首页
社区
课程
招聘
讨论:加密算法特征码及其识别
发表于: 2005-2-18 19:11 19088

讨论:加密算法特征码及其识别

2005-2-18 19:11
19088
[COLOR=blue][FONT=courier new]
/**
 * 这是我在LIDA中找到的加密算法特征码
 */
int CryptSignatures(struct Crypt_Signature **CSigs)
{ 
  int i=0;
  
  unsigned long  L1[] = { 0x4787C62A, 0xA8304613, 0xD76AA478, 0xE8C7B756, 0x242070DB, 0xC1BDCEEE, 0xF57C0FAF, 0xFD469501 };
  CSigs[i++] = NewCryptSig("md5", L1 , 8, NULL, 0, -4, 0, CRYPT_SIG_DWORD);
  
  unsigned long  L2[] = { 0xEFCDAB89, 0x67452301, 0x6ED9EBA1, 0x98BADCFE, 0x5A827999, 0x10325476 };
  CSigs[i++] = NewCryptSig("md4", L2 , 6, NULL, 0, -4, 0, CRYPT_SIG_DWORD);
                        
  unsigned long  L3[] = { 0xEFCDAB89, 0x10325476, 0x67452301, 0xC3D2E1F0, 0x98BADCFE, 0x000C5361 };
  CSigs[i++] = NewCryptSig("ripemd160", L3 , 6, NULL, 0, -106, 0, CRYPT_SIG_DWORD);
  
  unsigned long  L4[] = { 0x03707344, 0xA4093822, 0x243F6A88, 0x85A308D3, 0x13198A2E, 0x299F31D0, 0x082EFA98 };
  CSigs[i++] = NewCryptSig("blowfish", L4 , 7, NULL, 0, -4, 0, CRYPT_SIG_DWORD);

  unsigned long  L5[] = { 0xAD6EA6B0, 0x49A7DF7D, 0x4B7A70E9, 0xB5B32944, 0xDB75092E, 0xC4192623, 0x9CEE60B8, 0x8FEDB266 };
  CSigs[i++] = NewCryptSig("blowfish", L5 , 8, NULL, 0, -4, 0, CRYPT_SIG_DWORD);

  unsigned long  L6[] = { 0x3F258C7A, 0x1E213F2F, 0x30FB40D4, 0x9FA0FF0B, 0x6BECCD2F, 0x9C004DD3, 0x6003E540 };
  CSigs[i++] = NewCryptSig("cast", L6 , 7, NULL, 0, -4, 0, CRYPT_SIG_DWORD);

  unsigned long  L7[] = { 0x7789F8B7, 0xE6C1121B, 0xE216300D, 0xBBDDFFFC, 0xA7EBDABD, 0x35648095, 0x0E241600 };
  CSigs[i++] = NewCryptSig("cast", L7 , 7, NULL, 0, -4, 0, CRYPT_SIG_DWORD);
  
  unsigned long  L8[] = { 0x000000D2, 0x000000D3, 0x000000D4, 0x000000D5, 0x000000D6, 0x000000D7, 0x000000D8, 0x000000D9,
                          0x000000DA, 0x000000DB, 0x000000DC, 0x000000DD, 0x000000DE, 0x000000DF, 0x000000E0, 0x000000E1,
                          0x000000E2, 0x000000E3, 0x000000E4, 0x000000E5, 0x000000E6, 0x000000E7, 0x000000E8, 0x000000E9,
                          0x000000EA, 0x000000EB, 0x000000EC, 0x000000ED, 0x000000EE, 0x000000EF, 0x000000F0, 0x000000F1,
                          0x000000F2, 0x000000F3, 0x000000F4, 0x000000F5, 0x000000F6, 0x000000F7, 0x000000F8, 0x000000F9,
                          0x000000FA, 0x000000FB, 0x000000FC, 0x000000FD, 0x000000FE, 0x000000FF, 0x00000000, 0x00000001,
                          0x00000002, 0x00000003, 0x00000004, 0x00000005, 0x00000006, 0x00000007, 0x00000008, 0x00000009,
                          0x0000000A, 0x0000000B, 0x00000005, 0x00000006, 0x00000007, 0x00000008, 0x00000009, 0x0000000A,
                          0x0000000B, 0x0000000C, 0x0000000D, 0x0000000E, 0x0000000F, 0x00000010, 0x00000011, 0x00000012,
                          0x00000013, 0x00000014, 0x00000015, 0x00000016, 0x00000017, 0x00000018, 0x00000019, 0x0000001A,
                          0x0000001B, 0x0000001C, 0x0000001D, 0x0000001E, 0x0000001F, 0x00000020, 0x00000021, 0x00000022,
                          0x00000023, 0x00000024, 0x00000025, 0x00000020, 0x00000021, 0x00000022, 0x00000023, 0x00000024,
                          0x00000025, 0x00000026, 0x00000027, 0x00000028, 0x00000029, 0x0000002A, 0x0000002B, 0x0000002C,
                          0x0000002D, 0x0000002E, 0x0000002F, 0x00000030, 0x00000031, 0x00000032, 0x00000033, 0x00000034,
                          0x00000035, 0x00000036, 0x00000037, 0x00000038, 0x00000039, 0x0000003A, 0x0000003B, 0x0000003C,
                          0x0000003D, 0x0000003E, 0x0000003F, 0x00000040, 0x00000041, 0x00000042, 0x00000043, 0x00000044 };
  CSigs[i++] = NewCryptSig("des", L8 , 128, NULL, 0, -4, 0, CRYPT_SIG_DWORD);
  
