archiver (3DES, Twofish, Blowfish). Secret! Secure PIN/password store for the PalmPilot. Sectra Defence Communication Systems Secure phones, encrypting routers and encryption cards using proprietary algorithms. SECUDE Produkte File encryption, S/MIME, CA products, security consulting. SecureCRT Win32 SSH client. Secure Email - 256 bit encryption for web mail Server-based secure messaging service. SecureFile File encryption and signing for Win95/NT Secure Link Services Ltd (SLS), DataGuard Family Disk and file encryption using IDEA, SEAL, and PKC's). Note that this company is located in the free world (Switzerland), despite the .net address. SECURE...Encryption and Security for all DES and IDEA encryption software for Windows. SecureOffice Triple DES encryption add-on for MS Office. SecureStore Homepage File encryption using DES, triple DES< Blowfish, CAST-128, Diamond2, RC4. SecureWin Win95/NT file encryption using RSA and the BSAFE conventional algorithms, other security tools (eg secure delete, secure shutdown). Security Domain: electronic message security Public-key file encryption, CA software. Security Encryption Software for SQL Server,MSDE,MS Access,File Encryption Database encryption using 3DES and Blowfish. SICAN DesignObject (TM): DES Data Encryption System ASIC DES core. Sioux: Sophisticated & Secure Apache-based secure web server. SKIP Information Simple Key management for Internet Protocols - papers, information, implementations (US only). SKIP in Russia As above, without the export restrictions. SMARTCrypt by WetStone ActiveX interface to PKCS #11 modules. Snapshield Encrypted phone/fax/telecoms using Elgamal and DES. Soft Concepts Ncrypt file archiving, compression, and encryption utilities. Software Design - Crypto for Windows by Gregory Braun "Braun pretends to use the BlowFish algorithm to provide secure encryption in his SoftWings Enterprises Inc DES/triple DES protected OS/2 data transfer. SoftWinter - Shade page Disk encryption for Windows NT. SoundCode, Inc. Crypto libraries and software. sshCE SSH client for the Pocket PC. SSL HTTP Security Solution 128-bit SSL proxy - turns crippled SSL browsers into full-strength encryption ones. SSL Plus (Product) SSL Plus SSL integration suite. SSLP Reference Implementation Project An SSL reference implementation (still under development). SSRSSL Secure sockets relay - full-strength SSL proxying. Stealth Drive Encrypted virtual disk volumes (the standards compliance section looks a bit odd). Stealth Encryptor for Windows Windows file/directory encryption using DES or Blowfish. Stronghold Homepage Apache-based secure web server. SynCrypt File and email encryption using Elgamal, Blowfish, IDEA, and triple DES. tbCrypt Win95/NT, OS/2, DOS file encryption using DES, IDEA, Blowfish, NewDES, and Lucifer. TCC: Encryption products and solutions for Data, Phone, Voice, and FAX NETWORKS Link encryption, phone and fax encryption. TeamWARE Crypto ICL's Windows file encryption software. TecApro Internacional - Home page Win95 file encryption. Technology Nexus AB - Välkommen! Encryption, digital signature, CA toolkits. Templar Software and Services Secure EDI over the Internet. ThunderStore Product Overview File, email encryption using Blowfish. TimeStep - The Network Security Standard VPN encryption systems using DES encryption and X.509 certificates and digital signatures for authentication. TorDisk HomePage NT disk encryption for hard drives, CDROM's, networks, using DES, triple DES, Safer, Blowfish, CAST-128. Transcrypt Product Overview Phone encryption devices and add-ons. TrustedWeb Intranet ACL-based security and encryption using RSA and triple DES. Trust Services-Online Trust Center S/MIME email plugin and CA. TrustWorks products - Delivering information security products that you trust SKIP-based VPN using pluggable encryption algorithms. TSS OfficeLock - Data Security for Microsoft Office Strong encryption for MS Office documents. Tumbleweed : Solutions : Products Secure mail, mail gateways, message, archiving products. UCrypt DES, triple DES, GOST, Blowfish, 3-Way, RC5, TEA, Safer, Shark, Diamond-2, and others. Utimaco Safeware AG DOS, OS/2, Windows encryption software, encryption hardware. V-Disk Official site Win95 drive encryption using Blowfish, with smart card support. Vieka - Pocket PC AES file encryption for the Pocket PC. Virtually Online SEMS email encryption using the RPK algorithm. VPNet: Products WAN VPN encryption products using DES and triple DES with SKIP key management. WeOnlyDo! Components SSH/SFTP client/server libraries for Windows. Western DataCom Home Page - Data Security Fortezza, DES encrypting modems, link encryptors. Win Magic: SecureDoc Triple DES disk encryption for Win95/NT. Worldtalk Worldsecure S/MIME encryption software. Wormhole technologies PKC-based email encryption software. Xcert Software Access control, X.509-related software. X_DES Core Page Verilog DES core. XF-DES: Data Encryption Standard Engine Core Xilinx DES core. Zaxus Crypto hardware modules, link encryption, smart cards. Zergo WWW Site - Information Security Specialists Crypto and CA products. They'll also design GAK protocols for backdoor access to your medical records if required.

Interception and Monitoring

Hardware and software for intercepting and monitoring information, and stopping of the same.

