Features...

Speedcrypt Features

Speedcrypt is a software solution designed to protect user data through advanced encryption mechanisms, leveraging a wide range of powerful and well-established cryptographic algorithms. In addition to encryption, it integrates robust password derivation techniques based on modern HASH functions, ensuring strong and reliable key generation. The system includes multiple functional components, each dedicated to a specific aspect of data protection and secure operations:

All cryptographic algorithms implemented in Speedcrypt are subjected to a Self-Test during application startup, ensuring their correct initialization and operational integrity before any processing begins. In addition, users are provided with dedicated functions to perform full and independent validation tests, allowing direct verification of the reliability and correctness of each cryptographic component. This dual-level verification approach—automatic at startup and manual on demand—ensures continuous trustworthiness of the cryptographic environment and provides an additional layer of control for advanced users who require explicit validation of the underlying mechanisms. The following sections outline the main features of the Speedcrypt Project, focusing on the implemented algorithms, the available cryptographic functions, and the interaction between the software and the operating system.

Cryptographic Engines

Speedcrypt integrates a diverse set of encryption algorithms, carefully chosen to meet a wide range of operational requirements. Each algorithm has been evaluated for its security strength, computational efficiency, and design philosophy, allowing the system to handle tasks that range from high-security protection to performance-sensitive operations. The modular architecture of Speedcrypt ensures that each cryptographic engine operates independently, is fully validated at startup, and can be selected according to the specific needs of the user or the operational context.

This diversity not only enables flexibility in encryption strategy but also guarantees predictable and reliable behavior across all file and string encryption tasks. Users can confidently select algorithms knowing that each one has been rigorously tested, correctly initialized, and is supported by Speedcrypt’s automatic self-diagnostic routines. For full technical details, see this page of the Site.

Salt Engines

Speedcrypt implements a dedicated entropy generation subsystem for the creation of SALT values, based on a selection of high-quality pseudo-random number generators (PRNGs). These generators are carefully designed to provide strong, reliable, and unpredictable entropy across all cryptographic operations, including key derivation, password generation, and secure initialization of encryption engines.

The system ensures that the same entropy sources are consistently reused within the password generation module, providing uniform behavior and reproducibility where required, while maintaining strict alignment across all security components. By centralizing SALT generation and integrating it with Speedcrypt’s self-diagnostic routines, the software guarantees that each cryptographic operation starts from a verified and secure random foundation. This design not only enhances the security of derived keys and passwords but also ensures operational consistency, predictability, and robustness, even in complex workflows involving multiple algorithms and cryptographic contexts. For full technical details, see this page of the Site.

HASH Engines

Speedcrypt integrates a broad and highly structured set of HASH functions, specifically engineered to support secure password derivation, data integrity verification, and advanced cryptographic workflows. The architecture is designed to provide both depth and flexibility, allowing precise selection of algorithms based on security requirements, performance constraints, and interoperability needs.

The framework includes 49 HASH functions, spanning from legacy algorithms to modern, state-of-the-art constructions. This wide availability ensures compatibility with existing systems while enabling the adoption of the most advanced cryptographic standards. For full technical details, see this page of the Site.

Compression Algorithms

In this new version of Speedcrypt, the decision to exclude file compression from the core encryption workflow is the result of a deliberate engineering assessment, focusing on security, performance, and architectural clarity.

🖊️Security Considerations

By avoiding compression prior to encryption, Speedcrypt eliminates potential attack surfaces associated with compression-based vulnerabilities. Compression can introduce side-channel risks, such as data-dependent size variations, which could inadvertently leak information about plaintext content. Removing this step ensures that the encryption process operates in a fully isolated and deterministic manner, preserving the integrity and confidentiality of all processed data.

✒️ Performance Implications

Eliminating compression reduces computational overhead during both encryption and decryption operations. The resulting processing pipeline is streamlined, enabling higher throughput and faster response times. This is particularly relevant when handling large datasets, where compression could introduce noticeable latency and reduce system responsiveness.

✒️ Architectural Pragmatism

From a design perspective, separating compression from encryption reflects a modular and disciplined approach. Each component within Speedcrypt maintains a clearly defined responsibility, avoiding unnecessary interdependencies between disparate functionalities. Encryption focuses exclusively on data confidentiality and integrity, while compression, where used, is confined to an auxiliary utility.