  unsigned long  L9[] = { 0x0000002E, 0x0000002F, 0x00000030, 0x00000031, 0x00000032, 0x00000033, 0x00000034, 0x00000035,
                          0x00000036, 0x00000037, 0x00000038, 0x00000039, 0x00000041, 0x00000042, 0x00000043, 0x00000044,
                          0x00000045, 0x00000046, 0x00000047, 0x00000048, 0x00000049, 0x0000004A, 0x0000004B, 0x0000004C,
                          0x0000004D, 0x0000004E, 0x0000004F, 0x00000050, 0x00000051, 0x00000052, 0x00000053, 0x00000054,
                          0x00000055, 0x00000056, 0x00000057, 0x00000058, 0x00000059, 0x0000005A, 0x00000061, 0x00000062,
                          0x00000063, 0x00000064, 0x00000065, 0x00000066, 0x00000067, 0x00000068, 0x00000069, 0x0000006A,
                          0x0000006B, 0x0000006C, 0x0000006D, 0x0000006E, 0x0000006F, 0x00000070, 0x00000071, 0x00000072,
                          0x00000073, 0x00000074, 0x00000075, 0x00000076, 0x00000077, 0x00000078, 0x00000079, 0x0000007A };
  CSigs[i++] = NewCryptSig("des", L9, 64, NULL, 0, -4, 0, CRYPT_SIG_DWORD);
  
  unsigned long L10[] = { 0x02080800, 0x00080000, 0x02000002, 0x02080802, 0x00000802, 
                          0x40108010, 0x40000010, 0x00008000, 0x00108010, 0x40008010,
                          0x40108010, 0x40000010, 0x00008000, 0x00108010, 0x40008010,
                          0x20800080, 0x20820080, 0x00820000, 0x01004004, 0x01004204 };
  CSigs[i++] = NewCryptSig("des", L10, 10, NULL, 0, -4, 0, CRYPT_SIG_DWORD);
  
