View Single Post
  #1  
Old 08-26-2017, 00:50
chants chants is offline
VIP
 
Join Date: Jul 2016
Posts: 826
Rept. Given: 47
Rept. Rcvd 50 Times in 31 Posts
Thanks Given: 737
Thanks Rcvd at 1,140 Times in 529 Posts
chants Reputation: 51
Tools for sophisticated binary key sniffing

Given a function call e.g. de/encryption in an app, is there a way to treat it as a black box and do techniques such as:

Data tracing where input data is traced, and each data dependent on that data by arithmetic or decision operations, is also traced, leading possibly to a very large amount of data being traced. In some sort of automated and easy to control way?

Control flow and data flow differential analysis. Flip one bit, and compare detailed execution traces and how the data is different between them, and where in its execution the divergences occur and such.

These sound like quite sophisticated techniques which could take a very complex task like breaking through very mathematically complex code - well obfuscated, and simplify it towards being nearly trivial and literally trivializing very sophisticated protection schemes.

Does anyone know of such comprehensive tools? I am quite certain some unreleased ones are used by certain security researchers and such but I do not know what is out there.
Reply With Quote