[Cryptech Tech] Equal bytes

Joachim Strömbergson joachim at secworks.se
Fri Dec 12 13:06:37 UTC 2014


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Aloha!

Basil Dolmatov wrote:
> Russ pointed to not only presence of two consequtive equal bytes (
> frequency should be no more than 1/256^2 ), but the presence of
> pattern "AA XY AA AA", probability of which should be incredibly
> small.

Yes I  know and I'll add support for finding those patterns as we speak.
(I was working on it). But finding equal bytes will capture all those
occurences too and was a fast way of catching them. And as you can see
by the frequency they issues seems to be in both files.

- -- 
Med vänlig hälsning, Yours

Joachim Strömbergson - Alltid i harmonisk svängning.
========================================================================
 Joachim Strömbergson          Secworks AB          joachim at secworks.se
========================================================================
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=BlNx
-----END PGP SIGNATURE-----


More information about the Tech mailing list