  unsigned long L11[] = { 0x00000029, 0x0000002E, 0x00000043, 0x000000C9, 0x000000A2, 0x000000D8, 0x0000007C, 0x00000001,
                          0x0000003D, 0x00000036, 0x00000054, 0x000000A1, 0x000000EC, 0x000000F0, 0x00000006, 0x00000013,
                          0x00000062, 0x000000A7, 0x00000005, 0x000000F3, 0x000000C0, 0x000000C7, 0x00000073, 0x0000008C,
                          0x00000098, 0x00000093, 0x0000002B, 0x000000D9, 0x000000BC, 0x0000004C, 0x00000082, 0x000000CA,
                          0x0000001E, 0x0000009B, 0x00000057, 0x0000003C, 0x000000FD, 0x000000D4, 0x000000E0, 0x00000016,
                          0x00000067, 0x00000042, 0x0000006F, 0x00000018, 0x0000008A, 0x00000017, 0x000000E5, 0x00000012,
                          0x000000BE, 0x0000004E, 0x000000C4, 0x000000D6, 0x000000DA, 0x0000009E, 0x000000DE, 0x00000049,
                          0x000000A0, 0x000000FB, 0x000000F5, 0x0000008E, 0x000000BB, 0x0000002F, 0x000000EE, 0x0000007A,
                          0x000000A9, 0x00000068, 0x00000079, 0x00000091, 0x00000015, 0x000000B2, 0x00000007, 0x0000003F,
                          0x00000094, 0x000000C2, 0x00000010, 0x00000089, 0x0000000B, 0x00000022, 0x0000005F, 0x00000021,
                          0x00000080, 0x0000007F, 0x0000005D, 0x0000009A, 0x0000005A, 0x00000090, 0x00000032, 0x00000027,
                          0x00000035, 0x0000003E, 0x000000CC, 0x000000E7, 0x000000BF, 0x000000F7, 0x00000097, 0x00000003,
                          0x000000FF, 0x00000019, 0x00000030, 0x000000B3, 0x00000048, 0x000000A5, 0x000000B5, 0x000000D1,
                          0x000000D7, 0x0000005E, 0x00000092, 0x0000002A, 0x000000AC, 0x00000056, 0x000000AA, 0x000000C6,
                          0x0000004F, 0x000000B8, 0x00000038, 0x000000D2, 0x00000096, 0x000000A4, 0x0000007D, 0x000000B6,
                          0x00000076, 0x000000FC, 0x0000006B, 0x000000E2, 0x0000009C, 0x00000074, 0x00000004, 0x000000F1,
                          0x00000045, 0x0000009D, 0x00000070, 0x00000059, 0x00000064, 0x00000071, 0x00000087, 0x00000020,
                          0x00000086, 0x0000005B, 0x000000CF, 0x00000065, 0x000000E6, 0x0000002D, 0x000000A8, 0x00000002,
                          0x0000001B, 0x00000060, 0x00000025, 0x000000AD, 0x000000AE, 0x000000B0, 0x000000B9, 0x000000F6,
                          0x0000001C, 0x00000046, 0x00000061, 0x00000069, 0x00000034, 0x00000040, 0x0000007E, 0x0000000F,
                          0x00000055, 0x00000047, 0x000000A3, 0x00000023, 0x000000DD, 0x00000051, 0x000000AF, 0x0000003A,
                          0x000000C3, 0x0000005C, 0x000000F9, 0x000000CE, 0x000000BA, 0x000000C5, 0x000000EA, 0x00000026,
                          0x0000002C, 0x00000053, 0x0000000D, 0x0000006E, 0x00000085, 0x00000028, 0x00000084, 0x00000009,
                          0x000000D3, 0x000000DF, 0x000000CD, 0x000000F4, 0x00000041, 0x00000081, 0x0000004D, 0x00000052,
                          0x0000006A, 0x000000DC, 0x00000037, 0x000000C8, 0x0000006C, 0x000000C1, 0x000000AB, 0x000000FA,
                          0x00000024, 0x000000E1, 0x0000007B, 0x00000008, 0x0000000C, 0x000000BD, 0x000000B1, 0x0000004A,
                          0x00000078, 0x00000088, 0x00000095, 0x0000008B, 0x000000E3, 0x00000063, 0x000000E8, 0x0000006D,
                          0x000000E9, 0x000000CB, 0x000000D5, 0x000000FE, 0x0000003B, 0x00000000, 0x0000001D, 0x00000039,
                          0x000000F2, 0x000000EF, 0x000000B7, 0x0000000E, 0x00000066, 0x00000058, 0x000000D0, 0x000000E4,
                          0x000000A6, 0x00000077, 0x00000072, 0x000000F8, 0x000000EB, 0x00000075, 0x0000004B, 0x0000000A,
                          0x00000031, 0x00000044, 0x00000050, 0x000000B4, 0x0000008F, 0x000000ED, 0x0000001F, 0x0000001A,
                          0x000000DB, 0x00000099, 0x0000008D, 0x00000033, 0x0000009F, 0x00000011, 0x00000083, 0x00000014 };
  CSigs[i++] = NewCryptSig("md2", L11, 256, NULL, 0, -4, 0, CRYPT_SIG_DWORD);         
  
