Questions tagged [encryption]

Process of encoding information such that decoding requires the knowledge of some secret (a key). This tag covers questions about obfuscated and encrypted programs, or tools, but higher level questions may get better answers on [crypto.stackexchange.com](https://crypto.stackexchange.com/).

Filter by
Sorted by
Tagged with
1
vote
2answers
69 views

Strings weirdly split in binary

Recently I have come across a few parts in a binary that looked odd to me, and I wanted to ask if this is something common compilers do, and if there is a way to undo it. (The binary is from a raw ...
3
votes
1answer
103 views

How does IPA decryption works?

All IPAs being downloaded from AppStore gets encrypted on servers as part of FairPlay DRM. But decryption is accomplished on local device. As far as I know there is some hardware module which contains ...
0
votes
0answers
21 views

how can i Encrypt a decrypted zte zxhn h108n V2.5 config file?

i have decrypted the config file using a program i found online ( maybe made by python to exe ) so to decrypt using it you type is command into CMD decode_zte_config.exe config.bin config.bin.xml ...
0
votes
0answers
49 views

How does windows 10 v.1803 save the password in the SAM file?

I'm doing a search on how windows 10 saves hashed passwords in the SAM file. From this article I suppose that Windows does this: If the password is 123456 and the user has RID 000003E9: CALCULATION ...
0
votes
1answer
91 views

Need help identifying a -possibly- encrypted string

I'm having some trouble building an app that gets data from a database to keep a log of files added to a website. Most URLs are generated from a file ID and a time stamp, some of those URLs are ...
2
votes
2answers
168 views

How to identify the encoding performed on this string

I have an old application that stores the username and password in plaintext but encoded by an unknown encoding algorithm to me, it seams like base64, but I think it's not, It seams that any word ...
0
votes
0answers
60 views

Reverse Engineering a Vehicle Identification Number (VIN) encoding

Not sure if this is the right place so please point me to the right place if needed. I have an input of a VIN (Vehicle Identification Number) number with 17 characters, each character is either an ...
0
votes
0answers
68 views

find a video file in memory dump of a process

I have a player that plays encrypted video files and works like this: I open an encrypted video file with it it decrypts the video file and writes it to its memory and plays the file from the memory ...
0
votes
1answer
263 views

how can i decrypt huawei HG531s v1 config file?

I have tried to follow this guide but libxmlapi.so didn't have the required ATP_GetInfo1 function so i moved to the next file libhttpapi.so it had ATP_GetInfo1 ATP_GetInfo2 ATP_GetInfo3 ...
-1
votes
1answer
79 views

Determining the hash algorithm used [closed]

I have some test data: Test 1 Text: pass1234 Salt: 33b9d87b83c097ce3ea6e6f84a298f839aafc6d7aa23d909a43ac94bdee35ddf Hash: 61477724c136fb285918114792685a4d Test 2 Text: test1234 Salt: ...
0
votes
0answers
48 views

How to guess the key of XOR encryption in java?

I am trying to find the key of XOR encrypted string in java. It is very much probable that the key is eight characters long. I have the encrypted string. I am not able to understand how to go ...
3
votes
1answer
98 views

String Encoding and Decoding Method

so I came across the following string encoding method in python. def encode(the_string): encoded_string = '' rotations = ord(the_string[-1]) + 5 for i in range(0, len(the_string)): ...
0
votes
1answer
101 views

Is it possible to recover the key to a decrypted file?

Is it possible to recover the key to a decrypted file if you have the initialization vector and it uses RijndaelManaged? If so how? The file I want to recover the key from is a xml that looks like ...
0
votes
1answer
53 views

me_cleaner and fwupd, or manipulating UEFI .cab files

I'd like to extract a plain dump of the UEFI firmware of my laptop (1:1 copy of the flash content, often called .bin or .rom files) from the .cap file, so that I can modify it slightly with me_cleaner....
1
vote
1answer
120 views

Tool to search known hash/encryption algo in files in Windows

I am looking for a tool (the best would be an Ida plugin) that can search files in a folder for a known hash (md5/sha1 etc.) and encryption (aes /rsa etc.). I know an Ida plugin called FindCrypt2 but ...
0
votes
1answer
62 views

Where can I go to learn about decryption? [closed]

I understand the basics of encryption and decryption, but I don't know where to go to talk to people and learn more. Are there any forums or resources to look at to learn more? For example, I was ...
-1
votes
2answers
640 views

XOR encryption - How to find the key?