Applied Signal Technology Product Summary Introduction: Signals interception and monitoring gear.
Candes Systems Inc. - TEMPEST Computers and Peripherals: TEMPEST-shielded computer gear.
Cellular Monitoring Interface (via Electronic Countermeasures Inc): Computer interface for intercepting cellphone traffic.
Computer Aided Technologies: Scanner software.
Covert Keyboard Press bug: Hardware keyboard sniffer.
Datascan TEMPEST monitoring system
Dynamic Sciences International: Emissions and Surveillence Equipment: Assorted Tempest toys.
Electroconductive Concrete ELFINCO: Makes for great TEMPEST shielding.
Fastscan: Win95/NT port scanner.
Fax Analyzer: PC fax interception card.
Force-Ten Online Catalog: Surveillance, wiretaps, spying equipment.
GENESIS Group online: Assorted bugs, transmitters, receivers, cellphone tracking and interception, fax interception, and other bugging and interception gear.
GCOM Technologies: GSM, cellphone, computer, and fax interception and monitoring equipment (the GSM interception unit features real-time, off-air interception of up to 1000 voice/data/fax transmissions, traffic targetting and screening, and call tracking, all with a friendly Windows interface).
GSM Monitoring - GSTA-1400: Complete GSM monitoring/interception system with call and target tracking and location features.
Kansmen Corporation: LittleBrother Internet monitoring call.
Keyboard Keystroke Logger for PC : KeyGhost : record or monitor keyboard keystrokes on PC: Hardware keystroke monitoring.
mobifinder: Mobile phone scanner and locator.
NDG Software Products: Various network monitoring and snopping tools.
NetWatcher: Monitor and intercept TCP/IP sessions.
Pager Decoding Interface (via Electronic Countermeasures Inc): Computer interface for intercepting pager traffic.
PCProtect: Win95/98/NT keystroke logger.
Radte KG - Spytec: Bugs, speech and telephone interception gear, information on industrial espionage.
Spies:Law Enforcement: Cellular, GSM, and fax interception and monitoring equipment.
SPY Electronics, Communication and Surveillance Systems: Cellphone, fax interception gear.
SPY - Networkspy / -agent / -analysator: Sophisticated network sniffer which can extract files and data sent via FTP, HTTP, NNTP, SMTP, POP3, NetBIOS, search the data stream for keywords, and log usernames and passwords.
SpyZone Tools and Techniques: Industrial espionage and surveillance tools and techniques, security equipment, secure communications systems, disaster recovery, bug sweeps.
The Codex Privacy Site: Surveillance, stalking, privacy invasion, eavesdropping, and anything else related to these categories.
The Watcher Network Monitoring Program: Monitor and control any IP connection on a network.
TIRIS Products & Technology: RF identification and tracking devices.
TSCM.COM Counterintelligence Home Page: Technical Surveillance Countermeasures - bugs and wiretapping, detecting bugs, intelligence agencies, and counterintelligence.
Virtual ISA Proto Board: Xilinx 5210/4013E card.

Investigative Tools

Tools for investigating the security aspects of various things.

APS Powerful, yet Affordable EDA Tools: Developmemt boards from as low as $199.
Chip Express Corporation: Fast turn-around ASICs.
Chipworks: IC reverse engineering.
Code Classifier: Classify encrypted data by likelihood of encryption system used ("especially recommended for cipher generated outside North America where DES and private-key systems are not as dominant").
Convar Systeme Deutschland - Service Center: Disk data recovery.
Digital Instruments: Scanning probe microscopy (used to investigate magnetic media).
DoD Computer Forensics Laboratory: Carpe Machina!
ESS Data Recovery Inc.: Recovery of damaged disk data.
FPGA, CPLD: OptiMagic's Programmable Logic Jump Station: Starting point for hardware crypt-breaking information and tools.
Hack Watch News: Satellite and terrestrial TV scrambling systems.
IBAS Laboratories - Professional Data Recovery: Recovery of data from damaged or overwritten/erased magnetic media.
Investigating the Suspect Computer: DOS forensic software for recovering evidence from PC's.
IsoBuster, Ultimate CD and DVD Data Recovery tool (www.cdrecovery.net)
MUSIC Semiconductors: Various content-addressable memories, useful for investigating encryption algorithms.
Neuroptics Technologies, Inc.: Neural network hardware.
NTI Home Page: Computer forensic training, consulting, and tools.
Picosecond Imaging Circuit Analysis: IBM technique for imaging signals in chips.
Programmable Logic Jump Station ( FPGA, CPLD ): More investigative tools for encryption keys.
Technology Pathways LLC - Computer Forensics, Digital Discovery, Audits, Lockdown, ProDiscover DFT: Disk forensics tool.
Xilinx Product Information: Perfect for investigating currently unknown DES and RC4 keys.