The only compression operation currently implemented utilizes the .NET System.IO.Compression library. Its application is strictly limited to the external Utility tool, which serves two specific purposes:

Associating encrypted files with the Speedcrypt program icon for user convenience.
Managing backups of sensitive project data, where compression serves to reduce storage footprint without interfering with core cryptographic operations.

✒️ Operational Isolation

This strict separation ensures that all critical cryptographic processes remain predictable, secure, and performant. Auxiliary tasks, such as file backups and optional compression, operate within a controlled and isolated context, minimizing the risk of unintended interactions and maintaining a clean and robust architecture.

🖊️ Engineering Summary

Encryption is executed without intermediate transformations, ensuring deterministic behavior and security.
Compression is decoupled and applied only in a well-defined auxiliary context.
System performance is maximized, particularly for large-scale file processing.
The architecture remains modular, maintainable, and aligned with best practices in secure software design.

This approach guarantees that Speedcrypt remains focused, reliable, and optimized, while still providing practical utilities for file management and backup operations.

🖊️ Security Correlation Note

The Compression Handling design in Speedcrypt follows strict security engineering principles:

Isolation of Functions: Compression is deliberately separated from encryption processes, preventing unintended interactions that could compromise data confidentiality or integrity.

Predictable Data Flow: By avoiding compression on encrypted files, the system eliminates potential side-channel or compression-based attack vectors, ensuring that ciphertext size does not leak information.

Operational Integrity: Encryption and decryption routines are executed without auxiliary transformations, maintaining consistent and verifiable results across all file operations.

Performance-Security Balance: Removing compression reduces computational overhead while enhancing security, ensuring that high-volume operations are fast, stable, and reliable.

Controlled Auxiliary Usage: Compression is only applied in the Utility module for backup management, fully isolated from cryptographic operations, guaranteeing that core security is never affected.

This design ensures that Speedcrypt maintains a robust, secure, and auditable operational environment, where encryption integrity and system predictability are never compromised.

Secure Deletion

Following encryption, Speedcrypt integrates a comprehensive framework for secure file deletion, designed to ensure that sensitive data—including matrix files and other critical assets—is rendered unrecoverable. The system provides multiple erasure algorithms, each engineered to meet specific security requirements, operational contexts, and performance considerations.

Together, these principles ensure that every secure deletion within Speedcrypt is executed in a controlled, trustworthy environment, fully aligned with both regulatory standards and practical security needs. For full technical details, see this page of the Site.

Secure Desktop

Speedcrypt Ver 2.0.0.0 introduces a fully rewritten Secure Desktop module, designed from scratch to provide users with a safer environment when entering sensitive information such as passwords or encryption keys. Unlike the previous version, which relied on an external project and was resource-intensive, the new Secure Desktop is much faster, lighter, and more efficient, ensuring minimal impact on system performance while maintaining a high level of security.

The Secure Desktop creates an isolated input environment that protects data entry from most common software-based keyloggers. By intercepting and managing input at a low level, it minimizes the risk of sensitive information being captured by malicious programs running in the background. For full technical details, see this page of the Sito.

Obfuscate Print Screen

With version 2.0.0.0, Speedcrypt introduces the Obfuscate Print Screen feature, designed to limit the ability of attackers to capture sensitive information displayed on the screen. This mechanism works by intercepting screen capture commands and applying visual obfuscation techniques that make the captured content unreadable or misleading.

The feature provides an additional layer of protection for critical operations, such as entering passwords or viewing encryption keys, by reducing the effectiveness of casual or software-based screen capture attempts. For full technical details, see this page of the Site.

Password Generator

In the latest version of Speedcrypt, the Password Generator has been completely rewritten from scratch, offering higher performance, reliability, and flexibility. The module leverages the software’s pseudorandom number generators, combined with a robust entropy collector, to ensure that generated passwords are unpredictable and secure.

The generator supports advanced patterns, allowing users to define rules for character sets, lengths, and complexity. This flexibility enables the creation of passwords tailored to specific security requirements, while still maintaining strong randomness and resistance to brute-force attacks. For full technical details, see this page of the Site.

In this page, we have summarized some of the main features of Speedcrypt version 2.0.0.0. In the rest of the Site, you will have the opportunity to explore additional features and their detailed operation. For correct and efficient use of the software, it is strongly recommended to read the other pages of the Site!