London
16 September 2003 
Martinez Sylvain

bugs_contact@encryptsolutions.com
bugs_contact@bcrypt.com

Project WebSite:  http://www.encryptsolutions.com

Unix version. 
Windows 9x/2K/NT/XP : available 
 
lib version  :   4.1.0 - "IBIZA"
Unix Package :   4.1.1

          B U G S 

Big and Usefull Great Security 
          V 4.1.1

DYNAMIC CRYPTOGRAPHY ALGORITHM

-------------------------------

       USE THESE PROGRAMS AND LIBRARY AT YOUR OWN RISK !

       I AM NOT RESPONSIBLE FOR ANY POSSIBLE DAMAGE MADE
       WITH THESE PROGRAMS OR LIBRARY.

       THE LIBRARY AND THE APPLICATIONS HAVE BEEN CREATED BY 
       SYLVAIN MARTINEZ. 

			--------------------------------
			DYNAMIC PRIVATE KEY CRYPTOGRAPHY
			--------------------------------


NOTE            [15/09/03]
CONTEST         [26/07/02]
INTRODUCTION    [26/07/02]
CONTENTS        [15/09/03]
GREETINGS       [15/09/03]
INFORMATIONS    [15/09/03]


NOTE 
----

!! THE LIBRARY VERSIONS FROM --- 4.0.0 --- 
   ARE NOT COMPATIBLE WITH THE OLDER VERSIONS !! 

I worked as a UNIX and Security Adminitrator for a big financial company
for 3 years. I am now working for one of the major world oil company since 
July 2001 first as the International Security Admin and Monitoring Manager then got promoted as an IT Security Specialist (Project Manager) for their financial and trading department.

I invite you to go to my personal home page to find all the information
about me (CV, letter of motivation, project, contest, emuls, etc) :
http://www.encryptsolutions.com/english/author/cv/cv.html

For the latest information about this project please go to the official
project home page 

This new version is NOT compatible with the old versions (1.x, 2.x, 3.x).
PLEASE READ THE CHANGES and DEVELOPPER DOC FILES !
as you will have to recompile/change your applications to use this new library. 

The "cryptedtext" file is there for the `make test`
The original file was: "If you can see this BUGS is working !"

This project is "OPEN SOURCE" and under the GNU/GPL License. This means you
can use it for free. However you must respect the following conditions:
(Based on the cryptlib license example)

 - You must give the authors credit in your software and/or documentation:
   Sylvain Martinez

 - If you make any changes to the code, you should send a copy of the changes to
   the author or authors to allow them to integrate them into the code. This is
   to allow a central consistent version to be maintained.

 - Any software you create with this code may not be merely a set or subset of 
   BUGS, with or without minor added functionality or a different interface. 
   In particular you can't distribute BUGS (or any modified form of it) as your
   own encryption product. This is to stop people adding their own wrappers
   and selling it as "their" encryption product.  


CONTEST
-------

The 2 contests are now over and nobody managed to decipher the crypted files
and win the 100 GBP. They were both running for almost 2 years. 
Please refer to the BUGS project web page for the solutions.

I might start a new contest soon.

For more information please read the README file in the contest/ directory


INTRODUCTION
------------

Please read the documentation in the doc/ directory before
asking me questions about the algorithm !

This new library version is named "IBIZA"

This package includes a C library and some sample programs that 
demonstrate that this library is ... powerful !
It has now been tested for years and I received many reports highliting
any weaknesses found. This library has reach a strong security level now.

It is a cryptography library, you can crypt any type of data.
Your key length to crypt is ... unlimited :)
It is a PRIVATE KEY Algorithm.
it is also a DYNAMIC CRYPTOGRAPHY ALGORITHM
I may do later a PUBLIC KEY Algorithm.

You can generate passwords, manage users, hide text in file, 
have a secure chat, etc

In fact, this project became one of my first interest !

Thanks to everybody who've shown me their support !
even a small email is always welcome :O)
thank you !

All the comments are welcome ! 
So please, just let me know what you think about this application,  
and even better, about the crypt algorithm. 

For any comments, bugs report, support, send me an email :
   bugs_contact@encryptsolutions.com
or 
   bugs_contact@bcrypt.com

please, add [BUGS] at the begining of your subject if you 
want a quick answer.


CONTENTS
--------
This package is composed of several tools which crypt data easily
and allow you to make MULTI USERS PROGRAMMS

all programs use the BUGS algorithm written by MARTINEZ SYLVAIN
and the BUGS functions which are in the library : 'bugscrypt.a'

           
-> bugscrypt.a [v4.0.0 - 19/11/00]
   The BUGS crypt library used by my apps.

-> bcrypt [v3.4 - 19/11/00] 
   it's an app which crypts any type of file 

-> bchat [v2.0 - 19/11/00]
   This programm demonstrates the use of the stream crypt function
   It is a basic chat application. It uses the streaming encryption
   function in BUGS. This is secure and pretty stable now ! 
   However more work could be done as I do not check for the identity
   of the client/server... but even if someone could potentialy hijack
   your connection if he doesn't know the password you are using
   he won't be able to send you correct data. 
   Remimber to launch the SERVER FIRST !!

