CryptoPadSplicer v0.4 - 2000/01/23
Copyright (C) 2000 Boris Wesslowski <bw@kybs.de>


WHAT DOES CRYPTOPADSPLICER DO?
This program is a conduit for a Palm (TM) application by Maxime Labelle
called CryptoPad, it can transfer files from the Palm (TM) series of
personal digital assistants (or read them from disk), decrypt and save them
on a PC.


LATEST VERSION
The latest version is available from
http://www.kybs.de/boris/software.shtml


INSTALLATION
You need gcc and a recent version of pilot-link with header files
installed (you might need to adjust your include and link paths in the
Makefile). A simple

  make
  make install

should do the rest. CryptoPadSplicer was developed under Linux, it might
work under other OSs. If you had to change something to get it to
work please send me a patch. I might add autoconf support in the future.


USAGE
The -h flag will give you a short help.
If you start the program without options it will connect to the Palm,
retrieve the CryptoPad entries, ask for their password if they are
encrypted (if the following entries are encrypted with the same password it
won't ask again), and save them in a directory (the name of the entry is
it's title, the name of the directory is the category the entry is in).
With the -d flag you can specify a directory into which all the categories
and entries will be put. The -l flag will list all entries with their index
number, category, name, size (on the palm, the file on the PC will be
smaller because it does not contain the title) and if they are encrypted.
You can get a single entry by specifying it's index number with -g. The -f
flag will allow you to use a database you already have on disk (from a
backup or with pilot-xfer -f). Finally, you can specify the port with -p in
case your cradle is not connected to /dev/pilot. You can combine all the
flags.


CREDITS
This program interfaces with or includes software written by
- Maxime Labelle, who wrote CryptoPad.
- Kenneth Albanowski, who wrote pilot-link.
- Eric Young <eay@mincom.oz.au>, who wrote the cryptography code used
  without modifications.


DISCLAIMER
This program is in beta state, it might break. Even while it is very
unlikely that something bad happens to the CryptoPadDB on the palm or as a
file (since it is only opened read-only) the program itself might segfault
if you have a unusual database or entry (mail me if this happens). Use at
your own risk (and look at the license). Distribution of this software
might be prohibited in certain countries.


WARNING
The way blowfish is used in CryptoPad has several weaknesses, be advised
that CryptoPad will, as Bruce Schneier might say, "keep your data safe from
your little sister", but nothing more. Don't take Maxime Labelle's
statement about data not being recoverable if you forget your password too
seriously...

If you use a password of 5 characters or less CryptoPad wouldn't even fall
under (former?) US cryptography export restrictions.

Maxime said that the Cryptopad file format will not change in the future
anymore, so I don't expect him to remove this weaknesses.

I might write a version of CryptoPad with a more secure blowfish
implementation, one that can create a file on the palm that cannot be
compromised easily even on a modern PC or even SC if I happen to have some
free time (which is rather unlikely). Anyways, if you are interested or in
need of such a program (and don't like or want to use TopSecret, MemoSafe,
Cipher, Safe or whatever all the other similar Palm applications are
called) let me know.


LICENSE
This program is copylefted under the second and any later version of the
GNU Public License (see COPYING). If you plan to distribute or bundle it
with other software ask me first.