I'm trying to solve a crackme which basically uses a XOR encryption scheme in which the password is used as the key to an encrypted buffer which is subsequently executed. The following is the ...
1
vote
0answers
247 views

Reverse crypto algorythm, based on AES

Hello! I'm working on reversing one library (shared object) written for ARM architecture. It's obfuscated or packed with something pretty strong what makes debugging much harder and almost impossible ...
1
vote
1answer
208 views

Reversing a Java digest function, with known public key and source code

A Java application verifies that an XML string that came from a clearnet server (no SSL) has not been tampered, using a message digest. It does so with a public key stored locally, accessed with the ...
0
votes
1answer
100 views

how to find private Key and passphrase stored inside a program?

There are some files (drivers) that are encrypted, and these files are working in a program that is installed in my computer. The program using these files needs to decrypt them. I am sure that the ...
0
votes
1answer
103 views

Algorithm to find secret cipher S-box in bin file [closed]

Is there any algorithm that searches through binary file and detects existence of secret S-box built from look-up table (4 bit or 8 bit)? Consider the sbox is unavailable for public The attached bin ...
-2
votes
1answer
346 views

How do i find the decryption key for a encrypted text file [closed]

So context i have a game and a encrypted save file. My thoughts were how to find the decryption key in reverse engineering my game .I watched tuts but i think this topic isnt much detailed so i need ...
2
votes
0answers
99 views

How should I got about working out the format for this psp game?

I have been attempting to reverse engineer a format for a visual novel psp game ('Mirai Nikki RE: WRITE - 13 Ninme No Nikki Shoyuusha') and I have come to the understanding that the format works as a ...
-1
votes
1answer
64 views

How to use Python while debugging in IDA

I'm debugging an .exe file in IDA. At a specific point during debugging, I want the Python code to automatically take the data in *(eax+8) and encrypt it with that module and print the result to file ...
-2
votes
1answer
711 views

How to install ida plugin to identify encryption function

I saw here How to identify known encryption algorithm? the IDA plugin https://github.com/nihilus/IDA_Signsrch I don't understand how to install it . In the INSTALL I saw coppy the plug-in and ...
2
votes
1answer
760 views

How to identify known encryption algorithm?

I reverse an .exe file with IDA. I see a function that appears to be encrypting something by generating some random numbers. It there any tool to identify if it is a known encryption algorithm?
2
votes
1answer
124 views

How can I generate the recovery password on a legacy system (Original company is out of business) running on my local machine?

I'm attempting to use a legacy systems recovery feature that typically required calling/faxing a company that is no longer around. Basically, the system was designed to go into a recovery mode and ...
-3
votes
1answer
462 views

Identification of AES portion code in binary

I want to locate AES code portion in binary after reverse engineering. I have tried to locate manually and using plugin findcrypt2 but I was not successful. Kindly show me a direction so that I can ...
1
vote
1answer
2k views

Decrypting SQLite Database with key

I have a SQLite database that contains a dictionary (just words and definitions) that can be opened with free but proprietary software. To use with the software, it requires an 'unlock' key, which I ...
0
votes
1answer
116 views

Does someone recognize this “lookup table”? (used for xor encryption)

This table is part of the packet encryption of an old game for which I am developing a server. The crypto algorithm doesn't just xor the password with the message. It uses a multiple of the ascii ...
1
vote
1answer
402 views

Binary encryption

I'd like to ask your help to understand the algorithm used to encrypt these hex/bin firmware (for an ARM-Cortex M4 microcontroller). In the tar file above you can find different firmware versions. ...
2
votes
0answers
886 views

Arm hex firmware reverse

it has been a couple of months that I'm working on the firmware produced by a company that makes (not licensed) gamepad console adapters. One of my goal was to understand how they bypassed (hacked) ...
0
votes
1answer
184 views

Encrypted String? [closed]

(I made a topic but I was ask'd to re-made it) Hi! I have a program and when I want to decompile/dissamble it finish and when I inspect the code everywhere where should be some filenames there are .(...
3
votes
1answer
3k views