  unsigned long L12[] = { 0x000000d9, 0x00000078, 0x000000f9, 0x000000c4, 0x00000019, 0x000000dd, 0x000000b5, 0x000000ed,
                          0x00000028, 0x000000e9, 0x000000fd, 0x00000079, 0x0000004a, 0x000000a0, 0x000000d8, 0x0000009d,
                          0x000000c6, 0x0000007e, 0x00000037, 0x00000083, 0x0000002b, 0x00000076, 0x00000053, 0x0000008e,
                          0x00000062, 0x0000004c, 0x00000064, 0x00000088, 0x00000044, 0x0000008b, 0x000000fb, 0x000000a2,
                          0x00000017, 0x0000009a, 0x00000059, 0x000000f5, 0x00000087, 0x000000b3, 0x0000004f, 0x00000013,
                          0x00000061, 0x00000045, 0x0000006d, 0x0000008d, 0x00000009, 0x00000081, 0x0000007d, 0x00000032,
	                  0x000000bd, 0x0000008f, 0x00000040, 0x000000eb, 0x00000086, 0x000000b7, 0x0000007b, 0x0000000b,
                          0x000000f0, 0x00000095, 0x00000021, 0x00000022, 0x0000005c, 0x0000006b, 0x0000004e, 0x00000082,
                          0x00000054, 0x000000d6, 0x00000065, 0x00000093, 0x000000ce, 0x00000060, 0x000000b2, 0x0000001c,
                          0x00000073, 0x00000056, 0x000000c0, 0x00000014, 0x000000a7, 0x0000008c, 0x000000f1, 0x000000dc,
                          0x00000012, 0x00000075, 0x000000ca, 0x0000001f, 0x0000003b, 0x000000be, 0x000000e4, 0x000000d1,
                          0x00000042, 0x0000003d, 0x000000d4, 0x00000030, 0x000000a3, 0x0000003c, 0x000000b6, 0x00000026,
                          0x0000006f, 0x000000bf, 0x0000000e, 0x000000da, 0x00000046, 0x00000069, 0x00000007, 0x00000057,
                          0x00000027, 0x000000f2, 0x0000001d, 0x0000009b, 0x000000bc, 0x00000094, 0x00000043, 0x00000003,
                          0x000000f8, 0x00000011, 0x000000c7, 0x000000f6, 0x00000090, 0x000000ef, 0x0000003e, 0x000000e7,
                          0x00000006, 0x000000c3, 0x000000d5, 0x0000002f, 0x000000c8, 0x00000066, 0x0000001e, 0x000000d7,
                          0x00000008, 0x000000e8, 0x000000ea, 0x000000de, 0x00000080, 0x00000052, 0x000000ee, 0x000000f7,
                          0x00000084, 0x000000aa, 0x00000072, 0x000000ac, 0x00000035, 0x0000004d, 0x0000006a, 0x0000002a,
                          0x00000096, 0x0000001a, 0x000000d2, 0x00000071, 0x0000005a, 0x00000015, 0x00000049, 0x00000074,
                          0x0000004b, 0x0000009f, 0x000000d0, 0x0000005e, 0x00000004, 0x00000018, 0x000000a4, 0x000000ec,
                          0x000000c2, 0x000000e0, 0x00000041, 0x0000006e, 0x0000000f, 0x00000051, 0x000000cb, 0x000000cc,
                          0x00000024, 0x00000091, 0x000000af, 0x00000050, 0x000000a1, 0x000000f4, 0x00000070, 0x00000039,
                          0x00000099, 0x0000007c, 0x0000003a, 0x00000085, 0x00000023, 0x000000b8, 0x000000b4, 0x0000007a,
                          0x000000fc, 0x00000002, 0x00000036, 0x0000005b, 0x00000025, 0x00000055, 0x00000097, 0x00000031,
                          0x0000002d, 0x0000005d, 0x000000fa, 0x00000098, 0x000000e3, 0x0000008a, 0x00000092, 0x000000ae,
                          0x00000005, 0x000000df, 0x00000029, 0x00000010, 0x00000067, 0x0000006c, 0x000000ba, 0x000000c9,
                          0x000000d3, 0x00000000, 0x000000e6, 0x000000cf, 0x000000e1, 0x0000009e, 0x000000a8, 0x0000002c,
                          0x00000063, 0x00000016, 0x00000001, 0x0000003f, 0x00000058, 0x000000e2, 0x00000089, 0x000000a9,
                          0x0000000d, 0x00000038, 0x00000034, 0x0000001b, 0x000000ab, 0x00000033, 0x000000ff, 0x000000b0,
                          0x000000bb, 0x00000048, 0x0000000c, 0x0000005f, 0x000000b9, 0x000000b1, 0x000000cd, 0x0000002e,
                          0x000000c5, 0x000000f3, 0x000000db, 0x00000047, 0x000000e5, 0x000000a5, 0x0000009c, 0x00000077,
                          0x0000000a, 0x000000a6, 0x00000020, 0x00000068, 0x000000fe, 0x0000007f, 0x000000c1, 0x000000ad };
  CSigs[i++] = NewCryptSig("rc2", L12, 256, NULL, 0, -4, 0, CRYPT_SIG_DWORD);   
  
  unsigned long L13[] = { 0x00000000, 0x77073096, 0xEE0E612C, 0x990951BA, 0x076DC419, 0x706AF48F, 0xE963A535, 0x9E6495A3,
                          0x0EDB8832, 0x79DCB8A4, 0xE0D5E91E, 0x97D2D988, 0x09B64C2B, 0x7EB17CBD, 0xE7B82D07, 0x90BF1D91 };
  CSigs[i++] = NewCryptSig("crc32", L13, 16, NULL, 0, -4, 0, CRYPT_SIG_DWORD);   

  unsigned long L14[] = { 0xEFCDAB89, 0x10325476, 0x67452301, 0x98BADCFE, 0xC3D2E1F0 };
  CSigs[i++] = NewCryptSig("sha", L14 , 5, NULL, 0, -4, 0, CRYPT_SIG_DWORD);

  unsigned long L15[] = { 0x00000001, 0x52525252, 0x52525252, 0x25252525, 0x25252525 };
  CSigs[i++] = NewCryptSig("mdc2", L15 , 5, NULL, 0, -4, 0, CRYPT_SIG_DWORD);
                                
  CSigs[i++] = NULL;

}

[/FONT][/COLOR]


有人补充吗?

