[Jolly]

Isn't it vulnerable when it decrypts information?

[Master]

Isn't it vulnerable when it decrypts information?

Check this page on how it works.

[Brawler]

Check this page on how it works.

With respect... That page only describes the concept on a very high level.

It would be more interesting to understand the specifics of how and when this tool passes the "clear text" information over to the applications.

From my head I imagine that the process looks something like this at a low level:

Press a key on the keyboard -> raw data passed to driver -> driver performs encryption -> passes encrypted data over to OS -> OS passes keystrokes over to application (typically where key logging occurs) -> Key scrambler hooks the target application and decrypts keystrokes -> application uses information


However I still have some questions:

1. How does the keyscrambler differentiate between applications .... If I just change my keylogger to log the encrypted information to an app owned by me... wouldn't the keyscrambler just decrypt it for me?
   
2. Is it possible just to call the decryption function myself? The symmetric key is on the target box and its going to be called on every keystroke... Whats stopping my keylogger from calling it?
   
3. Does anyone actually trust or need this software? The level of permissions this software requires seem more like a liability then something that would be a benefit.
   

[Master]

With respect... That page only describes the concept on a very high level.

It would be more interesting to understand the specifics of how and when this tool passes the "clear text" information over to the applications.

From my head I imagine that the process looks something like this at a low level:

Press a key on the keyboard -> raw data passed to driver -> driver performs encryption -> passes encrypted data over to OS -> OS passes keystrokes over to application (typically where key logging occurs) -> Key scrambler hooks the target application and decrypts keystrokes -> application uses information


However I still have some questions:

1. How does the keyscrambler differentiate between applications .... If I just change my keylogger to log the encrypted information to an app owned by me... wouldn't the keyscrambler just decrypt it for me?
   
2. Is it possible just to call the decryption function myself? The symmetric key is on the target box and its going to be called on every keystroke... Whats stopping my keylogger from calling it?
   
3. Does anyone actually trust or need this software? The level of permissions this software requires seem more like a liability then something that would be a benefit.
   

I can't answer all your questions but I found out that there is a way "to avoid KeyScrambler and log the keys the user presses, you need to create a script to hook yourself on the application you want by using handles. When a user presses a key, you read the value of the active input as a string and get the last character from it. That’s the key the user pressed.” but this was discovered in 2013 so it should be patched. Also about trusting this software, it first can out in 2006 and has been tested thorough out the years by 'security experts' and seems to pass. So I let make your own mind about that.

Check this article

[Master]

This is most definitely interesting but as mentioned before, KeyScrambler decrypts the keystrokes to pass it to the application. A really advanced keylogger could still capture the keystrokes after decryption. If this became a really popular and known product used by a large majority of the internet, you can bet your ass hackers will get around it by reversing it and making the keylogger capture after decryption. Kudos still as it has a purpose and will help against most keyloggers, I think(need to test).

KeyScrambler is getting updated all the time so if there is an advanced keylogger that beats KeyScrambler it would for long.

[mothered]

Interesting. Wouldn't stop MITM as @Brawler said.

In fact, It also wouldn't stop "stealer" from grabbing your user credentials.

For critical account logins, I have a dedicated system for that alone and nothing else. Even better, boot via a Linux Live CD/USB and no need to worry about being keylogged or anything of that nature.
On topic here, Keyscrambler Is still a pretty good form of protection.

[Inori]

Is the bar at the top showing input before or after conversion?

If it's end-user input and someone's put some kind of incremental screenshot thing on your system, you're pretty much the epitome of fucked.

[mothered]

Is the bar at the top showing input before or after conversion?

I'm not quite following, perhaps I'm missing the obvious.

You Input your text, and It then converts It to an encrypted format. It's an on the fly encryption.

[Inori]

I'm not quite following, perhaps I'm missing the obvious.

You Input your text, and It then converts It to an encrypted format. It's an on the fly encryption.

the green bar that says "Encrypted Keystrokes:"

[mothered]

the green bar that says "Encrypted Keystrokes:"

The moment you type, the text Is encrypted (on the fly) and displayed In the green bar thereafter.

Whether there's latency from the time a given keystroke Is entered to the time It's actually encrypted, I'm not too sure. I haven't performed an In depth analysis as to It's overall functionality.