Draft:RotorCrypt X

RotorCrypt X is a portable hybrid encryption software for Windows 10 and 11 (64-bit), created by the German developer TB (bagdadi.de). It combines the historical concept of a mechanical rotor cipher machine with modern cryptography, in particular the AES-256-GCM standard. An Android version is currently being tested. The software is available on SourceForge and has received a rating of 4.5 out of 5 stars on Softpedia.[1][2]

User interface of RotorCrypt X — portable hybrid encryption software for Windows

Distinction from the RotorCrypt Ransomware

The name "RotorCrypt" is vague and possibly confusing. The ransomware called RotorCrypt (without the "X") also known as "Rotor", "RotoCrypt" and "Trojan-Ransom.Win32.Rotor", has been around since 2017 and was widely spread . This malware encrypts files on infected systems and demands ransom in BitCoin.[3][4][5]

RotorCrypt X is completely different: it is a legitimate application that only serves to protect the user's communication, and the platform Softpedia has independently reviewed and rated it.[1]

History and Concept

Historical Background: The Enigma Machine

RotorCrypt X is based conceptually on the Enigma machine, a mechanical and electrical cypher machine used by the German army to encrypt military messages during the Second World War. Every time a key was pressed , the Enigma would send the electrical signal through a series of rotating layers ( physical rotors ) , which would change the letter . This is a polyalphabetic substitution cypher . British mathematicians, including Alan Turing, broke the Enigma code. This is considered a major milestone in the field of cryptanalysis.

RotorCrypt X extends the rotor concept in a completely software based simulation and up to 50 virtual rotors. The full Unicode character set with 65,536 characters is used and combined with contemporary cryptographic standards.[1] [2]

Technical Architecture

Cascade Principle (Hybrid Encryption)

The RotorCrypt X employs a two-stage cascade encryption method where the same data stream is successively encrypted by both layers.

Stage 1 - Rotor Simulation (Polyalphabetic Permutation): The derived key defines the initial wiring, the ring settings and the start positions of up to 50 virtual rotors. Every character of the plaintext passes through all the rotors and the rotors advance in a fixed mathematical pattern after each character. This results in a significant diffusion effect, where the same characters in the plaintext lead to different characters in the intermediate step.

Stage 2 – AES-256-GCM The data stream produced in Stage 1 is fed to an AES-256-GCM engine. The Galois/Counter Mode (GCM) encrypts the data with a 256-bit key and generates an authentication tag that will expose any additional modifications of the encrypted data.[2]

Key Generation and Exchange

  • ECDH Curve25519: Each communication partner creates a 256 bit random ID which is used only once. The shared secret key is only established when the two IDs are combined in the ECDH process. Neither party can compute the final key by themselves.
  • HKDF-SHA3-256: A hardened password hash is combined with the result of the ECDH to derive the final session key using HKDF (HMAC-based Key Derivation Function) with SHA3-256.
  • Argon2id: Passwords are hashed with Argon2id, winner of Password Hashing Competition (PHC). Argon2id is memory-hard, making it much more difficult to brute-force on clusters of GPUs or ASICs.[2]

Security Features

RotorCrypt X after a successful handshake — communication is securely encrypted

Perfect Forward Secrecy²

Once the key exchange has been successfully performed, the temporary contact IDs are erased from memory. This means that older messages can not be decrypted even if an attacker later gains access to the system, source code or encrypted files.[2]

Handshake Process in Practice

  1. Both parties open the software locally and each generate a 256 bit random one-time ID.
  2. The IDs are exchanged over any communication channel (the IDs are useless by themselves).
  3. The two IDs are combined during the connection establishment to form the shared key using ECDH (Curve25519).
  4. Contact IDs will be deleted permanently after successful key generation.[2]

Length Padding and Single-Use Decryption

The encrypted output is always 5,950 characters exactly, no matter how long the actual plaintext you enter is. Shorter texts are filled with cryptographically random values. This prevents any traffic analysis, as the length of the messages could give hints about their possible content.

Additionally, each encrypted text block can only be decrypted successfully one time (Single-Use Decryption). The software prevents any further attempts to decrypt the same message, preventing replay attacks.[2]

AutoLock and Brute-Force Protection

If you don't do anything for 5 minutes the software will automatically close the session. zeroize() zeroizes all keys, Argon2id intermediate values and rotor states from the working memory.

If there are ten failed login attempts in a row the software performs a full DoD wipe as per DoD 5220.22-M standard. This means that all key files are overwritten and deleted in several passes.[1][2]

Integrity Check at Startup

Each time the software is run, it calculates a cryptographic checksum of its own machine code and compares this with a signature stored internally. If the value is different, the application will not start.[2]

Anti-Debugging Protection

The programme actively checks if a debugger is attached at runtime. Before the detection process is complete, the software immediately overwrites all key arrays in the working memory with zeros.[2]

Portability and Zero-Footprint Operation

RotorCrypt X is a portable programme, so you don't need to install it. It can be booted directly from a USB flash drive. The programme does not write any entries to the Windows Registry and does not create any temporary files in the system temp directory. All relevant data is stored on the external storage medium in the .rcx file format, which is used exclusively for this purpose.[2] [1]

System Requirements

Feature Details
Operating system Windows 10 / Windows 11 (64-bit)
Installation Not required (portable)
Internet connection Not required (fully offline)
Licence Freemium / proprietary (one-time purchase licence)
Price Free version with limited functionality; full version approx. USD 19
Languages English, German, Arabic, Chinese, French, Portuguese, Spanish, Turkish, Russian, Japanese
Android version Under closed testing (as of May 2026)

References

  1. ^ a b c d e Robert Condorache: RotorCrypt X Review. Softpedia, May 2026. softpedia.com
  2. ^ a b c d e f g h i j k Project page of RotorCrypt X. Via: SourceForge. sourceforge.net
  3. ^ Rotor Ransomware - How to decrypt, remove and recover your data. PCRisk, Oct 2023. pcrisk.com
  4. ^ How to remove RotorCrypt ransomware / virus. 2-Spyware, Oct 2018. 2-spyware.com
  5. ^ RotorCrypt Ransomware. SpyHunter / EnigmaSoft. enigmasoftware.com

Category:Encryption software Category:Windows software Category:Cryptographic software Category:Portable software

Content Disclaimer

Informasi ini disarikan dari Wikipedia dan disajikan kembali untuk tujuan edukasi. Konten tersedia di bawah lisensi CC BY-SA 3.0. Kami tidak bertanggung jawab atas ketidakakuratan data yang bersumber dari kontribusi publik tersebut.

  1. The information displayed on this website is sourced in part or in whole from Wikipedia and has been adapted for the purpose of restating it. We strive to provide accurate and relevant information, however:
  2. There is no guarantee of absolute accuracy. Wikipedia is an open, collaborative project that can be edited by anyone, so information is subject to change.
  3. It is not intended to constitute professional advice. The content displayed is for informational and educational purposes only. For important decisions (e.g., medical, legal, or financial), please consult a professional.
  4. Content copyright. Wikipedia is licensed under the Creative Commons Attribution-ShareAlike License (CC BY-SA). This means that content may be reused with appropriate attribution and shared under a similar license.
  5. Responsible use. Any risk arising from the use of information from this website is entirely the responsibility of the user.