Misc APM - EMI Shielding Products EMI shielding, useful for TEMPEST shielding. AR Products RF interference generators. Argus Systems Group, Inc. Operating system security add-on products for Solaris and Windows NT. Automatic Response Systems Document destructions products and services. BEMA, Inc Portable TEMPEST-shielding enclosures. C&A Systems Security: Leaders in Security Risk Analysis, Risk Assessment & Risk Management DES toolkits, risk analysis tools. Clean Drive: Protect Yourself and Your Life Drive cleaner. Sold via spamming, avoid this product. Computer Security Update Links to security-related bug fixes for MSIE and Windows NT. COMSEC Solutions Cryptography and biometric countermeasures consulting. Consensus Products/Services SSL Plus integration suite, RSAREF, IDEA licensing, code security screening. CyberScrub Secure File Deletion / Internet Privacy Utility Windows file deletion software. Digital ID Center Web interface to Verisign's digital ID (CA) service. Disk Zapper Floppy disk bulk eraser. Embassy DivX for your PC. Emcom Products and Services TEMPEST PC's, monitors, and comms gear. Evidence Eliminator - What evidence is on your hard drive? Drive sanitiser for Windows. Advertised through spamming, contains a booby-trap to silently disable itself. Avoid this product. Framework Executive Back Orifice removal and protection tool Program to remove Back Orifice. Hackers Catalog Books Various standards for satellite TV scrambling, cellphones, and scrambling-related encryption. IBM SecureWay Home Page IBM's security hardware and software, consulting, technology, and general information. IP Packet Filter Highly configurable kernel-level IP packet filters. Kilben Business Services Computer enclosures and alarms. List of FPGA-based Computing Machines Fast encryption hardware (with a little programming...). NIC Law Enforcement Supply CATALOG - MAIN SITE Law enforcement supplies. Minatronics Corporation Physical security products. Proton Engineering Degausser & Declassification Systems Magnetic and optical media degaussing and declassification systems. SecureWave | SecureNT NT kernel mode driver which protects against many buffer overflow attacks. Security Engineering Services, Inc TEMPEST and COMSEC engineering and consulting. SEM - Security Engineered Machinery Data destruction equipment and information. The Bunker - Britain's ultimate safe house Secure web hosting service. Tempest Products TEMPEST-secure communications and data processing devices. Terminus 4... Leave No Traces... Secure file deletion for Windows. TNO-FEL TNO physics and electronics laboratory (information security, electronic warfare, electronic security, sensor and weapons electronics). Wang Government Services Secure System's HOME PAGE Wang's TEMPEST products and secure services. Wireless privacy / security, mobileCloak - mobile Cloak - mCloak Portable Faraday cage for wireless devices. Zero-Knowledge Systems | Freedom Software to provide anonymity on the net.

Online Commerce and Banking

We do e-commerce because that's where the money and the suckers are.

Canada Trust: Online access to account balances, stock quotes, and other banking services.
CommerceEngine: A Rainbow crypto card in a PC case.
Credit Suisse Direct Net: Full online banking using 128-bit SSL proxies.
echeck: Electronic cheques.
EMJ America: Internet security and e-commerce products.
ICVerify Home Page: Online credit card, debit card, and cheque verification.
Internet-based digital cash: Links to various e-cash resources.
Netbill-related publications: Various online electronic transaction protocols.
Payment mechanisms designed for the Internet
Welcome to Online Banking!: Wells Fargo online banking.

Smart Cards

Smart cards? A certain animal cunning, perhaps.

