Update: UltraVNC 1.4.3.6 and UltraVNC SC 1.4.3.6: viewtopic.php?t=37885
Important: Please update to latest version before to create a reply, a topic or an issue: viewtopic.php?t=37864

Join us on social networks and share our announcements:
- Website: https://uvnc.com/
- GitHub: https://github.com/ultravnc
- Mastodon: https://mastodon.social/@ultravnc
- Facebook: https://www.facebook.com/ultravnc1
- X/Twitter: https://twitter.com/ultravnc1
- Reddit community: https://www.reddit.com/r/ultravnc
- OpenHub: https://openhub.net/p/ultravnc

Plugin comparison: AESV2 1.0, ARC4 1.0, MSRC4 1.2.4

Should you have problems with the DSM plugin, here's the place to look for help or report issues
Post Reply
scovel
100
100
Posts: 307
Joined: 2004-07-12 11:56
Location: CT, USA
Contact:

Plugin comparison: AESV2 1.0, ARC4 1.0, MSRC4 1.2.4

Post by scovel »

Plugin comparison: AESV2 1.0, ARC4 1.0, MSRC4 1.2.4

[redge: MSRC4 1.2.2 not compatible vista as user mode and config button crash winvnc]

All three function basically the same way. Keyed, or keyless. IV and 128 Bit. AESV2 and ARC4 add SALT to the key for each session.

Differences:

MSRC4Plugin:
Encryption API: Microsoft Crypto API
Encryption: RC4, Unique IV for each session. NO SALT
Key Length: 40, 56, 128 (Depends on OS and patch level)
Speed: Fastest

ARC4Plugin:
Encryption API: OpenSSL
Encryption: RC4, Unique SALT & IV for each session
Key Length: 128 (regardless of OS)
Speed: Faster

AESV2Plugin:
Encryption API: OpenSSL
Encryption: AES, OFB mode, Unique SALT & IV for each session
Key length: 128 (regardless of OS)
Speed: Fast

ARC4 and MSRC4 plugins are basically equivalent. The MS Crypto API seems to be a little more optimized than the OpenSSL's RC4 encryption algorithm.

The MS Crypto API is a MAJOR pain, and I'd love to dump it. Maybe after the OpenSSL plugins have had some time to mature... The MS Crypto API is just a little different for each version of Windows.

RC4 is a fast and light encryption method. It has not been broken. Some BAD IMPLEMENTATIONS have been broken (WEP for one!). SSL uses 128 Bit RC4 encryption.

AESV2 plugin is the gold standard for the truly paranoid. If you need the BEST in encryption plugins, and don't mind sacrificing a little speed (you won't really notice) for security, this is the one for you.

AES is THE government standard for encryption. 128 Bit AES is required for government approved encryption applications. It is slightly slower than RC4.

If the server was setup with a key, the client must have the same key.

For the truly paranoid, using a key and a password is the gold standard in security. Any would-be hacker has to have BOTH your key file AND your password in order to get access to your machine.

Moderated by redge (2006-08-09 23:36): splitted from another topic and added sticky
(Oliver: removed moderation tag to allow editing!)
(Sean: updated for MSRC4 1.2.2)
(Redge: updated for MSRC4 1.2.4)
msrc4plugin.dsm 1.2.4.0 is available with ultravnc 1.0.6.4 full and update, actually and with vncviewer 1.0.6.4
Last edited by scovel on 2009-08-09 19:49, edited 7 times in total.
OfficialGuest
Guest Account
Posts: 53
Joined: 2004-08-22 09:38

Re: Plugin comparison: AESV2 1.0, ARC4 1.0, MSRC4 1.2.1

Post by OfficialGuest »

The MSRC4 plugin does not use a salt anymore
scovel
100
100
Posts: 307
Joined: 2004-07-12 11:56
Location: CT, USA
Contact:

Re: Plugin comparison: AESV2 1.0, ARC4 1.0, MSRC4 1.2.1

Post by scovel »

True. I was going to edit this but I got the message:
Sorry, your post has been moderated so you can't edit it.

Redge, is there a way for me to edit this thread?

Sean
User avatar
Oliver
Site-Admin
Site-Admin
Posts: 532
Joined: 2004-04-21 23:04
Location: Frankfurt am Main
Contact:

Re: Plugin comparison: AESV2 1.0, ARC4 1.0, MSRC4 1.2.1

Post by Oliver »

scovel wrote:True. I was going to edit this but I got the message:
Sorry, your post has been moderated so you can't edit it.

Redge, is there a way for me to edit this thread?
This is a per-post thing. I removed the moderation tags. These are usually added to allow moderators to "lock" access to a post and show that it has been moderated. Try again now.
Oliver

How to Report Bugs Effectively
My homepage | WinDirStat
PGP-keys:
  • Forum or UltraVNC-related: 0xA2DD1DBD, E18B 2E2F 4F3E D143 4ED4 3E2B E172 FB55 A2DD 1DBD
  • Other matters: 0x0E88590F, 38B5 5EBA A470 C0F7 0942 81B8 C779 D829 0E88 590F
Post Reply