[培训]内核驱动高级班,冲击BAT一流互联网大厂工作,每周日13:00-18:00直播授课

收藏
免费 0
支持
分享
最新回复 (13)
雪    币: 3686
活跃值: (1036)
能力值: (RANK:760 )
在线值:
发帖
回帖
粉丝
2
很好!
我的补充:

Rijndael S-box
                            y
     0 1  2  3  4  5  6  7  8  9  a  b  c  d  e  f
  0 63 7c 77 7b f2 6b 6f c5 30 01 67 2b fe d7 ab 76
  1 ca 82 c9 7d fa 59 47 f0 ad d4 a2 af 9c a4 72 c0
  2 b7 fd 93 26 36 3f f7 cc 34 a5 e5 f1 71 d8 31 15
  3 04 c7 23 c3 18 96 05 9a 07 12 80 e2 eb 27 b2 75
  4 09 83 2c 1a 1b 6e 5a a0 52 3b d6 b3 29 e3 2f 84
  5 53 d1 00 ed 20 fc b1 5b 6a cb be 39 4a 4c 58 cf
x 6 d0 ef aa fb 43 4d 33 85 45 f9 02 7f 50 3c 9f a8
  7 51 a3 40 8f 92 9d 38 f5 bc b6 da 21 10 ff f3 d2
  8 cd 0c 13 ec 5f 97 44 17 c4 a7 7e 3d 64 5d 19 73
  9 60 81 4f dc 22 2a 90 88 46 ee b8 14 de 5e 0b db
  a e0 32 3a 0a 49 06 24 5c c2 d3 ac 62 91 95 e4 79
  b e7 c8 37 6d 8d d5 4e a9 6c 56 f4 ea 65 7a ae 08
  c ba 78 25 2e 1c a6 b4 c6 e8 dd 74 1f 4b bd 8b 8a
  d 70 3e b5 66 48 03 f6 0e 61 35 57 b9 86 c1 1d 9e
  e e1 f8 98 11 69 d9 8e 94 9b 1e 87 e9 ce 55 28 df
  f 8c a1 89 0d bf e6 42 68 41 99 2d 0f b0 54 bb 16

Inverse S-box
                  y
     0  1  2  3  4  5  6  7  8  9  a  b  c  d  e  f
  0 52 09 6a d5 30 36 a5 38 bf 40 a3 9e 81 f3 d7 fb
  1 7c e3 39 82 9b 2f ff 87 34 8e 43 44 c4 de e9 cb
  2 54 7b 94 32 a6 c2 23 3d ee 4c 95 0b 42 fa c3 4e
  3 08 2e a1 66 28 d9 24 b2 76 5b a2 49 6d 8b d1 25
  4 72 f8 f6 64 86 68 98 16 d4 a4 5c cc 5d 65 b6 92
  5 6c 70 48 50 fd ed b9 da 5e 15 46 57 a7 8d 9d 84
x 6 90 d8 ab 00 8c bc d3 0a f7 e4 58 05 b8 b3 45 06
  7 d0 2c 1e 8f ca 3f 0f 02 c1 af bd 03 01 13 8a 6b
  8 3a 91 11 41 4f 67 dc ea 97 f2 cf ce f0 b4 e6 73
  9 96 ac 74 22 e7 ad 35 85 e2 f9 37 e8 1c 75 df 6e
  a 47 f1 1a 71 1d 29 c5 89 6f b7 62 0e aa 18 be 1b
  b fc 56 3e 4b c6 d2 79 20 9a db c0 fe 78 cd 5a f4
  c 1f dd a8 33 88 07 c7 31 b1 12 10 59 27 80 ec 5f
  d 60 51 7f a9 19 b5 4a 0d 2d e5 7a 9f 93 c9 9c ef
  e a0 e0 3b 4d ae 2a f5 b0 c8 eb bb 3c 83 53 99 61
  f 17 2b 04 7e ba 77 d6 26 e1 69 14 63 55 21 0c 7d

TEA/TEAN
#define DELTA 0x9e3779b9 (also used in RC5,RC6)

RC5/RC6

WORD P = 0xb7e15163, Q = 0x9e3779b9;  /* magic constants */

Skipjack (AES后选算法之一)