-> bkey [v1.8 03/10/00]
   Used to generate long keys or secure keys.
   These keys can be used after like an input password with
   bcrypt.

-> blogin [v3.1 - 12/09/03]
   Allows you to make multi users applications
   It's important to note that the ^C doesn't work with
   this prog !
   (In fact all signals are stopped)
   So you can can make prog with the S-bit which allow good
   user to go in your directory, copy your files, etc ...

   PLEASE READ THE COMMENTS IN THE SOURCE
   THIS PROGRAM WORKS BUT CAN BE DANGEROUS IF
   YOU DO NOT FOLLOW THE INSTRUCTIONS CAREFULLY

-> bhide [v1.7 - 03/10/00]
   Used to hide some data (eg. cipher text) in a file like
   BMP, JPG, etc

-> bpass [v2.3 - 03/10/00]
   it's like the unix passwd , but that's make a passwd file in
   your directory.
   You can administrate several user

-> bpassdel [v1.8 - 26/07/02]
   Used to remove a user in the password archive file created
   with bpass.

-> block [v1.0 - 11/11/00]
   Used to crypt a file. This is a light version of bcrypt as you cannot
   change the keylength or other parameters.
   This is useful if you want a realy easy to use cryptography application.
   Please read the HOWTO for more information

-> bunlock [v1.0 - 11/11/00]
   Used to decrypt a file crypted by block. This is a light version of bcrypt
   It is the same than doing >bcrypt -u -s cryptedfile -d uncrypted
    
-> bmore [v1.0 - 11/11/00]
   Used to look at a file crypted by block without decrypting the file 
   "physically". Indeed the file is only decrypted into memory and then
   display on the screen. This is a sort of "secure more". Really useful
   if you don't want to keep crypting/decrypting a file.

I've compiled and tested all the prog on LINUX (RedHat 9.0 - Kernel 2.4.20)
and SOLARIS 9

Send your questions, comments and bug reports for bcrypt's package to:
 bugs_contact@encryptsolutions.com
or
 bugs_contact@bcrypt.com 

ATTENTION !!! IN SOME COUNTRIES THIS SOFTWARE MAY BE ILLEGAL
SO DON'T USE IT IF YOU ARE NOT ALLOWED...
I WON'T BE RESPONSIBLE IF YOU BADLY USE THESE APPLICATIONS... 


GREETINGS
---------

BIG THANKS TO:
  
  Megan:     Thanks for your support and understanding!

  Simon Huot: Thanks for the really good work you've done on analysing the
              security of BUGS v.3.x 
              You found many weaknesses and gave me a lot of improvement
              ideas. This new version (4.0.0) has been done because of 
              you ! ;o)

  Trevor Tippins: Your comments on my algorithm have been really valuable
                  and really motivated me to carry on improving it !

  GNU Team : Thanks for all your free products !
 
  LINUX team : Computer world without linux ?? ahah let me laugth :)

  KDE's Team : Thanks for your wonderfull and really useful Windows Manager 

  Emanuel Bouvier : For your help in Delphi and your free beers at the madison 
  
  Stephane Guelfo : Your help has been very helpfull many years ago, for 
                    the bits swapping !

  Mr Oswald : Even if I have only 10 minutes to speak when I have a meeting 
              with you about my algorithm (hum ...), thanks for the enhancement
              idea you told me (bits operation part, and some improvements of my
              bilateral swap part) 

  Stephan Legrand : Who sent me a patch for BSD OS.
  
  Joanne Ellis: Thanks for your help in the documentation, and for your
               friendship

  Florent Martinez: Thanks for the official bcrypt and BUGS logos !
                    They are great !!!

  Thierry Martinez : The last, but not the least.
                     well, little brother, if you didn't pushed me to do
                     a crypt's algorithm I would have probably never done one.
                     He has created a windows application using the BUGS
                     library it is on the BUGS official web site and it's
                     called: winbugspro
                     Ok, let's speak a bit more :)
                     My little brother was born in 1984, and has been programming
                     since he was 7 years old. after having reproduced
                     The Windows 95 GUI on his Amiga when he was 12 years old, 
                     an Artificial Intelligence module, a 3d vector drawing 
                     convertor is now working on some DELPHI components 
                     I bet, we will hear about you soon, brother ... 

                     http://www.thywom.com

INFORMATIONS
------------

/*****************************************************************************/
/* SYLVAIN MARTINEZ                                                          */
/* IT Security Specialist                                                    */
/* First Interest: Cryptology and Network security                           */
/* email: bugs_contact@encryptsolutions.com                                  */
/* http://www.encryptsolution.com                                            */
/*                                                                           */
/*                         Bugs, the Guru meditation                         */
/*****************************************************************************/
