1

I managed to copy the Firmware out of a device and tried to extract to content with binwalk but the Signature tells it's encoded with OpenSSL

Which are the possible ways to find out which type of chipper has been used and so on. Cheers,

| improve this question | |
  • 1
    I don't think there's anything in the signature that indicates what encryption was used (justsolve.archiveteam.org/wiki/OpenSSL_salted_format). There is likely some code in the firmware to do the decryption though; can you provide a link to the firmware image? – devttys0 Sep 25 '14 at 15:14
  • Thanks devttys0 i send you a email with a few examples to webmaster@ the FW is customized for each SN so i better don't post it here ;) – albi Sep 25 '14 at 15:45
  • Is this dumped from the device itself, or is it a firmware update file? There doesn't appear to be anything besides the encrypted data, so something has to be decrypting it. Could be done in hardware, but more likely there's some other software that is doing the decryption. – devttys0 Sep 26 '14 at 14:46
0

As mentioned in the comments, OpenSSL salted format (if that's indeed what you have) stores no information about the encryption used. You can probably guess some things, e.g. the block size from the size of the encrypted data, but to know for sure you need access to the code which processes the file (e.g. the firmware dumped from the device or the firmware updater if it does the decryption). Without access to that this question can't really be answered.

| improve this answer | |

Not the answer you're looking for? Browse other questions tagged or ask your own question.