static const byte fTable[256] = {
        0xa3,0xd7,0x09,0x83,0xf8,0x48,0xf6,0xf4,0xb3,0x21,0x15,0x78,0x99,0xb1,0xaf,0xf9,
        0xe7,0x2d,0x4d,0x8a,0xce,0x4c,0xca,0x2e,0x52,0x95,0xd9,0x1e,0x4e,0x38,0x44,0x28,
        0x0a,0xdf,0x02,0xa0,0x17,0xf1,0x60,0x68,0x12,0xb7,0x7a,0xc3,0xe9,0xfa,0x3d,0x53,
        0x96,0x84,0x6b,0xba,0xf2,0x63,0x9a,0x19,0x7c,0xae,0xe5,0xf5,0xf7,0x16,0x6a,0xa2,
        0x39,0xb6,0x7b,0x0f,0xc1,0x93,0x81,0x1b,0xee,0xb4,0x1a,0xea,0xd0,0x91,0x2f,0xb8,
        0x55,0xb9,0xda,0x85,0x3f,0x41,0xbf,0xe0,0x5a,0x58,0x80,0x5f,0x66,0x0b,0xd8,0x90,
        0x35,0xd5,0xc0,0xa7,0x33,0x06,0x65,0x69,0x45,0x00,0x94,0x56,0x6d,0x98,0x9b,0x76,
        0x97,0xfc,0xb2,0xc2,0xb0,0xfe,0xdb,0x20,0xe1,0xeb,0xd6,0xe4,0xdd,0x47,0x4a,0x1d,
        0x42,0xed,0x9e,0x6e,0x49,0x3c,0xcd,0x43,0x27,0xd2,0x07,0xd4,0xde,0xc7,0x67,0x18,
        0x89,0xcb,0x30,0x1f,0x8d,0xc6,0x8f,0xaa,0xc8,0x74,0xdc,0xc9,0x5d,0x5c,0x31,0xa4,
        0x70,0x88,0x61,0x2c,0x9f,0x0d,0x2b,0x87,0x50,0x82,0x54,0x64,0x26,0x7d,0x03,0x40,
        0x34,0x4b,0x1c,0x73,0xd1,0xc4,0xfd,0x3b,0xcc,0xfb,0x7f,0xab,0xe6,0x3e,0x5b,0xa5,
        0xad,0x04,0x23,0x9c,0x14,0x51,0x22,0xf0,0x29,0x79,0x71,0x7e,0xff,0x8c,0x0e,0xe2,
        0x0c,0xef,0xbc,0x72,0x75,0x6f,0x37,0xa1,0xec,0xd3,0x8e,0x62,0x8b,0x86,0x10,0xe8,
        0x08,0x77,0x11,0xbe,0x92,0x4f,0x24,0xc5,0x32,0x36,0x9d,0xcf,0xf3,0xa6,0xbb,0xac,
        0x5e,0x6c,0xa9,0x13,0x57,0x25,0xb5,0xe3,0xbd,0xa8,0x3a,0x01,0x05,0x59,0x2a,0x46}

其实大部分的常见的对称加密算法和一些大数库的识别,如miracl,biglib,这些工作kanal23,cryptosearcher等工具都做的相当不错了.kanal23的作者snaker把源码公开给了x3chun然后就有了cryptosearcher
2005-2-18 21:24
0
雪    币: 212
活跃值: (105)
能力值: ( LV6,RANK:90 )
在线值:
发帖
回帖
粉丝
3
x3chun的cryptosearcher也受益过CryptoCalc作者的某些源码...不过他从来没有提到过啦...
2005-2-18 23:56
0
雪    币: 203
活跃值: (10)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
4
好贴!但没有S-BOX的公开密匙算法就没辙了....
2005-2-19 09:40
0
雪    币: 203
活跃值: (10)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
5
Mars S-BOX:

