I've implemented an alleged RC4 algorithm
(
http://en.wikipedia.org/wiki/RC4). I think I've done enough in a
slightly modified version, called modcrypt. Any analysis of the mods
are welcome, and as an incentive, I'll offer $200 to anyone who
decrypts the challenge.enc file.
The changes are:
* Adds the plaintext character to j as we encrypt/decrypt. This
enters any entropy in the compressed data into the S table. I find the
arguments against this tactic to be quite unconvincing. The benefits
are having a nice checksum, and distributing data well, thus enhancing
security.
* Reduces nonce value to 20 bytes - 160 bits should be enough.
* Reduces discarded bytes to 512 - There's no evidence on the net
that more are needed.
* Simplifies mixing of the password and nonce values with the key,
since throwing away the first 512 bytes mixes them up anyway.
I'm just an amateur here, so any help is appreciated. The site to go
to is
tinycrypt.sf.net. The file to analyze is modcrypt.c (in
tinycrypt_0.37.tar.gz).