Questions tagged [encryption]

Process of encoding information such that decoding requires the knowledge of some secret (a key). This tag covers questions about obfuscated and encrypted programs, or tools, but higher level questions may get better answers on Cryptography Stack Exchange.

Filter by
Sorted by
Tagged with
1
vote
0answers
239 views

Decrypting/Decoding encrypted/encoded data

I'm trying to increase the interoperability of some database software. The database can write and read "stored SQL queries". I wanted to figure out the format of these SQL queries so I can build them ...
0
votes
1answer
107 views

Finding out hash type having initial string and hash

I am a part of community dedicated to modding videogames. We've are having troubles identifying hash type. What do we have: A list of text strings and hex representations of their hashes - http://...
2
votes
0answers
357 views

What encryption/compression is this, and how to encode/decode from it?

I've been trying to reverse engineer an Android app's communication protocol using a combination of Xposed and Packet sniffing. Most of the packets the app sends have this header set: Content-Type: ...
0
votes
1answer
313 views

Is this anti-tamper solution fool-proof?

https://libreboot.org/faq/#intelme Introduced in June 2006 in Intel's 965 Express Chipset Family of (Graphics and) Memory Controller Hubs, or (G)MCHs, and the ICH8 I/O Controller Family, the Intel ...
1
vote
1answer
487 views

Which encryption/decryption algorithm is used in Synology Cloud Sync format 3.0 session key and data encryption?

Background: Based on general information in a whitepaper from Synology, I have reverse engineered the specifics of their Cloud Sync encryption algorithm; see synology-decrypt for details. In this ...
4
votes
1answer
3k views

Having keys and binary, how do I reverse/decrypt a stream encryption?

I would like to ask if you have any idea or approach to reverse engineer a decryption algorithm to find the opposite encryption function. I do have all required keys and fields and of course the ...
3
votes
1answer
474 views

How can I determine if a piece of code is an encryption algorithm?

I am trying to reverse engineer a malware, and came across a piece of code that I suspect is an encryption/decryption procedure, however I do not know for sure. I can recognize that it extracts its ...
2
votes
1answer
88 views

Unkown Swap Encoding

I'm trying to figure out this encoding in malware.. All I have are the static strings.. I was able to figure one out so there is plaintext on one: e-snAetgrU$ translates to $User-Agent Here are ...
1
vote
0answers
187 views

Overwatch Sombra ARG community asking for Cryto/Steg help [closed]

We are looking for some crypto / security expertise in solving some difficult puzzles in a ARG campaign for a Blizzard game called Overwatch. The challenges introduced and solved by the community ...
3
votes
1answer
729 views

Reversal of unknown obfuscation or encryption with known plaintext

Introduction For academical reasons I am reversing a firmware for an embedded device. I have already created a perl script which is able to parse the firmware structure and extract files from it (its ...
1
vote
2answers
19k views

Driver's Licence Last Name Numbering Format (Ontario, Quebec, New Jersey)?

So I found out that Ontario Driver's Licences have the following format: LXXXX - NNNIY - YMMDD L - first letter of last name XXXX - number referring to your last name NNN - number referring to your ...
2
votes
1answer
1k views

is it possible to decrypt Enigma and RC4 encryptions?

i have been working on a bug for almost a year trying to figure out how i can fix it. the app is suppose to show some message like ("Processing")to notify a user that the main function is executed, so ...
3
votes
1answer
119 views

Help deciphering binary that creates 3 passwords

I found a binary on a device I've been working on, it's called genrandpass and the only user input is a public key (which is a .bin file) that's stored locally on the device. It also gathers some ...
2
votes
1answer
357 views

help getting at encrypted firmware [includes .SMIME and .gz.aes files]

I found firmware for Slingbox 500 by sniffing the outgoing connections it is making. Having trouble making heads or tails of it though. I'd really love to see the filesystem because it's running ...
2
votes
1answer
312 views

create pem from ecc signature bytes

I am researching an QNX ARM based car navigation and it seems this system has a backdoor that enables telnet access without password to the system if a challenge/response succeeds. When a file ...
-2
votes
1answer
389 views

EXE Encryption Techniques

Are there any tutorials available for learning how to do encryption of an EXE ? I am particular interested on how it decrypt's itself and runs in memory. If there are any tutorials or post that ...
1
vote
1answer
498 views

Find encryption algorithm used by a program?