Sbox : array[0..511] of longint = (
$09d0c479, $28c8ffe0, $84aa6c39, $9dad7287, $7dff9be3, $d4268361,
$c96da1d4, $7974cc93, $85d0582e, $2a4b5705, $1ca16a62, $c3bd279d,
$0f1f25e5, $5160372f, $c695c1fb, $4d7ff1e4, $ae5f6bf4, $0d72ee46,
$ff23de8a, $b1cf8e83, $f14902e2, $3e981e42, $8bf53eb6, $7f4bf8ac,
$83631f83, $25970205, $76afe784, $3a7931d4, $4f846450, $5c64c3f6,
$210a5f18, $c6986a26, $28f4e826, $3a60a81c, $d340a664, $7ea820c4,
$526687c5, $7eddd12b, $32a11d1d, $9c9ef086, $80f6e831, $ab6f04ad,
$56fb9b53, $8b2e095c, $b68556ae, $d2250b0d, $294a7721, $e21fb253,
$ae136749, $e82aae86, $93365104, $99404a66, $78a784dc, $b69ba84b,
$04046793, $23db5c1e, $46cae1d6, $2fe28134, $5a223942, $1863cd5b,
$c190c6e3, $07dfb846, $6eb88816, $2d0dcc4a, $a4ccae59, $3798670d,
$cbfa9493, $4f481d45, $eafc8ca8, $db1129d6, $b0449e20, $0f5407fb,
$6167d9a8, $d1f45763, $4daa96c3, $3bec5958, $ababa014, $b6ccd201,
$38d6279f, $02682215, $8f376cd5, $092c237e, $bfc56593, $32889d2c,
$854b3e95, $05bb9b43, $7dcd5dcd, $a02e926c, $fae527e5, $36a1c330,
$3412e1ae, $f257f462, $3c4f1d71, $30a2e809, $68e5f551, $9c61ba44,
$5ded0ab8, $75ce09c8, $9654f93e, $698c0cca, $243cb3e4, $2b062b97,
$0f3b8d9e, $00e050df, $fc5d6166, $e35f9288, $c079550d, $0591aee8,
$8e531e74, $75fe3578, $2f6d829a, $f60b21ae, $95e8eb8d, $6699486b,
$901d7d9b, $fd6d6e31, $1090acef, $e0670dd8, $dab2e692, $cd6d4365,
$e5393514, $3af345f0, $6241fc4d, $460da3a3, $7bcf3729, $8bf1d1e0,
$14aac070, $1587ed55, $3afd7d3e, $d2f29e01, $29a9d1f6, $efb10c53,
$cf3b870f, $b414935c, $664465ed, $024acac7, $59a744c1, $1d2936a7,
$dc580aa6, $cf574ca8, $040a7a10, $6cd81807, $8a98be4c, $accea063,
$c33e92b5, $d1e0e03d, $b322517e, $2092bd13, $386b2c4a, $52e8dd58,
$58656dfb, $50820371, $41811896, $e337ef7e, $d39fb119, $c97f0df6,
$68fea01b, $a150a6e5, $55258962, $eb6ff41b, $d7c9cd7a, $a619cd9e,
$bcf09576, $2672c073, $f003fb3c, $4ab7a50b, $1484126a, $487ba9b1,
$a64fc9c6, $f6957d49, $38b06a75, $dd805fcd, $63d094cf, $f51c999e,
$1aa4d343, $b8495294, $ce9f8e99, $bffcd770, $c7c275cc, $378453a7,
$7b21be33, $397f41bd, $4e94d131, $92cc1f98, $5915ea51, $99f861b7,
$c9980a88, $1d74fd5f, $b0a495f8, $614deed0, $b5778eea, $5941792d,
$fa90c1f8, $33f824b4, $c4965372, $3ff6d550, $aca5fec0, $8630e964,
$5b3fbbd6, $7da26a48, $b203231a, $04297514, $2d639306, $2eb13149,
$16a45272, $532459a0, $8e5f4872, $f966c7d9, $07128dc0, $0d44db62,
$afc8d52d, $06316131, $d838e7ce, $1bc41d00, $3a2e8c0f, $ea83837e,
$b984737d, $13ba4891, $c4f8b949, $a6d6acb3, $a215cdce, $8359838b,
$6bd1aa31, $f579dd52, $21b93f93, $f5176781, $187dfdde, $e94aeb76,
$2b38fd54, $431de1da, $ab394825, $9ad3048f, $dfea32aa, $659473e3,
$623f7863, $f3346c59, $ab3ab685, $3346a90b, $6b56443e, $c6de01f8,
$8d421fc0, $9b0ed10c, $88f1a1e9, $54c1f029, $7dead57b, $8d7ba426,
$4cf5178a, $551a7cca, $1a9a5f08, $fcd651b9, $25605182, $e11fc6c3,
$b6fd9676, $337b3027, $b7c8eb14, $9e5fd030,