3-G International: Smartcard based desktop security and access control software.
A safe Internet communication channel with smartcards: Masters thesis on secure client-server communication using smart cards.
A8 Corp: Smart card personalization and card management software.
Advanced Card Systems, Ltd.: Smart cards, card readers, development kits.
ACOLAs Homepage -Communication, Terminal Server and Data Collection Products: Smart card and RF card products.
AD-Teknik, Mainpage: Smart card emulators, PCB's, readers.
Amazing Smart Card Technologies: Smart cards, memory cards (up to 1Mbit), readers, development systems.
AMC Smart Card Reader Products: Smart card/mag stripe reader/writer.
American Biometric Company: Fingerprint readers, combined card/fingerprint readers.
AMP Smart Card Connectors: Smart card connectors and reader contacts.
Analysis of French T2G: Tech info on second-generation phone cards.
ASE - The Aladdin Smartcard Environment: Smartcard development kit.
Basic programmable smartcard: Bill's idea of a JavaCard?
B&C Data Systems: Smart card reader/writer.
Card Europe Main Index Page
Card Technology Web Site: Card Technology magazine online.
CardTech/SecurTech:Home: Smart card and security card conference information.
Catalyst Serial E2PROMs -- I2C Bus: Smart card EEPROMs.
Cavitronic: Programmers, smart cards, add-ons.
Chip Application Technologies: Multiapplication smartcard management software.
Chip Cards: Data sheets for various Siemens cards.
Chipcard, Chipkarten, Chipcards, Smartcards, Programmer für Chipkarten, Pay-TV-Cards,: Smart cards, programmers, software.
Chipkarten Technik: Technical details on various commons cards (phone cards, German KVK).
CITI Smart Cards: University of Michigan smart card research project.
Compelson Labs: Smart-card based key storage, file encryption, access control.
CompInfo - Smartcard Technology - Information Sources and Manufacturers: Links to sources of information on smart cards and card and card reader manufacturers.
Cop Card Site: Programming information and keys for COP cards.
Crownhill Associates Ltd: Smart cards, PIC programming, code recovery/reverse engineering.
CryptoCard's Security Products: Various access-control systems.
CyberMark > Products & Specs: Card terminals and card-based vending machines.
Dallas Semiconductor Corp: Home Page: Identification and authorization chips, secure microcontrollers.
Dallas Semiconductor Corp. iButton: Home Page: Digital credentials/timestamping/crypto in a button.
Datacard Group: Card printers, embossers, terminals.
Datakey Home Page: Smart card reader/writers, smart cards.
DataMega I/O Products: Smart card readers.
Die branchenübergreifende elektronische Geldbörse: Overview of smartcard-based payment systems (undergaduate thesis, in German).
Edgar Online - EdCard: C-based smartcard API.
EMV Technical Specifications: EMV card, terminal, and application specifications for smart card credit and debit applications.
Encotone Ltd. Home Page: Smart-card and smart-card-like authentication and security devices.
eToken: USB-based authentication for networks: USB-based crypto token. Need to enable Java, autoinstall, and a dozen other security holes for the demo to work.
Eutron: USB token with MD5, Blowfish, RSA.
Fingerprintcards: Smartcards with built-in fingerprint readers.
First Access Products: Contactless smart card authentication systems.
Fun With Smartcards: Notes from the HIP'97 Fun with Smartcards session.
GeldKarte and electronic banking home page: Information on various smart-card based electronic purse systems.
Gemplus Smart Card Home Page
German Smartcard Hacker Org.
GIS Home Page: Smart card readers, terminals, and developer kits.
GNU SmartCard Project: Smart card info, documentation, software, projects.
Goran Vlaski's Software Page: Smart card read/write/emulation software.
Guru's Lair: Scads of PIC microprocessor web site links: Links to PIC sites including PIC-based smart cards and card programmers.
HIP Smartcard Homepage: Cards: HIP'97 smart cards info.
How to do it: Private Key Encryption (A method): "emulation of the One-time key system using large psuedo-random number generators" (linear congruential generators).
IBM Smart Card Solutions: IBM smart card technology and products.
IBM SmartCard for e-Business: IBM JavaCard and card toolkits and API's.
IBM Student Chipcard Innovation Team Homepage: Dutch student-designed card reader and software.
IC Card Reader / Writer: Smart card reader, PINpad, card authorisation terminal.
IC Card with Combined National ID and Health Insurance Card Functions: Taiwanese smart card/ID card project.
Identity Systems Security Inc.: Smart-card based identification.
i-Key from Rainbow Technologies: Product Overview: USB-based smart card-a-like (looks like it does MD5 onboard for challenge-response authentication).
Implementing Airline Electronic Ticketing Using Integrated Circuit Cards: Electronic ticketing project using smart cards.
incard Products: GSM, crypto, multi-application cards and software.
