[Cryptech Tech] Equal bytes
Joachim Strömbergson
joachim at secworks.se
Fri Dec 12 13:06:37 UTC 2014
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Aloha!
Basil Dolmatov wrote:
> Russ pointed to not only presence of two consequtive equal bytes (
> frequency should be no more than 1/256^2 ), but the presence of
> pattern "AA XY AA AA", probability of which should be incredibly
> small.
Yes I know and I'll add support for finding those patterns as we speak.
(I was working on it). But finding equal bytes will capture all those
occurences too and was a fast way of catching them. And as you can see
by the frequency they issues seems to be in both files.
- --
Med vänlig hälsning, Yours
Joachim Strömbergson - Alltid i harmonisk svängning.
========================================================================
Joachim Strömbergson Secworks AB joachim at secworks.se
========================================================================
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/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=BlNx
-----END PGP SIGNATURE-----
More information about the Tech
mailing list