Finding the encryption key in a binary - IDA Pro and how an S-box might be represented in the binary

In practicing reading source code and analysing I've been looking at a program called aescrypt2_huawei which floats around the web and encrypts/decrypts the XML config file from Huawei routers like ...
1
vote
0answers
341 views

Need Help decrypting .luac files

I have been recently trying to decrypt .luac files inside an encrypted android app. I tried to follow some of the previous threads here but the following frida script didn't give any output. ...
2
votes
1answer
229 views

reverse checksum algorithm

I'm working on this pseudocode trying to find the correct input for the expected calculated value (i'm not sure if i can call it a checksum). I can't focus enough to generate the reverse algorithm, ...
1
vote
1answer
194 views

Unable to find Send/Recv type calls in Network Application

Target is protected by nProtect Gameguard. Packets are encrypted. Goal is to obtain unencrypted packet information via the client. I obtained the free, 5.0 version, of IDA, and disassembled GVOnline....
2
votes
1answer
4k views

How do Enigma, Themida and VMProtect compare to each other?

I'll be releasing a piece of software soon and I'm looking for good protectors. The three that came to my attention were: Enigma, Themida and VMProtect. I searched a lot online but I couldn't find ...
4
votes
2answers
2k views

TP-Link encrypted backup file TX-VG1530

I have been trying to wrap my head round this stuff so bear with me. I have a Tp-Link TX-VG1530. From the gui you can download the config file however the file is encrypted, I include a portion of ...
1
vote
0answers
647 views

How to decrypt .jpg files of comics app in a C Program?

I'm trying to decrypt jpg images of comics I purchased in my comic reader app on android but neither I can view them (after copying from SD card to Windows desktop) nor can I convert them to pdf to ...
2
votes
2answers
356 views

Emulation Project - GameGuard Protected Client

I'm not new to MMO Server Emulation, but I am new to working with a protected Client, and have very basic RCE skills. I would appreciate some direction, and maybe this won't be possible, given the ...
0
votes
1answer
323 views

How does a Smartcard work? [duplicate]

It appears there is more than just flash memory on Smartcards. Presumably there is also some sort of microprocessor. So then along comes this article: Crippling crypto weakness opens millions ...
3
votes
0answers
583 views

Obtaining the decryption keys for Super Mario Run (Android/iOS Game)

Super Mario Run is a il2cpp Unity game. Most of its assets are downloaded in-game through http requests. I particularly want the OGG files of the music. I can see the list of their names comes from ...
4
votes
2answers
950 views

Identify password generation algorithm

I'm a newbie who just started own way through reverse engineering so I apologize if my question is not appropriate. Currently I'm going through different Crackme puzzles and now I'm stuck. I've spend ...
0
votes
1answer
153 views

Checksum in CAN message

I'm trying to fake a CAN message, but I'm not able to understand how the 8-bit checksum is calculated. The checksum follows a pattern along with a 4-bit rolling counter. As long as the data of the ...
2
votes
1answer
491 views

Help me understand how to actually break an XOR/Vigenère cipher

My friend's server was recently hacked and I'm trying to decipher the malicious files I found in hopes of understanding the hack better. I can tell that they're using an XOR/Vigenère cipher and I've ...
2
votes
2answers
254 views

How can I identify how this string is being encoded so I can replicate it?

A friends company uses an old VB6 application to generate encoded strings to then use in their also old and out of date database system. They have the application running in standalone mode so I can ...
1
vote
1answer
389 views

Defeat RSA hash verification - QNX working example

I really liked the answer in this post: Defeat rsa hash verification However I do not really understand this part: "taking the signature s raised to the power of 3 modulus n we wind up with the ...
1
vote
1answer
125 views

What does this sequence of numbers mean?

so i'm reversing a file format of game. As far as i can understand the file i'm trying to reverse contains compressed textures. I'm already able to locate the textures and decompress them, but i'm not ...
1
vote
1answer
140 views

Do TPMs Send Stored Keys in Plaintext?

As you may know, the TPM (Trusted Platform Module), which resides on the LPC bus, allows the storage and retrieval of encryption keys and certificates securely. Within this Trusted Computing concept, ...