Infineon Technologies AG: Formerly Siemens smart card division.
i n f o t e c h n a: Smart card custom software development.
Inside Technologies: Contactless cards and SDK's.
Java(TM) Card(TM) Technology: Java kludged to run on a smart card.
KeyBlitz Project: Various smart card hacking initiatives, mostly targetting European pay tv systems.
Keycorp - Smartcards: Multos/Javacard/OSSCA (Keycorp card OS) cards and products.
KOBIL Systems GmbH: Chipkartenterminals: Smart card readers and terminals, smart cards.
Leapfrog Smart Products: Smart card development software, encryption software.
Litronic, Inc.: Smart cards, card API's, Fortezza cards.
Magtek Products: Magnetic card reader/writers.
Meinen, Ziegel & Co. GmbH: Products: Card production equipment.
Microchip Memory Data Sheets: Includes EEPROM memory for smart cards..
Micromodule Pte Lte, Singapore: Smart cards, readers, development kits.
Mondex Electronic Cash: Mondex electronic wallet (pretty content-free pages).
Motorola SmartCards (TM): Databooks for Motorola microcontrollers (including smart card micros).
Motorola Smartcard: Smartcards for salesdroids - try the other non-Motorola Morotola card links instead.
Mühlbauer AG: Smart card manufacturing and assembly.
Multos - the smartcard gets smarter: Framework for running multiple applications in a card (pretty light on detail).
MUSCLE Smartcard Developers: Development and use of smart card-enabled apps in a Linux environment.
Nexus Products and Services: Mag card and smart card readers, PINpads.
Oberthur Products: Payment and electronic wallet cards, crypto cards, contactless cards.
OKI Personal Smart Card Reader: Electronic wallet balance checker.
Ordacard Israel: Mag stripe and smart cards
OpenCard Framework: Java smart card middleware.
OTI - OnTrack Innovations Israel: Contactless smart cards.
Paul Maxwell-King: Smart-card hacking-related hardware.
PEP Products & Services Page: Smart card readers, RFID products, crypto and flash cards.
Philips Smart Card Services: Philips smart cards.
pincash: Smart cards and readers.
POSH Mfg. Products Page: Card readers, terminals, development kits.
Proton World: Smart-card based electronic wallet.
PubliCARD: The Borg of smart cards.
Reiner SCT: Smart card readers.
QI Technologies Corp. - New Products for a Cashless Society: Smartcard spammers who target newsgroups and email. Avoid their products.
SCAD toolkit: Smart card application developer toolkits for Windows.
SCARD - Smartcard Resources: Smart card standards, interface software, hardware.
Schlumberger Universe of Smart Cards: Smart card readers, tools, SDK's.
SCM Microsystems - Products: Smart card readers, writers, and interface products.
SGS-Thomson Smartcard Products: Smart card information and data sheets.
Siemens Smart Card Integrated Circuits: No technical information, unfortunately.
SJB Research: Smart card news. As it happens. Every business day.: Live smart card newsfeed.
SIM-R/W 2x for GSM SIM Card BackUp: SIM reader/writer.
Smart Cards: A Case Study: IBM Redbook case study on smart cards.
Smart Card Cyber Show: Smart card news, trade information, vendors, and projects.
Smart Card Developer's Kit: Home page for the book, as well as individual card sales, ATR catalogue, and pointers to smart card info.
Smart Card Forum Home page: Nonprofit group promoting smart card use.
Smart Card Industry Association Website: Smart card info, product links, news.
Smart Card News: Smart card publicatiosn, technology, and information.
Smart Card Reader/Writer: Card readers/writers/PINPads.
Smart Card Resource Center: Links to chip manufacturers, companies, conferences, mag cards, readers, RF cards, and other smart-card related information.
Smart Card Web Server: Web server running on a Cyberflex smart card.
Smartcard Information Page: Smart card information, card types, and links to manufacturers.
Smartcard Security Information Page: Smartcard security news, standards, attacks, and links.
Smartcard Technology Ltd.: Card readers, POS terminals.
Smart Dynamics, LLC -- Software Products: Smart card interface tools for various environments and languages.
Smart Semiconductor Search: Search engine which links to most major embedded semi vendors.
Smartcards and other cards: Links to smart cards, memory cards, smart card readers, mag cards and barcode cards.
ST - Products: STMicroelectronics smart card chips.
Telecard Mapping Home Page: Info on reading/decoding phone cards.
The Smart Card Forum: General information on smart cards.
Thyron's Products Page: Smart cards, terminals, security software.
TOWITOKO homepage: Smart card readers.
Tritheim Technologies: Smart card readers and writers.
UNIPROG Universalprogrammer: CCC universal smart card programmer.
Versatile Card Technology - Products: Card manufacturers.
Who?Vision: Smart cards, keyboards, and card readers with fingerprint readers.
Xicor Inc.: EEPROM's, smart cards, flash memories.
ZeitControl Cardsystems: Mag and smart cards, card readers, contactless cards.
Zmit's Telecard Page: Information on phone cards, readers, interface software.

