This forum is in archive mode. You will not be able to post new content.

Author Topic: Identify encryption?  (Read 4620 times)

0 Members and 1 Guest are viewing this topic.

Offline Kulverstukas

  • Administrator
  • Zeus
  • *
  • Posts: 6627
  • Cookies: 542
  • Fascist dictator
    • View Profile
    • My blog
Identify encryption?
« on: April 11, 2011, 08:30:43 PM »
Hello.
So I'm wondering are there tools that would help identify encryption used on files?
Let's say I have a huge text file which is encrypted. How do I see what kind of encryption is it?

Offline ca0s

  • VIP
  • Sir
  • *
  • Posts: 432
  • Cookies: 53
    • View Profile
    • ka0labs #
Re: Identify encryption?
« Reply #1 on: April 11, 2011, 08:35:57 PM »
Well, apart of obvious encryptions like bas64, which are indetified instantly, there are encryptions which you cannot tell they are present. aes256, etc.
This is becouse those algorythms generate a string which looks random, but it is not. If we have something like
Quote
asfsds4agr4ยท$56ds4$a:24ds64r75r
How do you tell how is it encrypted? It could be anything. Read this (second message)
Code: [Select]
http://forums.devshed.com/security-and-cryptography-17/identifying-the-encryption-type-373304.html

Offline ande

  • Owner
  • Titan
  • *
  • Posts: 2664
  • Cookies: 256
    • View Profile
Re: Identify encryption?
« Reply #2 on: April 11, 2011, 09:01:35 PM »
I don't know any existing one, but sounds like a interesting project ;) Maye make one by/for evilzone?
if($statement) { unless(!$statement) { // Very sure } }
https://evilzone.org/?hack=true

Offline ca0s

  • VIP
  • Sir
  • *
  • Posts: 432
  • Cookies: 53
    • View Profile
    • ka0labs #
Re: Identify encryption?
« Reply #3 on: April 11, 2011, 09:14:21 PM »
I don't know any existing one, but sounds like a interesting project ;) Maye make one by/for evilzone?
Well, you can easily identify hashes like md5, sha1, etc, or simple encryptions like b64. But with not-hash encryptions, with low data patterns repetition ratio, it is impossible to determine unless it has any kind of header, like the ones that are at the begining of PGP crypted messages.

Offline Kulverstukas

  • Administrator
  • Zeus
  • *
  • Posts: 6627
  • Cookies: 542
  • Fascist dictator
    • View Profile
    • My blog
Re: Identify encryption?
« Reply #4 on: April 11, 2011, 09:48:06 PM »
if anyone wants I could upload the text file that I have. See if you can h4x it :P

Offline ande

  • Owner
  • Titan
  • *
  • Posts: 2664
  • Cookies: 256
    • View Profile
Re: Identify encryption?
« Reply #5 on: April 11, 2011, 09:59:01 PM »
Well, you can easily identify hashes like md5, sha1, etc, or simple encryptions like b64. But with not-hash encryptions, with low data patterns repetition ratio, it is impossible to determine unless it has any kind of header, like the ones that are at the begining of PGP crypted messages.

Yah, but that means we can also make the tool tell the user what it is not ;)
if($statement) { unless(!$statement) { // Very sure } }
https://evilzone.org/?hack=true

 



Want to be here? Contact Ande, Factionwars or Kulverstukas on the forum or at IRC.