Detection Framework

Stegbreak has to guess from the retrieved information if a given key is correct.
JPHide 0.3 (UNIX):
At least 40 bits certainty plus length check.
Blowfish key schedule is image independent.

JPHide 0.5 (Windows);
At least 72 bits certainty plus length checks.
Blowfish key schedule depends on image.

JSteg-Shell:
RC4 encryption is restricted to 40-bit keys.
32 bits certainty.

Outguess:
All values in header are possible.
Too many candidate passwords, dictionary attack currently not feasible.