Snake Oil

Proprietary guaranteed unbreakable crypto we invented this morning in the shower. Note that many of these links tend to fade away fairly quickly (probably because the companies don't stay in business long), they've been left intact for the amusement value.

The Seven Warning Signs of Bogus Science: Article from the Chronicle which is also appropriate for detecting snake oil crypto.
Advacrypt: "AdvaCrypt is one of the most powerful encryption technologies" using "non-logical encryption", but it's difficult to assess because "AdvaCrypt has no documents".
AGS Encryptions Ltd. Security for Non-Specific Threat Scenarios: Security through, uhh, "At-Will Intractability Up to Plaintext Equivocation Achieved via a Cryptographic Key Made as Small, or as Large as Desired - Without Computational Penalty".
Arcot Systems, Inc.: Security product which functions by redefining reality to be what they want it to be, then solving a (somewhat minor) problem based on their reality rather than our one.
Arithmetica Home Page: "Our revolutionary discovery of zeta one-way functions and group theory one-way functions redefine the parameters of next generation encryption technology"... "For example, a 1024 bit key based on the product of two 512 digit primes could be broken with 2^32 calculations. The world's fastest computers can now operate at 2^40 calculations per second". The algorithm isn't snake oil, but the web pages go to show why you have anything prepared by marketing people checked before it's released.
Asier Technology Corporation: "With existing linear systems the time to compromise data [...]" (apparently 3DES and AES are linear) "Asier has the largest known key-space in the cryptographic industry. Asier is not a block cipher, does not use elliptical curves, does not use prime numbers or factoring, is not deterministic, is not linea "
ASK ToolKit Home Page: "not an encryption algorithm, but an accessory that can enhance and simplify any symmetric encryption algorithm". Apparently it's a keyed RNG, and you're expected to pay for this (presumably the extensive use of buzzwords adds value).
Biopassword Product: "Uses a patented proprietary algorithm" (make up your mind, which is it?)..."currently there is no competition for BioPassword(tm) due to the proprietary nature of the algorithm"... either they have their dates wrong or this thing has been in beta for over 10 years. From the people who brought you NetNanny censorware.
Black Leopard Systems of Canada: "offers the most sophisticated data security encryption system available today"... "371200 bit encryption with up to 140 levels of access, 18 encryption key formats, and up to 10 encryption algorithms"... "this proprietary system delivers a unique solution for each user with a duplicate system occurring only once in every 600,000,000 Black Leopard Encryption systems at this time".
Bodacion Technologies: "HYDRA defeats all known network penetration attacks. HYDRA is unhackable and virus-proof [...] and offers advanced security based on biomorphic mathematics".
Cennoid Encryption: "provides unique, very efficient, non-algorithmic based encryption".
Chantilley Products: "the fastest and strongest cipher of its kind in the world" ... "Professional and Diplomatic Solar Cipher"... "The best Pseudo Random Number Generator ever" (in mid-2001 these guys made a bid to take over Baltimore, which is a bit like the Cook Islands making a bid to take over the USA).
Ciphile Software: "Absolute online privacy - Level 3(tm)(c)(patent pending)" - "the best encryption software available today" - "unbreakable".
Control Communications Systems: "Absolute security - a morphing encryption rate of at least 20 kilobytes"..."will protect your data from the most sophisticated decryption systems that exist now or are likely to exist for years to come".
CyberEncode.com Encryption Software and Technology: "Possibly the world's fastest and most secure encryption algorithms"... "This new encryption is an amazing accomplishment. Cypher Mind had to be re-programmed over 10 times". This site has an entire suite of snake oil algorithms.
Crypto98 beta: Proof that you can do snake oil in QuickBasic as well as C ("it works by generating permutations").
Crypt-o-Text: Not the usual snake oil, but there's a program available (CrackCot) which breaks it.
Cryptor Homepage: Cellular-automata-based OS/2 file encryption.
Crypto.Com: "Crypto.Com's cryptology provides the theoretically ultimate encryption security [...] Crypto.com's advanced VYN algorithmic system has been evaluated by leading scientists and mathematicians".
Cybank: "Maximum security encryption... we use our own snake oil because public-key encryption has been proven to be insecure".
CyberAngel EXR - Product Information: Crypto using Blowfish or DES, but it transmits your password to a monitoring center in the US (this isn't snake oil in the usual sense but... sheesh).
Cygnaworks - Products: "offers security through its use of values derived from the installed hardware resident on the computer"..."examines a defined set of hardware on a computer with proprietary algorithms developed by Cygnaworx to create a unique Flexible Digital Signature (FDS)" (makes invalidating your signature as simple as getting a new hard drive or a motherboard upgrade).
DataCloak: "Uses a unique encryption process"... "the 4-cycle data stream encryption process".
Data Protect: DaProMas: Online banking fully protected by GSM security (that's the same GSM security which was broken in early 1998, and which (when not broken) at best offers you 54-bit crypto broadcast over the air where anyone can get it).
Data Protect: Self-proclaimed leading security expert Kimble analyses your security problems.
DataTech Systems - Home Page: Software which is "ABSOLUTELY IMPOSSIBLE TO CRACK. This can be proved as never has a file that has been encrypted... been cracked, even with utilising some of the best cryptographers living" [sic].
DESkey - software protection devices, license management and encryption technology.: Call your company "Data Encryption Systems" and you get to name your products DESkey, DESlock, etc (any relationship to any other algorithm called DES is purely coincidental).
E-crypt Encryption: "*the* revolutionary software package that allows for the secure exchange of email" (uses monoalphabetic substitution).
Encryption Encryption Encryption: "Don't be fooled by imitations - - this is the true CRYP program" - you'd want to *imitate* this thing?
Encryption Plus: "bitwise exclusive OR encryption" with a password... "virtually impregnable".
Encryption provides benefits and risks: "it has been mathematically proven that only a brute-force attack can break encryption"... "a Cray can break a 128-bit key in two days"..."perhaps passing an electric current through a leaf will solve the problem" (or you could smoke it and then write a crypto article).
Encryption Software - Great Encryption: The program is fast for its strength encrypting about 5,000 plaintext characters/second on an average PC). [...] The ciphertext produced is an elegant mix of 100 different cipher characters in an unbroken string.
