113 - 4t HIT Mail Privacy LITE and Scrambled Egg

113 - steganography series: simple apps to encrypt things from your little brother or sister. test of:
4t HIT Mail Privacy LITE and also Scrambled Egg steganography
==== written Nov.06.2011 by JCPMA©

4t HIT Mail Privacy LITE 1.01 by Niagra Software (2002) can encrypt 250 characters
text into an image.
http://www.4t-niagara.com
It runs on Windows. The source image can be any common format jpg, gif, etc...
Output file is a BMP (or ZIP or HIT archive of the bmp). Zip apps should be able to extract the bmp file from either archive. Checksums of the 3 bmps differ but the decrypted text message is OK.

I performed the encryption process for 3 cycles with two different jpgs.
One cycle gave 3 outputs where the CRC checksum was identical for the 3 versions of bmps.
With the next jpg, the CRC was different for the 3 versions of bmps. I confirmed this by repeating the cycle again but with different text and password.

250 text characters isn't very much. It is about a paragraph. It is however easy to put such a small amount of cipher text into a small image. The smallest jpg I have so far used measures approx. 54x54 pixels. You can probably use a smaller image if you wish.
It appears the output bmp may contain a digital WATERMARK which tells the app that it is an encrypted container. I haven't confirmed this. But for casual use, this will be inconsequential.
It would be nice if this app could output files in other image formats, perhaps jpg, gif, png etc..
This app encodes traditional ANSI text.
It does not encode Unicode text.

My subjective ratings for this app (out of 5 stars):
-overall:3
-ease of use:5
-encryption strength:3
-plausibility/deniability:unknown
-versatility:2

The Copyright © holders have all rights reserved. The software and web documents are provided "as is" without express or implied warranty of any kind by the parties and contributors involved.


4tHITMailPL-ss-etc.png http://www.mediafire.com/?reppiphg8r6hio8
4tHITMailPL-ss-etc.png http://www.box.com/s/xgh5vfbpinfek3blkz43

[image/example]-the password is "password"
outputs are:
130k_G0RD0N.bmp (126KB), http://www.mediafire.com/download.php?9752o0fwjdl9o5g http://www.box.com/s/13alyflnr9opyzi8fb30

130k_G0RD0N.HIT (99KB), http://www.mediafire.com/download.php?gabixidpvbxrwcu http://www.box.com/s/xxnia662xh33tf6g7xa4 and

130k_G0RD0N.zip (99KB). http://www.mediafire.com/download.php?qscc32r3d85yl4r http://www.box.com/s/ghr4fvdkxbu44b5u0iku

[file share folder 4thitmail] http://www.mediafire.com/?x6tkew1hawgex
http://www.box.com/s/0jbuy8099ny81u6x21d8

4tHITMailPrivLite.zip MD5:F4EFA7E141D293CEA31F603DA10A8985
http://www.mediafire.com/download.php?6brdzc4ay7ma9y8
http://www.box.com/s/qhs84id5lnn53fkt4bks

4tHITMailPrivLite.sgn Crypton1.2 signature file
http://www.mediafire.com/download.php?ulas8oge8i7y743 http://www.box.com/s/xpn9gmv1u8y5xvzm0yqg


jcpma2011-public-crypton-key_242A.pbl Crypton1.2 public key
http://www.mediafire.com/download.php?3123o7c1nnlt21t http://www.box.com/s/v846yqiqb405eqs0zgnn

Scrambled Egg 0.4 Portable
===
ŠË is primarily a text to text encryption app. I stumbled onto its steganography feature by accident. Press the "Export" button on the lower right corner and it will export the cipher-text into a square PNG image. The size of the square depends on the amount of cipher-text. The square PNG is an image of noise/static.

Description & user guide for Scrambled Egg
http://www.makeuseof.com/tag/control-text-encryption-scrambledegg/
Download page for Scrambled egg portable 0.4
http://code.google.com/p/scrambled-egg/downloads/list


SummaryTableOfSomeSteganographyApps (ratings out of 5):
###########
App-name
Carrier/Output; CarriedData; (Ease) EncrStength; [Deniab.] Comment;
--------------- ------------ ------ ------------ --------- --------
4t HIT Mail Privacy Lite v1.01
common images/bmp,zip..; text; (5) 3; [unknown] userfriendly

BmpPacker v1.2a
(none)/bmp; anyfile; (3) 4; [0] output is always strips of noise bmp

Camerashy v0.2.23.1
gif/gif; text or basic html; (2) 3; [3] somewhat clunky

Eyemage IIE v0.9.0.1
bmp/bmp; anyfile or text; (4) 4; [4 w.TradPassword] lowerDeniability w Intimakeys. noisyBmpMakingFeature

Jpg+FileBinder v1
jpg/jpg; zip; (3) 0*; [0/low] ok for casual steganography, (*any encryption depends on the zip app used)

Jphs jpeg hide and see v0.5
jpg/jpg; anyfile; (3) 3; [4] hiddenFile's extension is lost

Paperback v1
none/bmp; anyfile; (4) 3; [0/low] practical for small files

Puff v2
png,bmp,others?/same; anyfile; (1) Unknown; [Unknown] MediaFilesAsCarriers; Clunky/low confidence

Scrambled Egg v 0.4 Portable
none/text or png; text; (4) 5; [unknown] pngs are noise/supports Unicode text!
==
In a previous posts, I wrote about some of the picture steganography apps mentioned above.