I have a 64 bit program that runs under windows. It has the ability to encrypt a specified file with what I believe is a 256 bit AES key. The user specifies the input file location and the desired ...
1
vote
1answer
842 views

Figuring out the CRC part of a packet

Currently, I am trying to figure out the packet structure (for encryption) of an old MMO in order to create an emulator. Its official servers shut down 3 years ago and this version is over 11 years ...
0
votes
1answer
2k views

Possible to Bypass V-Safe100 USB encryption?

I have a Verbatim flash drive that I do not know my password for. Most of my searching for a solution has led to me to answers like "take the loss and reformat the drive" (losing all encrypted data). ...
5
votes
1answer
3k views

Question about Keeloq - A car remote control standard

I have a question about Keeloq security. I have an original car remote controller (BFT Mitto 2) and I know this chip uses HCS301 with Keeloq implementation. I would like to clone this remote for my ...
5
votes
1answer
1k views

Obfuscated AES decryption assembly

I have recently been sifting my way through a whole load of assembly to try to identify how a program is decrypting some data. Thus far I have identified how the IV is extracted, that the IV is 16 ...
1
vote
2answers
1k views

Extract decrypted token from EXE

EDIT As some people have pointed out, this exe file classifies as a 'virus' on some analysers. I can assure you this exe is from a very trusted source, and is actually part of a large puzzle (which ...
0
votes
1answer
230 views

How would you protect this Crypter?

Imagine you are working in a kind of crypter that only works with the current function deciphered, rest of the code is ciphered by symmetric encryption. When a new function is about to be called, the ...
1
vote
1answer
982 views

Debug an application for analyzing file decryption

I have an encrypted raw data file generated by an application. This file is used in a second application to generate a readable text file based on the raw data. I need to change a few values in the ...
1
vote
1answer
109 views

Isolating encrypt/decrypt instructions in an execution trace

If you have an execution trace of a program, and know it uses say AES for encryption. Can you isolate the instructions for encryption with that knowledge alone?
2
votes
2answers
2k views

Java - Decipher encrypted classes in a jar file

I have a couple of classes that are encrypted. The class loader must decrypt these before executing in the JVM. The question is, how and where? What can I do to understand who is responsible to ...
2
votes
1answer
1k views

How would I go about finding an encryption key or cipher by decompiling a program?

I became curious about how Trend Micro communicated with its servers so I gleaned some of the unique and standard HTTP headers that were being sent back and forth using Fiddler2. I created a winsock ...
0
votes
1answer
124 views

Reverse engineering parameter value on subroutine call

I'm trying to find out what value a certain parameter has when it's called (I know "parameters" are gone after compiled, but you get the idea). The pseudo-C and assembly code are: sub_171F4A0(ctx, ...
11
votes
3answers
17k views

ZTE encrypted backup config file

I was poking around in ZTE Speedport Entry 2i (CPE used mostly in Germany, Slovakia etc, probably custom made for Deutsche Telekom). It's possible to download backup of config from UI. I found out ...
1
vote
1answer
266 views

Understanding decoding communications over interfaces

I'm currently in the middle of trying to decode the communication of an hydrometer. Thanks to a previous question made in this site I was able to find a PDF describing the communication of a different ...
0
votes
0answers
111 views

Locate compressed section of executable

I am playing with Philips DICOM Viewer - download version R3.0 SP3. This viewer can display DICOM information (press F9). Since the displayed strings are not stored in the DICOM file itself, I suspect ...
5
votes
0answers
604 views

Reverse engineering an hydrometer's Bluetooth communication

This is a very specific question. I'm currently working on a project to create an android application capable of reading the values of an hydrometer via Bluetooth. By reading the datasheet, I suspect ...
1
vote
0answers
451 views

Help on 7zip PW cracker / Reverse engineering question

So a couple weekends ago I attended a cyber Security workshop where I met a prospective employer who gave me a business card. On one side it read "There are two individual challenges that lead to a ...
0
votes
1answer
185 views