$6b57e354, $ad913cf7, $7e16688d, $58872a69, $2c2fc7df, $e389ccc6,
$30738df1, $0824a734, $e1797a8b, $a4a8d57b, $5b5d193b, $c8a8309b,
$73f9a978, $73398d32, $0f59573e, $e9df2b03, $e8a5b6c8, $848d0704,
$98df93c2, $720a1dc3, $684f259a, $943ba848, $a6370152, $863b5ea3,
$d17b978b, $6d9b58ef, $0a700dd4, $a73d36bf, $8e6a0829, $8695bc14,
$e35b3447, $933ac568, $8894b022, $2f511c27, $ddfbcc3c, $006662b6,
$117c83fe, $4e12b414, $c2bca766, $3a2fec10, $f4562420, $55792e2a,
$46f5d857, $ceda25ce, $c3601d3b, $6c00ab46, $efac9c28, $b3c35047,
$611dfee3, $257c3207, $fdd58482, $3b14d84f, $23becb64, $a075f3a3,
$088f8ead, $07adf158, $7796943c, $facabf3d, $c09730cd, $f7679969,
$da44e9ed, $2c854c12, $35935fa3, $2f057d9f, $690624f8, $1cb0bafd,
$7b0dbdc6, $810f23bb, $fa929a1a, $6d969a17, $6742979b, $74ac7d05,
$010e65c4, $86a3d963, $f907b5a0, $d0042bd3, $158d7d03, $287a8255,
$bba8366f, $096edc33, $21916a7b, $77b56b86, $951622f9, $a6c5e650,
$8cea17d1, $cd8c62bc, $a3d63433, $358a68fd, $0f9b9d3c, $d6aa295b,
$fe33384a, $c000738e, $cd67eb2f, $e2eb6dc2, $97338b02, $06c9f246,
$419cf1ad, $2b83c045, $3723f18a, $cb5b3089, $160bead7, $5d494656,
$35f8a74b, $1e4e6c9e, $000399bd, $67466880, $b4174831, $acf423b2,
$ca815ab3, $5a6395e7, $302a67c5, $8bdb446b, $108f8fa4, $10223eda,
$92b8b48b, $7f38d0ee, $ab2701d4, $0262d415, $af224a30, $b3d88aba,
$f8b2c3af, $daf7ef70, $cc97d3b7, $e9614b6c, $2baebff4, $70f687cf,
$386c9156, $ce092ee5, $01e87da6, $6ce91e6a, $bb7bcc84, $c7922c20,
$9d3b71fd, $060e41c6, $d7590f15, $4e03bb47, $183c198e, $63eeb240,
$2ddbf49a, $6d5cba54, $923750af, $f9e14236, $7838162b, $59726c72,
$81b66760, $bb2926c1, $48a0ce0d, $a6c0496d, $ad43507b, $718d496a,
$9df057af, $44b1bde6, $054356dc, $de7ced35, $d51a138b, $62088cc9,
$35830311, $c96efca2, $686f86ec, $8e77cb68, $63e1d6b8, $c80f9778,
$79c491fd, $1b4c67f2, $72698d7d, $5e368c31, $f7d95e2e, $a1d3493f,
$dcd9433e, $896f1552, $4bc4ca7a, $a6d1baf4, $a5a96dcc, $0bef8b46,
$a169fda7, $74df40b7, $4e208804, $9a756607, $038e87c8, $20211e44,
$8b7ad4bf, $c6403f35, $1848e36d, $80bdb038, $1e62891c, $643d2107,
$bf04d6f8, $21092c8c, $f644f389, $0778404e, $7b78adb8, $a2c52d53,
$42157abe, $a2253e2e, $7bf3f4ae, $80f594f9, $953194e7, $77eb92ed,
$b3816930, $da8d9336, $bf447469, $f26d9483, $ee6faed5, $71371235,
$de425f73, $b4e59f43, $7dbe2d4e, $2d37b185, $49dc9a63, $98c39d98,
$1301c9a2, $389b1bbf, $0c18588d, $a421c1ba, $7aa3865c, $71e08558,
$3c5cfcaa, $7d239ca4, $0297d9dd, $d7dc2830, $4b37802b, $7428ab54,
$aeee0347, $4b3fbb85, $692f2f08, $134e578e, $36d9e0bf, $ae8b5fcf,
$edb93ecf, $2b27248e, $170eb1ef, $7dc57fd6, $1e760f16, $b1136601,
$864e1b9b, $d7ea7319, $3ab871bd, $cfa4d76f, $e31bd782, $0dbeb469,
$abb96061, $5370f85d, $ffb07e37, $da30d0fb, $ebc977b6, $0b98b40f,
$3a4d0fe6, $df4fc26b, $159cf22a, $c298d6e2, $2b78ef6a, $61a94ac0,
$ab561187, $14eea0f0, $df0d4164, $19af70ee);
2005-2-19 09:49
0
雪    币: 161
活跃值: (231)
能力值: ( LV4,RANK:50 )
在线值:
发帖
回帖
粉丝
6
下一步,建立网上绝大部分的加密库的特征值。这样在了解加密库后可以自己制作IDA的SIG文件,对解密也会有很大的帮助。等下我将会做一个例子出来。广大密友也可自行发挥哦!
2005-2-19 11:19
0
雪    币: 3686
活跃值: (1036)
能力值: (RANK:760 )
在线值:
发帖
回帖
粉丝
7
这个工作,black-eye已经做的差不多了
2005-2-19 11:33
0
雪    币: 161
活跃值: (231)
能力值: ( LV4,RANK:50 )
在线值:
发帖
回帖
粉丝
8
最初由 cnbragon 发布
这个工作,black-eye已经做的差不多了

black-eye制作的sig在没有加载相对应的加密库的情况下并没有指出用到了哪种加密库。
2005-2-19 14:32
0
雪    币: 200
活跃值: (10)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
ASM
9
这种方法实在不可靠,改变一下算法预处理和S-BOX,就可以在输出标准值的情况下无法被识别。如果在不要求标准值的情况下,更是……
2005-2-21 03:11
0
雪    币: 161
活跃值: (231)
能力值: ( LV4,RANK:50 )
在线值:
发帖
回帖
粉丝
10
呵呵,人工智能识别我还没有那个本事
2005-2-21 10:48
0
雪    币: 203
活跃值: (10)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
11
随意修改S-BOX是否会对算法的安全性造成不利影响?
2005-2-22 15:04
0
雪    币: 161
活跃值: (231)
能力值: ( LV4,RANK:50 )
在线值:
发帖
回帖
粉丝
12
不利影响,我想只有专家才分析得出来吧
2005-2-22 16:48
0
雪    币: 203
活跃值: (10)
能力值: ( LV2,RANK:10 )
在线值:
发帖
回帖
粉丝
13
感觉这个方法还是没多大用处,很容易就能愚弄Kanal,让你无谓地转半天...
2005-3-4 18:10
0
雪    币: 205
活跃值: (171)
能力值: ( LV4,RANK:50 )
在线值:
发帖
回帖
粉丝
14
很有用,希望斑竹把讨论结果整理一下啦
2005-3-6 10:59
0
游客
登录 | 注册 方可回帖
返回
//