Encryption Techniques: "RBackup's archives are virtually impenetrable"..."If someone does manage to crack RBackup's encryption scheme, we will immediately plug in one of six others we have ready to go"..."[a DES-encrypted message] was decoded using two banks of 120 extremely high-speed 32-bit Sparc workstations connected to two supercomputers running 24 hours a day for eight days".
Encryptor 4.0 The Ultimate in Securing Files On Your Computer: "uses a revolutionary newly discovered incremental base shift algorithm that makes unauthorised decryption of your files near impossible".
Enigma-7 Windows Superencryption Software: "The most powerful Windows encryption software available".
Enigma 2000: "Protect your information with a 4.5Mbit key [...] This is not a mathematical algorithm. Enigma 2000 uses an extended polyalphabetic cipher. [...] A further advantage is present in the key exchange process, which is handled by a simple password, allowing an encryption depth of up to 1.536 bits"
Evolv - Skipjack IC Info & Pricing: Encryption using "proprietary artificial intelligence engines", "light years beyond the security level offerend by any other encryption method". Incidentally, this Skipjack has nothing in common (apart from the name) with the USG's Skipjack.
ezCode: "a family of block ciphers that are distinguished by their speed of encryption and decryption". Another distinguishing feature is their breakability, and the performance isn't so hot either.
FileCode: "will shift the bytes in any file in a way that can only be re-aligned using the correct password".
fusionsys home: "FusionSys has developed a new encryption system (patent applications have been filed). While FusionSys HES belongs to a group of common key encryption systems, FusionSys HES has a striking feature: Master keys exist".
GCC Chaos Encryption Overview
Genio USA, CrypEdit, The Best Encryption Software for Windows: "Public Key encryption is exactly that, you are not the only party involved in the generation, integrity, and security of all the keys/passwords used to encrypt your e-mail, documents, and files"... Uses "320 bits of secret key security via its proven proprietary methods".
Geoff Park's ShareWare and FreeWare Page: "Encryption/decryption utility based on the One-Time Pad method" (this is better than some in that it uses a sound card to generate the pad, but it's hardly a practical method).
Georgia SoftWorks Windows NT Telnet Server: Security: "Georgia SoftWorks provides unmatched security"..."designed specifically for Windows NT to handle the most demanding commercial and industrial applications"... "can be legally exported around the world"... "The key size for the version for domestic and international mass market is 40 bits".
Gianus Technologies: "Phantom System" which appears to function by swapping between two OS's installed on a visible and hidden partition. Warning: Site can't be viewed without activating many ActiveX controls. (Gi-anus technologies? That name is probably less dodgy in the original Italian).
Global Encryption Technology Products Page: "the first company to successfully solve all data security issues"..."our algorithm is the first solution to the NP problem existing in cryptography"... "GET's superincumbent software products offer the most complete form of data security, combining encryption, authentication, digital signature, and integrity check into one design".
iBallot.com - the complete election solution: "It does not make a great deal of sense
ICM Data Security Technologies: "electronic data security empowering technology" (it looks like just a reinvention of the smart card, but the marketing hype makes it snake oil).
Infraworks - Intether: "breakthrough technology"... "InTether�..s unique enabling technologies and multiple layers of protection provide impenetrable protection for any digital file."
Internet Opencode Padlock: "a 10 key, negative residual, binary kedged, 'maybe' logic coding process", leading to 'maybe' security.
IQ NETWORKS Information Security Services: Scam security company who stole security researchers' web pages and claimed they were company advisors, falsely claimed to be members of security organisations who had never heard of them, etc etc etc. Would you buy security services from an outfit like this?.
Jaws Technologies Inc.: "the first unbreakable suite of public and private-key encryption schemes known". Uses "a Base 13 cumlative XOR trapdoor calculation algorithm ... making it mathematically impossible given a large enough key [sic]".
KeyGen Automatic Synchronized Key Generator (TM) for Encryption Without Key Management: "No key management! No certificate authorities!". No visible means of security.
LockDown 2000!: Pretend firewall (or filter, or something) which displays dummy messages to soothe users (see the following entry for more details).
Lockdown 2000 - Test and Review:: In-depth analysis of what Lockdown 2000 really does, with contact details for the New Hampshire Consumer Protection Bureau (Lockdown are currently based in NH).
MaeDae Enterprises: "MaeDae's ENCRYPT-IT is one of the most respected programs in the encryption industry" (using an easily-broken proprietary algorithm in the unregistered and international version, although you get DES when you register it if you're in the US). This product is ICSA-certified snake oil.
Meganet VME Encryption: "A breakthrough new Encryption method, using innovative new technology...The Meganet VME can not be compromised". These guys have set new standards in snake oil marketing, down to getting accounts on newswire sites (eg Businesswire) and injecting bogus press releases mentioning big names like IBM (who have never heard of them, but whose lawyers are now aware of their existence) in order to get more coverage.
Microsort CA: "the ultimate file protection utility"... "file Locker uses an advanced and quite unconventional encryption technology to lock your files".
Multi-Matrix Methode / Kryptographische Integritaets-Funktion: MAC based on taking SIN(), COS(), TAN(), ATAN(), LOG10(), LN(), and inverses of data bytes multiplied by key bytes.
Navaho Lock: "In the second world war the Japanese were masters at breaking every code the Allies produced"..."Navaho lock uses 128 bit symmetric key encryption, the strongest legally available in North America, and Symmetric Keys are easier to use and more secure than Public Keys".
Net Titan page: Amazing what you can do in an afternoon with Visual Basic.
Novel Cryptography: Security(?) system where the participants are going to have more to fear from the DEA than the NSA.
NullRun Software - Strong Encryption Software - Products Section: "Socrates has been able to withstand every know attack it has been subjected to. Socrates can protect your mission critical communications better than any other program in the world".
One-Time-Pad Frequently Asked Questions: OTP's turn up in a lot of snake oil crypto. This FAQ explains why snake oil OTP's are never really OTP's.
One Time Pad (TM) makes Internet Access Secure!: "One Time Pad (TM) authentication" (a very primitive, non-free alternative to S/Key).
