Comments on: ROT13 is used in Windows? You’re joking! http://blog.didierstevens.com/2006/07/24/rot13-is-used-in-windows-you%e2%80%99re-joking/ (blog 'DidierStevens) Fri, 12 Mar 2010 08:07:51 +0000 http://wordpress.com/ hourly 1 By: Didier Stevens http://blog.didierstevens.com/2006/07/24/rot13-is-used-in-windows-you%e2%80%99re-joking/#comment-37541 Didier Stevens Thu, 28 Jan 2010 11:28:53 +0000 https://didierstevens.wordpress.com/2006/07/24/rot13-is-used-in-windows-you%e2%80%99re-joking/#comment-37541 @anon coward: Take a look here: http://blog.didierstevens.com/2010/01/04/new-format-for-userassist-registry-keys/ @anon coward: Take a look here: http://blog.didierstevens.com/2010/01/04/new-format-for-userassist-registry-keys/

]]> By: anon coward http://blog.didierstevens.com/2006/07/24/rot13-is-used-in-windows-you%e2%80%99re-joking/#comment-37539 anon coward Thu, 28 Jan 2010 07:04:11 +0000 https://didierstevens.wordpress.com/2006/07/24/rot13-is-used-in-windows-you%e2%80%99re-joking/#comment-37539 Windows 7 RTM still uses Rot13, FWIW Windows 7 RTM still uses Rot13, FWIW

]]> By: Didier Stevens http://blog.didierstevens.com/2006/07/24/rot13-is-used-in-windows-you%e2%80%99re-joking/#comment-35825 Didier Stevens Sun, 27 Sep 2009 12:07:06 +0000 https://didierstevens.wordpress.com/2006/07/24/rot13-is-used-in-windows-you%e2%80%99re-joking/#comment-35825 > You can turn the encryption off, set (DWORD) NoEncrypt to 1 in This is not true for all Windows versions. My UserAssist tool has a function to do this. > You can turn the encryption off, set (DWORD) NoEncrypt to 1 in
This is not true for all Windows versions. My UserAssist tool has a function to do this.

]]> By: windowssucks http://blog.didierstevens.com/2006/07/24/rot13-is-used-in-windows-you%e2%80%99re-joking/#comment-35823 windowssucks Sun, 27 Sep 2009 10:52:06 +0000 https://didierstevens.wordpress.com/2006/07/24/rot13-is-used-in-windows-you%e2%80%99re-joking/#comment-35823 You can turn the encryption off, set (DWORD) NoEncrypt to 1 in ...\CurrentVersion\Explorer\UserAssist\Settings You can turn the encryption off, set (DWORD) NoEncrypt to 1 in …\CurrentVersion\Explorer\UserAssist\Settings

]]> By: bw http://blog.didierstevens.com/2006/07/24/rot13-is-used-in-windows-you%e2%80%99re-joking/#comment-34697 bw Sun, 26 Apr 2009 21:38:14 +0000 https://didierstevens.wordpress.com/2006/07/24/rot13-is-used-in-windows-you%e2%80%99re-joking/#comment-34697 heh it's another reason why people shouldn't use windows crypto api, even microsoft doesn't use it :P heh it’s another reason why people shouldn’t use windows crypto api, even microsoft doesn’t use it :P

]]> By: Quickpost: Windows 7 Beta: ROT13 Replaced With Vigenère? Great Joke! « Didier Stevens http://blog.didierstevens.com/2006/07/24/rot13-is-used-in-windows-you%e2%80%99re-joking/#comment-34080 Quickpost: Windows 7 Beta: ROT13 Replaced With Vigenère? Great Joke! « Didier Stevens Sun, 18 Jan 2009 23:18:28 +0000 https://didierstevens.wordpress.com/2006/07/24/rot13-is-used-in-windows-you%e2%80%99re-joking/#comment-34080 [...] Quickpost: Windows 7 Beta: ROT13 Replaced With Vigenère? Great Joke! Filed under: Encryption, Entertainment, Forensics, Quickpost, Windows 7 — Didier Stevens @ 23:17 Remember that the UserAssist keys are encrypted with ROT13? [...] [...] Quickpost: Windows 7 Beta: ROT13 Replaced With Vigenère? Great Joke! Filed under: Encryption, Entertainment, Forensics, Quickpost, Windows 7 — Didier Stevens @ 23:17 Remember that the UserAssist keys are encrypted with ROT13? [...]

]]> By: Null1024 http://blog.didierstevens.com/2006/07/24/rot13-is-used-in-windows-you%e2%80%99re-joking/#comment-26833 Null1024 Fri, 25 Jan 2008 22:23:08 +0000 https://didierstevens.wordpress.com/2006/07/24/rot13-is-used-in-windows-you%e2%80%99re-joking/#comment-26833 ROT13 was probably used because it's easy and cheap. ROT13 was probably used because it’s easy and cheap.

]]> By: Didier Stevens http://blog.didierstevens.com/2006/07/24/rot13-is-used-in-windows-you%e2%80%99re-joking/#comment-9721 Didier Stevens Fri, 22 Jun 2007 06:18:31 +0000 https://didierstevens.wordpress.com/2006/07/24/rot13-is-used-in-windows-you%e2%80%99re-joking/#comment-9721 I understand why the keys are encrypted (obfuscation), it's just surprising it's ROT13. Because I think that there was no ROT13 encryption/decryption function in the Windows library, so they had to add it for these keys. And why add a new function when you can use existing encryption functions? I understand why the keys are encrypted (obfuscation), it’s just surprising it’s ROT13. Because I think that there was no ROT13 encryption/decryption function in the Windows library, so they had to add it for these keys. And why add a new function when you can use existing encryption functions?

]]> By: Dean Harding http://blog.didierstevens.com/2006/07/24/rot13-is-used-in-windows-you%e2%80%99re-joking/#comment-9578 Dean Harding Thu, 21 Jun 2007 06:35:58 +0000 https://didierstevens.wordpress.com/2006/07/24/rot13-is-used-in-windows-you%e2%80%99re-joking/#comment-9578 I just found your blog linked from Raymond Chen's where he's describing the "Most Frequently Used Programs" list. Anyway, I thought I would just point out that the usual reason for using something like ROT13 is search. For whatever reason, they didn't want this registry key to show up when you did a search for "notepad.exe" or "Program Files" in the registry. I can think of a few reasons why they would want to do that, but then again, perhaps some clueless manager simply told the developers "this data must be encrypted for security reasons" and the developers (realising that this would be impossible anyway) just used ROT13... I just found your blog linked from Raymond Chen’s where he’s describing the “Most Frequently Used Programs” list.

Anyway, I thought I would just point out that the usual reason for using something like ROT13 is search. For whatever reason, they didn’t want this registry key to show up when you did a search for “notepad.exe” or “Program Files” in the registry. I can think of a few reasons why they would want to do that, but then again, perhaps some clueless manager simply told the developers “this data must be encrypted for security reasons” and the developers (realising that this would be impossible anyway) just used ROT13…

]]>