registered if license is not maxed (via Options window).
Purchased/donated license has no limit and can increase security
everytime in unlimited steps, others only in one step.
Safe e-Messages (Safe Mail):
• The POSTOFFICE/e-Postman signature key, the Safe384VR is replaced with
two new keys, P256k1 and BrainpoolP512r1. The changes were necessary to
make Safe Signature compatible for verification with third party
applications (e.g. OpenSSL, PGP/GPG)
• Public ECC keys are stored in e-Postman in compressed format and without
unused parameters.
• The old POSTOFFICE/e-Postman are fully functional, but you need a new one
to use the Safe Signature.
• Better navigation when changing the PostOFFICE password
• The verifiable random source for ECC256k1 and ECCSign has been changed
from 4096-bit source to 512-bit source and the "Bitcoin" key derivation
function ("Ultra-Safe" type) is used. This allows a clear and secure
integration of the bitcoin wallet into POSTOFFICE. It also allows the
association of PostOFFICE with a bitcoin address; with the maximum
security key in PostOFFICE.
• The calculated BTC addresses and private keys are displayed in the
PostOFFICE detail. Calculated BTC addresses and public keys are displayed
in the postman (RAW) detail. The data is calculated from 256-bit koblitz
ECC keys.
• RSA key generation - The Miller-Rabin test now uses 1024 rounds (previous
versions used 80 rounds) with the OpenSSL library. The internal test has
80 rounds (previous versions used 54 internal rounds).
• The public exponent for over 2048-bit RSA has changed from
5AFE64B17C0D3299 to 5AFE64B17C0DE999, both 64-bit primes. Standard
security uses a value of 65537 (17-bit).
• The prime number test for 64-bit versions is exact, for larger numbers
is used the Miller-Rabin test with user-defined rounds (up to 524288).
• POSTOFFICE, e-Postman, e-Message always use compression and 6 root
ciphers. Any external SCX cipher can be used as an added 7th cipher (this
can be enabled/disabled with Options). Until version 5.0.9, the
compression/encryption setting was used according to the Options setting.
Safe Signatures:
• This is a new, amazing tool that can sign/verify any file or a whole group
of files in an unlimited directory structure
• Has a special process for audio files. Can only sign/verify the included
audio stream for known PCM/DSD audio formats with 32/24/16/1-bit (WAV,
AIFF, MP3, OGG, FLAC, ALAC, APE, WV, DSF, DFF containers) with defined
SNR sensitivities to detect gaps in the beginning and end of the music.
• You can use the new open standard "Safe Signature" with a human-readable
format, for thousands of files in tree structures, with 8 different
hashes, 3 independent signing keys, SafeNotes signature, 5 different
audio hashes from the internal audio stream, smart CRC/hash calculated
only from music data whose level is not zero or exceeds the defined noise
level (-12dB to -96dB) also using adaptive auto-detected background
noise.
• Signed files can be verified using third-party applications (OpenSSL,
PGP, etc.) and also standard generated checksums (SHA256, MD5, etc.) can
be verified by a third party.
• Paranoid Button: Files signed with the "Safe Signatures" tool can be
verified using a third-party OpenSSL application immediately with an
automatically generated batch file. This third party verification is
similar to the verification in Bitcoin tools.
• You can also create an (in our opinion already obsolete) OpenSSL signature