#1
|
|||
|
|||
Find out Encryption
Hello!
Is there any little tool, to testout different Encryptions? I have an encoded string, and I (guess I) know the key. The only problem is: I don't know the encryption. I'm just sure its not DES, but it could be 3DES, AES, or whatever, so a little Tool, where you can enter crypted data, key, and see output, would be nice. Does anything like that exist? Otherwise I would have to implement every encryption into a test-program and compile it |
#2
|
|||
|
|||
and if it is a custom algorythm?
|
#3
|
|||
|
|||
I don't think so.
Let me explain: There are several programs by one company, which communicate over the web, and use encryption to protect their data. One (an Applet) uses simple DES-encryption (encrypted by an PHP-Script), and I already found the key. It does not consist of arbitrary hex-values, converted to ASCII-characters, it's a nice word It's likely, that the other programs (Win32) use the same key, but obviously different encryption. I may be completely wrong, but I think it's worth a try, before I spend hours with disassembling and analyzing the algorithm. |
#4
|
|||
|
|||
Try the peID plugin.
|
#5
|
|||
|
|||
Yes, try KANAL plugin for PEiD.
However, it works differently than you expected. It scans the file for known constants, strings etc. - thus identifying the algorithm. No encryption/decryption takes place. |
#6
|
||||
|
||||
There is also "Crypto Searcher" by x3chun, you can find it here hxxp://x3chun.wo.to/
|
#7
|
|||
|
|||
I think there has no such mothed to find out the encryption.
First. there has so many encryptions include user define encryption that you even cann't know. Second. encryptions just convert a binary stream to another. It has no feathers in it. Maybe you can get some clue by the binary stream. But it is very difficult and not exactly. |
#8
|
|||
|
|||
True, there's an infinite number of encryptions - but the real applications often use "standard" ones, possibly even using common libraries.
|
#9
|
|||
|
|||
If u really want to try out some of the common cryptos,
try it with Cristals Crypto Tool or Cryptool (hxxp://www.cryptool.de/) |
#10
|
|||
|
|||
Hiya,
I recommend to everyone Cryptobench v1.0 as a great tool for testing out encryption methods, especially if you are fishing for which algorithm it might be ;-). Generally I've found its better to either look up any constants (usually found in an initialisation function) or look up the first 4 chars of any lookup tables used in your mystery algorithm to discover if its a known crypto. Of course you could also just compile a few examples using Crypto++ or Miracl and have a look at what various methods look like in ASM, bignum code is quite easy to identify once you've seen it a few times. Regards CrackZ. |
Thread Tools | |
Display Modes | |
|
|
Similar Threads | ||||
Thread | Thread Starter | Forum | Replies | Last Post |
Blowfish encryption | lonewolf55 | General Discussion | 2 | 09-18-2003 02:08 |