PadLock-It: Various ways of misusing a strong algorithm (Twofish) to make the application which uses it insecure.
PC Magic Software - Encrypted Magic Folders: "EMF's encryption offers good protection and excellent speed. It is, as far as we know, exportable"... "We developed our own encryption instead of using a standard".
PEPSOFT - WinXFiles: "Do you like the idea of unwanted viewers to be able to read ALL your files?". With our proprietary (and easily-breakable) algorithm, they can! This thing was listed in the "10 proven security programs" by PC Answers, in the 75 best Windows utilities by Windows News, was listed as a Featured Jewel in FileMine, got five stars from Shareware Junkies, rated "unbeatable and excellent" by PC Format, five stars from ZD Interactive, rated an "excellent application" in the Windows 95 Applications list, and got four smileys from RocketDownload. Just goes to show what happens when you rate crypto apps based on the user interface.
PostX: "The PostX System, working with existing corporate data sources, delivers millions of personalized, interactive and secure electronic envelopes. [...] "The face of the envelope comes alive with graphics and Web link objects". Encrypted spam?
Rediff On The Net, Infotech: Mr Locksmith: "I had a fear about math. But ironically, I have developed an encryption product using math". Indian snake oil.
Safeguard Fractal Encryption Software: Fractal encryption - even though it only uses a 40-bit key, it's a 40-bit key with *fractals*, which makes it magically safe.
Safe Send 1.0: "Uses a prearranged cryptic code which is all but impossible to crack by any individual or government".
Secret Envoy - Ion Marketing: "revolutionary artificial intelligence technology" (providing artificial security)... "SenCrypt, the most secure cryptographic algorithm known to mankind".
Secure Choice Proof Page: "new technology that is designed inherently differently than today's encryption techniques"..."mathematically provable to be absolutely secure"..."suitable for future technology progress (quantum computers)" (appears to be yet another pseudo-OTP system).
Security and Encryption Software: "Randomly selects a KeyCode which consists of 32 bits... the 32-bit KeyCodes of ENC32 have over 4 BILLION different possible codes!!!!!... Unless you know someone who has over 8 THOUSAND years to spend breaking a code, then you can be pretty sure your files will be SAFE wit h ENC32".
Secure File Encryption and Compression: "The author of two other encryption programs has released what he considers to be the 'ultimate' in encryption programs" (so what does that make the other two?).
self-destructing email. Now YOU decide what they can do with your mail!: The put rap music in the signature line at the end, I presume.
Shades White Paper: "A newly patented mode of encryption which is quick and particularly reassuring".
ShyFile - Email Encryption: "No generally known algorithms such as AES, DES, IDEA or those used by encryption software developers such as RSA, PGP or DEMCOM are integrated into ShyFile but only its own (exclusively developed) enhanced TL6144D algorithm". On top of all that, it works as a Javascript email attachment which users are expected to execute.
Superkrypt: "SuperKrypt products utilize the DNGT bulk encryption method. SuperKrypt technology is extremely powerful: No Cipher". No security either.
Supra Secure Mail (SSM), the highest encryption technology available: "the most secure and encrypted Email service transaction technology in
Surveillance, surveillance equipment, surveillance products, surveillance software, surveillance techniques: Security shyster central, specialising in anything which gets them media attention. Wait for their spam to appear in a mailbox near you.
Telejet Cryptphone - verschlüsselt Sprache, Daten und Faxe: 10^108 keys (we'll ignore the fact that it uses these keys with NewDES).
TRIAX GmbH Gesellschaft für Kommunikation und Datensicherheit: TRIAX(TM) encryption, now with OTPS(TM).
TRICRYPTION - IBM File Encryption Programs: Amazing keyless cryptography! Quadrillions of combinations!
TriStrata Security - Products: Yet another unreakable one-time-pad system, but this time with GAK. Note the amusing definition of infinity as just above 3.5e33.
Trontrail: "a simulation of an electron's path in a semi-sparse proton field to generate pseudo-random bits".
Turbo Encrypto HomePage: "Your documents are guaranteed to be safe an secure" (unless your opponent is using one of several Turbo-Crypto breakers, that is).
UnBreakable Encryption: "The strongest encryption algorithm in the world" - pity it uses a fixed key with a stream cipher, so you can recover the data with a simple XOR. In any case you can use an all-zero password. There's also a backdoor put in by the programmer (see the next entry).
UBE98 Backdoor: Backdoor in UBE98 discovered by a 14-year-old.
Breaking the "Unbreakable": More simple ways to break UBE.
Universal Data Cryptography Module: More advanced than RSA, DES, IDEA, and PGP! More advanced than all other algorithms put together! May even work on your system (after extensive patching and modifications).
UGEM System Characteristics: Military Lightning Server(TM) using a "Multi-sensory portable battle management network state space (patent pending)" with "digital microbe thunder clouds". This gem of programming will infiltrate any machine, "assimilate it", install itself, and take over. Oh yes, there's the obligatory "revolutionary new UGEM unbreakable encryption mechanism". "If you think this is a joke or science fiction ... then you are a fool". PS: I am not a crank.
Ultrimate Privacy: "Ultimate Privacy Corporation is the only commercial company offering a robust implementation [...] All other encryption systems are crackable". There's also a million dollar challenge in which the company bets a million dollars that their challenge is cooked to the point that noone can claim the prize.
Veil UltiMail System: Anonymous email. This product is sold by spamming, so it qualifies for the "avoid at all costs" category even if it isn't strictly snake oil.
VSSD - Java Security: Avoids security holes in SSL "by using One Time Pad (OTP) encrypting technolog [...] The true OTP encryption is unbreakable and is used by US Military". Now if only VSSP used a true OTP. The FAQ then explains how to fake an SSL connection to lull customers with SSL warm fuzzies.
Whale Communications - Air Gap Technologies: Claytons firewall which requires you to use their Secure Mail Shuttle(tm)(c)(r) to tunnel your macro viruses in instead of SMTP.
where to get SCOTT19U.ZIP: sci.crypts most indefagitable snake oiler.
WinFiles.com Windows 95/98 File Encryption Utilities: Veritable snakepit of encryption software (not all of these are snake oil, but there's an unusually high concentration of them present).
WinKrypt: Secure email encryption from the people who brought you SoftRam95.
Wizzard Software Encrypto!: "a sophisticated encryption program which allows you to secure any type of file" ... "totally unreadable to all data viewers known to man. This is powerful new technology that has never been broken" (you can break it with pencil and paper).