DoD Encryption Wizard
I got curious and opened this project in JD-GUI. The namespace is afrlew, which I presume is some sort of acronym.<p>EDIT: Of course it is! AFRLEW = Air Force Research Laboratory Encryption Wizard<p>The lion&#x27;s share of the crypto appears to be in called Hut8.class, which JD-GUI didn&#x27;t fully decode successfully.<p>This looks odd:<p><pre><code>    private void incrementSaltIndex(byte[] paramArrayOfByte, int paramInt)
    {
      int tmp5_4 = (paramInt + 3);
      paramArrayOfByte;
      if (0 == (tmp5_1[tmp5_4] = (byte)(tmp5_1[tmp5_4] + 1)))
      {
        int tmp20_19 = (paramInt + 2);
        paramArrayOfByte;
        if (0 == (tmp20_16[tmp20_19] = (byte)(tmp20_16[tmp20_19] + 1)))
        {
          int tmp35_34 = (paramInt + 1);
          paramArrayOfByte;
          if (0 == (tmp35_31[tmp35_34] = (byte)(tmp35_31[tmp35_34] + 1)))
          {
            int tmp50_49 = (paramInt + 0);
            paramArrayOfByte;
            if (0 == (tmp50_46[tmp50_49] = (byte)(tmp50_46[tmp50_49] + 1))) {
              throw new ArithmeticException(&quot;Value overflow&quot;);
            }
          }
        }
      }
    }
</code></pre>
Their PasswordGenerator class is also interesting. Has a loop that runs for an arbitrary 80000 iterations, etc.<p>Overall, no obvious vulnerabilities, but definitely in the &quot;written by a bored undergrad student in their spare time&quot; realm from what I saw. Obviously, I wouldn&#x27;t recommend using it.