How to find out what encryption/encoding has been used

So my uni just had some on break into the email server and send out a load of emails with a suspicious looking executable. I'm on Linux so I downloaded the file and ran the Strings command and saw a ...
2
votes
1answer
2k views

Assistance in Decrypting Lua script that is obfuscated with Base64 > SSL

Can anyone on here help me on decrypting the SSL encryption that protects this LUA script linked at the end of this topic ? Basically they are encoded with Base64 then SSL, but I have no idea how to ...
3
votes
3answers
1k views

Reimplementing the x86 AESENC instruction in python

I'm having troubles implementing the AESENC x86 instruction in python. I'm reverse engineering the decryption of a indie video game. They use AES but they xor some generated data around and the key ...
0
votes
0answers
474 views

How to identify the encryption in packet data using OLLYDBG [duplicate]

I've been slowly learning the processes of packet decryption over the last 6 or so months, and it's been slow progress. I've found the winsock2 send function in OllyDbg, and I'm using this tutorial ...
4
votes
1answer
2k views

Reversing encryption by analysing executable

I have a program that reads data from a file, parses/organizes it, and spits it out as an encrypted XML. The application can also take an encrypted XML and spit out the original file. My objective at ...
4
votes
2answers
5k views

What key is being using to encrypt the key transport in this Zigbee capture?

I am working with a Zigbee system and I have been trying to grab the network key as it is exchanged during pairing. I wasn't having much luck with the combination of TI Packet Sniffer, Wireshark and ...
1
vote
1answer
539 views

File reverse engineering - .tbl format

I've been trying to google any information about how can i create a viewer for some custom file formats. In my case I've extracted multiple .tbl files from game sources. This file contains a database ...
1
vote
2answers
388 views

How to find compressed or encrypted parts in a packed executable?

I want to analyze an executable that went through a packer to look for the parts that have been compressed or encrypted. Of course, it also means that I want to find the code for the decompression or ...
1
vote
2answers
791 views

identify packer compression or encryption algorithm

I do have an executable packed file. I want to detect compression or encryption algorithm dynamic and static ways separatly; of course without signature base way. How can I detect compression or ...
7
votes
1answer
9k views

Reverse Engineering of a packet encryption function of a game

I am trying to make a game server emulator for a specific MMORPG (Perfect World). I know the basics of how the network of the game works and the structure for some packets, but they all are encrypted, ...
11
votes
2answers
2k views

Protect data stored in binary

Let's say I've some function(i.e. hash function), that generates value from input seed and some precomputed hash values, that are stored somewhere in binary. What are the possible approaches for: ...
2
votes
3answers
2k views

Declaring block as a string in IDA

I'm reverse engineering a binary that has very generic, standard xor+math encryption on every string. I've written IDAPython to find each one(they're used in a generic way) and decrypt them, then add ...
4
votes
1answer
193 views

What can I do with a SSH certificate?

Doing an information security project at the moment. After gaining access to ftp drive, there was a file simply called 'hackme' inside. It contains what looks like to me a SSH certificate, but not ...
2
votes
1answer
1k views

finding a RC4 Encryption function in obfuscated assembly code with no symbols

RC4 encryption is quite basic and its Pseudo random generation algorithm is given at Wikipedia When Looking for a hashing algorithm like MD5 or SHAx it is pretty simple to look for the Hashing ...
2
votes
2answers
548 views

SHA + Mersenne Twister

I'm trying to decrypt some audio files. At first I thought that they were encrypted using Blowfish, but apparently "SHA + Mersenne Twister used for generate key and decrypt". What exactly does this ...
3
votes
1answer
553 views

Identify a decryption scheme

I'm trying to identify a decryption scheme used by some licencing mechanism. It took me some time to realize that this was encryption and this is some kind of follow up to this other question of mine :...
4
votes
0answers
3k views

Well-known JSON obfuscator that puts the string “Salted12” in front of obfuscated files?

I have an application that pulls some JSON definition files from the internet. In former versions of the application, these files were genuine json files; now, in a later version, they seem to be ...